Privacy Policy

1. Information the site and workspace handle

We handle information needed to provide the service and information that you choose to enter or request. The categories below describe the current public site and workspace flows. You decide what employee, workplace, or incident information to put into a record, and you should enter only information your organization is authorized to use.

Account, authentication, and support

Account and authentication services may handle your account identifier, email address, sign-in state, password credential, and related account details. They may also handle a password recovery or reset request and information needed to complete that request. If you contact support by email, we receive your email address, message, and other details you choose to include. The current support address is form300logbooksupport@gmail.com.

Business and workplace information

You may enter a company or employer name, establishment name, physical address, EIN, state, ZIP code, NAICS code, industry description, establishment type, optional OSHA establishment identifier, annual average employees, and total hours worked.

User-entered recordkeeping information

You may enter Form 300 case information, Form 301 incident details, and Form 300A annual summary information. Entries can include case numbers, filing years, employee names, job titles, dates of birth, hire dates, gender, employee home addresses, incident dates and times, locations, descriptions, injury or illness details, objects or substances, activities, treatment professionals and facilities, outcomes, days away or restricted, privacy-case status, certification details, and contact phone numbers.

Saved drafts, linked Form 300, 301, and 300A records, annual summaries, and the selected workplace and filing-year context remain associated with the account and records you use. Saved review history may include quarterly review checkpoints, review and next planning dates, cadence, reviewer name or title, notes, checklist confirmations, and related workplace and filing-year linkage.

Generated and downloaded files

When you request them, the workspace can generate or reveal populated PDF copies, readable CSV backup or archive files, and separate OSHA ITA-format preparation CSV files. These outputs may be created for download in the browser from information in your account-linked records. The underlying saved workspace records remain associated with the account. FORM 300 LOGBOOK does not log in, transmit, or file these records with OSHA.

Free checklist request

If you request the OSHA Recordkeeping Review Checklist, the site handles your first name, business email, optional company name, source and contact tag, and whether you chose optional follow-up tips and product updates. The request is saved in managed business contacts. The checklist is revealed in your browser after the request is saved. The request does not require a paid account, and no email, text, or call is sent automatically to the visitor by that request flow.

If you select the optional follow-up choice, that consent or preference is recorded with the contact information and should be respected. The form describes the communication as occasional recordkeeping tips and FORM 300 LOGBOOK product updates. This policy does not promise a particular delivery method, frequency, or automated marketing system. Leaving the choice unchecked does not prevent the checklist request.

Fictional sample export pack request

If you request the fictional sample export pack, the site handles your email address, source and contact tag, and the resulting managed business contact record. The fictional files are revealed or downloaded in the browser after the request is saved. The sample flow does not require an account or payment and does not require an automatic email to the visitor. The sample information is fictional and is not a private workspace record or an OSHA submission.

Subscriptions and payments

Our subscription record may include your account email, user identifier, Stripe customer identifier, selected monthly or yearly interval, subscription status, subscription period end, and status-check timestamps. The current app data model does not include full card numbers. Stripe Checkout receives payment details for payment processing, and the service receives information needed to check billing status and provide account access.

Functional browser and technical information

Authentication, hosting, storage, database, payment, email, managed contacts, and operational providers may process basic technical information generated when their services operate, such as session state, browser or device details, timestamps, request information, and error information. The app may use functional browser storage for interface preferences, including sidebar state, and for guided form-step progress. This browser state supports the interface and does not replace the account-linked workspace records. We do not promise a fixed retention period for functional browser state.

FORM 300 LOGBOOK has not added advertising cookies or analytics to this site. Provider-specific session technology remains subject to the provider's own operation and terms.

2. How information is used

We use information to:

• provide the public resources, private workspace, and account and password recovery flows;
• save, display, connect, review, and export recordkeeping entries and review history;
• generate requested PDFs, CSVs, ITA-format preparation files, and browser-revealed resource files;
• authenticate accounts, maintain account access, and help protect the service;
• process subscriptions, confirm billing status, and make the workspace available to an active account;
• save checklist and sample-pack requests in managed business contacts and honor any optional communication preference;
• respond to support messages and send communications you request or choose to receive;
• improve reliability, troubleshoot issues, prevent abuse, and investigate security events; and
• meet legal obligations, enforce the Terms of Service, and protect rights and safety.

We do not use a separate advertising or analytics program on the current site.

3. Sharing and service providers

We share information only as needed to operate the service, at your direction, or when law requires it. This can include providers that host, authenticate, store, maintain, secure, process payments, send or receive email, manage business contacts or CRM records, and support operational functions. Stripe receives the payment and subscription information needed for checkout and billing status. Managed contact and email providers may receive the information needed to save a resource request or support a communication you choose.

FORM 300 LOGBOOK does not sell personal information. We do not sell or rent your recordkeeping information or account information. We may disclose information when necessary to respond to a lawful request, protect the service or a person, investigate misuse, or support a change in ownership or operation of the service. We do not publish a provider-by-provider list here, and a provider's own privacy practices may also apply. We do not claim that any provider has a particular security certification.

4. Retention, access, correction, and deletion

We retain account, contact, workspace, and subscription information for as long as it is needed to provide the service, maintain records, respond to requests, resolve disputes, enforce terms, prevent abuse, or meet legal obligations. Retention periods can vary. This policy does not promise a fixed period or permanent storage.

When an account or service ends, information may remain for a reasonable period or when retention is needed for law, security, dispute resolution, or legitimate operational needs. Keep independent copies of records and exports that your organization must retain.

Use available workspace controls to review, correct, or delete entries when those controls are offered. You can also ask about access, correction, or deletion by contacting form300logbooksupport@gmail.com. We may need to verify identity, and some information may need to be retained.

5. Security and responsible handling

The service and its providers use administrative, technical, or organizational safeguards intended to protect information. No online service or transmission can be promised completely secure, and we do not make an absolute security guarantee or claim a security certification.

Protect your sign-in information, limit access to authorized people, enter information only when your organization permits it, check records before exporting them, and handle downloaded PDFs, CSV files, ITA-format preparation files, and browser-revealed resources according to your organization's privacy and retention practices.

6. Privacy questions and choices

You may choose what information to enter, and you should not enter information about another person unless you have the authority and permission to do so. Requests involving employee or workplace information may also need to be handled by your organization as the employer or record owner. Optional checklist follow-up consent is a choice, and the checklist request does not depend on selecting it.

7. Independent service, not OSHA

The service organizes user-provided information and creates requested copies for review and archiving. It is not legal advice, official OSHA guidance, an OSHA representative, or a guarantee of compliance. Forms 300, 300A, and 301 have different purposes, and the service does not decide which requirements apply to your workplace.

8. Children and external links

The service is designed for business recordkeeping and is not directed to children. Do not use it to submit information from a child. If you believe a child provided information, contact us at form300logbooksupport@gmail.com so we can review the concern.

The site may link to OSHA guidance, public articles, and other external websites for reference. Those websites are independent from FORM 300 LOGBOOK, and their privacy practices are governed by their own notices.

9. Policy changes and contact

We may update this policy when the service, data handling, public resources, or legal requirements change. The revised policy will be posted here with a new effective date. Review this page from time to time so you can understand the current description of information handling.