Privacy Policy

This notice covers the Graffiti Operations Management field-testing website at 1071graffititestapp.netlify.app and its connected maintenance tools. The pilot is administered by Dillon Campa. It describes this pilot, rather than a department-wide Caltrans privacy policy.

Information used by the app

The app processes maintenance requests and work records, including CSR and service-request numbers, job locations, coordinates, descriptions, dates, completion details, photos, and crew notes. Imported requests may contain the requesting person's name, email, telephone number, and narrative.

When you allow location or camera access, the app can use your location for maps and field tasks and use photos you capture or select. Saved job records, exports, and photo timestamps may include location and time information. Connected CHP/MAZEEP features may also process officer names, badge numbers, vehicle information, and assignment details.

Google account and file access

The current pilot uses Google authorization to read and update its configured Google Sheets and to find, display, and upload work photos in Google Drive. The application requests Sheets and Drive permissions for these functions. Google account passwords are entered with Google, not collected by the app. Browser storage currently holds temporary Google access tokens and saved preferences or work state.

Google user data is used to provide the maintenance features requested by users. It is not sold, used for personalized advertising, or used to train generalized AI models. Access to and use of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Planned email and password accounts

Email/password registration and administrator approvals are being added and are not enabled by publishing this notice. When enabled, Firebase Authentication will manage login credentials, while the app's Users records will contain the user's ID, name, email, role, approval status, and creation date. Passwords will not be stored in the Google spreadsheet. Approved access will be checked by the backend before it provides protected data.

Purpose and sharing

Information supports assigning, documenting, locating, and completing maintenance work and reviewing related requests. Work records are available to people with access to the underlying shared files and connected services; users can also export or share records using app features. Share exports and photos only with appropriate recipients.

Netlify hosts the pilot website. Google provides Sheets, Drive, and the planned Firebase account service. Mapping, routing, imagery, traffic, weather, and other connected services receive the requests needed for the features you use, which can include coordinates, search terms, IP addresses, and ordinary connection information. Opening navigation or Street View sends the selected destination to that provider. Optional connected tools may process selected location information and questions when used. Providers handle information under their own terms and privacy notices.

Storage and retention

Work records and photos are stored in their configured services until removed or retained by the responsible administrator. This pilot has no automatic deletion schedule. Copies in exports, backups, or another recipient's possession may remain after an original is removed. Browser preferences and saved work state remain until cleared or replaced. Retention and deletion of work records must account for applicable organizational requirements.

Your choices

You can decline or revoke device location and camera permissions, although related features may not work. You can review or revoke Google access in your Google Account connections. Revoking access does not itself delete saved records. Clearing this site's browser data removes locally stored settings and sessions but does not delete Sheets or Drive content.

To ask about access, correction, account removal, or deletion of information, contact dillon.campa@dot.ca.gov. Requests will be reviewed in light of work-record retention requirements. This service is intended for maintenance personnel and authorized collaborators, not children.

Changes

This notice will be updated as the pilot's account system, providers, or hosting change. The date above identifies the latest revision.