Privacy Policy

1. Introduction

This Privacy Policy explains how SubConnects ("SubConnects," "we," "us") collects, uses, shares, and protects information when you use the SubConnects platform (the "Platform"). By using the Platform, you agree to this Policy.

2. Information We Collect

We collect the following categories of information:

• Account information — your name, email address, phone number, password (stored in hashed form), and company details.
• Verification information — certificates of insurance, business licenses or registrations, references, and related details you submit for verification. Some of this may be sensitive business information.
• Tax and payment documents — a W-9 or similar tax form you upload for invoicing or payment, which may contain a taxpayer identification number (for a sole proprietor, that can be a Social Security Number).
• Profile and content — your company profile, logo, work photos, the roofing systems you work on, and other content you add.
• Messages and files — the messages, documents, and photos you exchange with other users on the Platform.
• Engagement and reputation data — jobs you record, reviews you write or receive, and ratings.
• Usage and device data — log data, IP address, browser and device information, and cookies used to authenticate you and operate the Platform.

Some documents you upload for verification or payment — for example, a W-9 tax form — can contain a taxpayer identification number, and for a sole proprietor that may be a Social Security Number. We store these documents privately, limit who can access them, and do not transmit your W-9 to other users through the Platform. Our automated processing is designed not to extract or index these numbers, we do not use them for any other purpose, and we do not sell them.

3. How We Use Information

We use information to: provide and operate the Platform; verify users and their documents; help contractors and crews find and evaluate each other; enable messaging and file sharing; process payments; provide customer support; maintain trust and safety, prevent fraud, and resolve disputes; improve and develop the Platform; comply with legal obligations; and send you service-related communications.

As part of verifying users, we contact the references you provide and may contact your insurance carrier or broker, licensing or registration authorities, and similar issuers to confirm the information and documents you submit. When you provide a reference's contact details, you confirm you have any consent needed for us to contact that person for this purpose.

4. Automated and AI Processing

To speed verification, we use automated tools — including artificial intelligence — to read documents you upload and extract structured details (for example, an insurance carrier, policy number, coverage limits, and expiration dates). This processing is designed to exclude sensitive identifiers such as Social Security Numbers and tax-identification numbers. A SubConnects representative reviews and decides verification; verification is not fully automated.

5. How We Share Information

With other users — your profile and the content you choose to make available are visible to contractors browsing crews (and vice versa), and the messages and files you send are delivered to the other party in your conversation.

With service providers — we use vendors who process information on our behalf, under contract, to run the Platform, including cloud hosting and database, application hosting, file storage, automated document processing, payment processing, and form and email tools.

For legal and safety reasons — we may disclose information to comply with law or legal process, enforce our Terms, or protect the rights, property, and safety of SubConnects, our users, or others.

Business transfers — if SubConnects is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

We do not sell your personal information.

6. Platform Oversight of Communications

To operate and support the Platform, and for trust and safety, fraud prevention, dispute resolution, and legal compliance, authorized SubConnects personnel may access, review, and store the messages and files shared on the Platform. Please do not use the Platform's messaging to share anything you would not want us to be able to review for these purposes.

7. Data Storage and Security

Information is stored on our service providers' infrastructure, located in the United States. We use technical and organizational safeguards, including encrypted connections, private storage for sensitive documents (served only through short-lived, signed links), and database-level access controls. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

8. Data Retention

We retain information for as long as your account is active and as needed to provide the Platform, comply with our legal obligations, resolve disputes, and enforce our agreements. We may retain verification records to evidence the verification we performed, and may keep limited information after account closure where required or permitted by law.

9. Your Choices and Rights

You can review and update most of your account information directly in the Platform. You may request access to, correction of, or deletion of your personal information by contacting us, and we will respond consistent with applicable law and subject to reasonable limits (for example, records we are required to keep). You may opt out of non-essential communications at any time.

10. Cookies

We use cookies that are essential to authenticate you and keep you signed in, and to operate the Platform. Our support-chat provider (Crisp) may also set its own cookies and receive limited data — such as your IP address and the page you are viewing — to power live chat on our public and sign-in pages. We do not use the Platform for third-party advertising tracking.

11. Children

The Platform is intended for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated Policy with a new effective date and, for material changes, provide notice where appropriate. Your continued use of the Platform after changes take effect means you accept the updated Policy.

13. Contact

Questions or requests regarding this Policy or your information? Contact us at legal@subconnects.com.