X3 Contractor Prequal
Sign InFree Grade Check

Privacy Policy

Effective October 26, 2026 · X3 Contractor Prequal LLC

In plain words: we keep what you put in so the dashboard works. We do not sell it, we do not use it to train AI, and we never send anything to a prequalification network for you.

This Policy explains how X3 Contractor Prequal LLC ("we," "us") handles information in the X3 Contractor Prequal website, free grade check and dashboard (the "Services").

1. Who is responsible

  • For your account, billing and website information, we decide how it is used.
  • For information about your employees that you enter (names on training records, entries in your OSHA logs), your company decides how it is used, and we handle it on your instructions to run the Services.

2. What we collect

  • Account: name, business email, company, trade, company size and a protected (hashed) password.
  • Free grade check: your answers stay in your own browser. If you ask us to email the result, we keep your email address, company name and the result.
  • Workspace: company details (including the legal name, EIN, address and NAICS code you enter for OSHA filing), EMR and incident rates, programs, certificates of insurance and licenses, training records, OSHA 300, 300A and 301 entries, hiring clients and their requirements.
  • Billing: handled by Stripe. We receive the plan, status and the last four digits of the card; we never see or store the full card number.
  • Usage: server logs (IP address, browser and pages requested) used for security and to keep the Services working.

OSHA injury and illness records can include sensitive health information about your employees. Enter only what OSHA's recordkeeping rule (29 CFR Part 1904) requires, and use "privacy case" entries where the rule calls for them (29 CFR 1904.29(b)(6) to (9)).

3. How we use it

  • To run the Services: estimate grade risk, draft programs, track expirations and send the emails you ask for (results, password resets, receipts).
  • To bill you, support you and keep the Services secure.
  • To meet legal obligations and enforce our Terms.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not use your information to train AI models.

4. Hiring-client requirement suggestions

When you list a requirement for a hiring client, we store the client's name and the requirement against your account. To help other contractors, we may show "other contractors list this for this client" with a count. A suggestion appears only after at least two different contractors have listed the same requirement for the same client, and it never shows who they are, your company name or any of your other information. Requirements you type in your own words are never shown to anyone else.

5. AI processing

When you draft a program, job safety paperwork or a Spanish copy, or use the deficiency fixer, we send your company details, the work you do, the text you paste or the document being changed, together with the regulation text, to an AI model provider (Anthropic, reached through OpenRouter). When you click Read My Certificate, the certificate of insurance you upload is sent to the same provider for that one reading and is not stored by X3; only the values you confirm are saved. Ask X3 sends the question you type to the X3 answer service at x3api.com, run by our affiliate X3 Fleet Safety LLC, which uses the same kind of AI provider; do not type employee personal information into it. We do not send OSHA log entries or training records to AI providers, and certificates only when you click Read My Certificate. Do not paste employee personal information into the deficiency fixer. We use these providers only under terms that do not allow them to train on the data.

6. Service providers

We use providers who process information for us under written contracts: Cloudflare (hosting, database and storage), Stripe (payments), Resend (email), the AI providers above, and X3 Fleet Safety LLC for the Ask X3 answer service. We share information with others only if you ask us to, if the law requires it, or as part of a merger or sale of the business, where this Policy keeps applying.

7. How long we keep it

We keep your workspace while your account is open. After you close it you have 30 days to download your data, and then we delete it, except where the law requires us to keep billing records. Grade-check results you asked us to email are kept until you ask us to delete them. OSHA requires employers to keep logs for five years (29 CFR 1904.33); keep your own copy.

8. Security

Information is encrypted in transit and at rest, passwords are stored only as salted hashes, sign-in attempts are rate limited and access is limited to the people who need it to run the Services.

9. Your choices and rights

You can see and change your information in the dashboard. To get a copy of it or have it deleted, write to us and we will do it. Depending on your state, you may have more rights under laws such as the California Consumer Privacy Act. Employees asking about records their employer entered should contact that employer; we will help the employer respond. We will not treat you differently for using your rights.

10. Location and age

The Services are for U.S. businesses and are run from the United States. They are not meant for anyone under 18, and we do not knowingly collect information from children.

11. Changes

We will post updates here with a new effective date, and email account owners at least 30 days before a material change in how we handle personal information.

12. Contact

Privacy questions and requests: support@x3prequal.com (subject "Privacy").