Privacy

Pylon is a dispatch and timekeeping tool used by traffic control companies to run their own crews. It is not a consumer product, it carries no advertising, and it does not track anybody across the web.

Cookies, and why there is no consent banner

Pylon sets one kind of cookie: the session cookie that keeps you signed in. Nothing is set before you log in — visit the sign-in page and close it again and Pylon has stored nothing on your device.

There is no advertising, analytics, or measurement cookie, because there is no advertising, analytics or measurement. The app carries no third-party scripts or pixels of any kind. Beyond Pylon’s own service providers, the one outside service your browser reaches is the map, described below.

A sign-in cookie is strictly necessary — the service cannot work without it — and that class of cookie does not require consent under Canadian or European rules. So Pylon does not show a consent banner. A banner asking permission for a cookie that would be set regardless is not consent; it is decoration, and it teaches people to click through the ones that matter.

What Pylon holds about you

Because your employer uses Pylon to run its crews, it holds:

• Who you are — name and preferred name, employee number, work email and phone, home municipality, hire and seniority dates, and an emergency contact name and number if your employer recorded one.
• What you are qualified for — your classification (TCP, LCT and so on), your tickets and site orientations, their certificate numbers and issue and expiry dates, whether the office has checked them against the card, and a photo of the card if the office attaches one.
• What you worked — shifts you were offered, accepted or declined and any reason you gave, the sites and jobs, your hours, breaks, notes, the signature you draw on a daily time sheet, and when you logged setting up, checking or taking down each sign and device.
• What you are paid — your hourly rate, if your employer has recorded one, used to work out what you have earned so far in a pay period.
• What happened on a job — if you report an incident: what kind it was (a near miss, an injury, damage, a vehicle, a complaint), when and where, what happened, what you did about it, and any photos you add. An injury report can describe how somebody was hurt. Your employer adds its own notes, and whether it was reported to WorkSafeBC.
• What you sent — messages and any photos or documents you attach in the app.

What it is used for

Crewing jobs, telling you where to be, recording hours for payroll and for invoicing the contractor, and keeping the certification records a traffic control company is required to keep. It is not used for anything else, and it is not sold or shared for marketing.

Who else can see it

Your employer’s owners and admins can see the records for their own company. Other crew see only what a shift requires — who else is on the job, and the job’s own chat. Pylon separates companies at the database level, so one company’s records are not visible to another.

Two things are narrower than that. An incident report is seen by the person who filed it and by the office, and not by the rest of the crew on that job, even though they were there. Your pay rate is seen by you and by your employer’s owners and admins, and by nobody else on the crew.

Pylon relies on three service providers to run:

• Supabase — the database, sign-in and file storage. This is where your records are kept, and it is in Canada.
• Vercel — hosting and delivery. It serves the app’s pages from the United States, so what is on a screen passes through there on its way to you.
• Resend — sending invitation and notification email. It stores the email it sends in the United States.

They process this information to provide those services and for nothing of their own. There is no advertising network, data broker or analytics provider in that list, because there is none in the product.

Beyond those three, the map is the one outside service your browser reaches. When a traffic plan’s map is on screen — in the office, or on a crew shift card — your browser loads the map pictures from Esri (satellite) or OpenStreetMap (street). Searching the map for a place sends what you type to OpenStreetMap’s search, and a plan drawn outside the Lower Mainland sends its work area to a public road service built on OpenStreetMap, to find the road. Like any site a picture is loaded from, these services see your internet address and the place on the map; they are not told who you are, and they are sent none of your records.

How long it is kept

Employment and payroll records are kept for as long as your employer is required to keep them, which in British Columbia is generally at least four years for payroll records under the Employment Standards Act. When you leave, your record is marked inactive rather than deleted, because the hours you worked and the tickets you held are part of a record your employer must be able to produce. Once you have left, your employer can also erase your personal details — your name, contact details, address and ticket photos — while the hours and job records stay, under a label that no longer names you.

Your rights

Under the federal Personal Information Protection and Electronic Documents Act and British Columbia’s Personal Information Protection Act — which, unlike most Canadian privacy law, also covers employee personal information — you may ask what is held about you, ask for a correction, and ask how it is used. Write to info@pylontrafficapp.com and we will route it to your employer, who is the organization responsible for your records.

You can see and correct much of it yourself in the app: your tickets and their dates are on your own Tickets screen.

Security

Access is by password, over HTTPS only. Every record is restricted at the database level to the company it belongs to, and enforced there rather than only in the app. Files you attach are served through short-lived signed links rather than public URLs.

Photos have their location removed on your phone before they are sent. A phone records where a photo was taken, to within a few metres, and Pylon strips that out along with the time and the phone’s details, so a photo of a job site does not carry where you were standing.

Changes

If this changes, the date at the top changes with it. If a change is significant, the office will be told rather than left to notice.