Privacy Policy

Subtl is a US-based software-as-a-service company that helps trades contractors manage subcontractors, jobs, documents, and payments. You can contact us at support@gosubtl.co. A mailing address is available on request.

Account information you provide when signing up or using the Service: name, email address, phone number, company name, role, and login credentials.

Subcontractor and job data you upload or create inside the Service, including subcontractor names, contact information, tax forms (such as W-9s), certificates of insurance (COIs), license numbers, job records, payment history, retainage balances, notes, and uploaded files or photos.

Payment and billing information needed to process your subscription. Card details are collected and stored directly by our payment processor (Stripe) — we never receive or store full card numbers.

Device and usage data such as IP address, browser, operating system, pages viewed, features used, timestamps, and crash or error logs.

Cookies and similar technologies for authentication, session management, and basic product analytics.

We use the information we collect to operate, maintain, and improve the Service; authenticate users; process payments and send invoices; send transactional emails (account, security, billing, job, and document notifications); provide customer support; detect and prevent fraud or abuse; comply with legal obligations; and analyze product usage to improve features.

We do not sell your personal information, and we do not use the contents of your account (including subcontractor data, files, or messages) to train third-party AI models.

We share information only with service providers that help us run the Service, under contracts that require them to protect your data. These include:

• Stripe — payment processing and subscription billing.
• Cloud hosting and database providers (such as Cloudflare and Supabase) — application hosting, file storage, and database services.
• Email delivery providers — transactional and account email.
• Analytics and error-monitoring providers — to measure product usage and diagnose issues.

We may also disclose information if required by law, subpoena, or other legal process, or to protect the rights, safety, or property of Subtl, our customers, or others. If Subtl is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Mobile phone numbers and SMS consent are not shared with third parties or affiliates for marketing purposes.

All subscription payments are processed by Stripe, Inc. When you enter payment information, it is sent directly to Stripe over an encrypted connection. Subtl never receives, stores, or has access to your full card number, CVC, or bank credentials. Stripe's handling of your payment information is governed by Stripe's own privacy policy.

We retain your account and related data for as long as your account is active. After account closure we retain data for a reasonable period to handle support requests, resolve disputes, satisfy tax, accounting, and legal obligations, and enforce our agreements. You may request deletion of your data at any time by emailing support@gosubtl.co.

We use industry-standard safeguards including encryption in transit (TLS) and at rest, tenant-isolated databases with row-level security, access controls, and audit logging. No system is perfectly secure; you are responsible for keeping your account credentials confidential and notifying us promptly of any suspected unauthorized access.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to opt out of the "sale" or "sharing" of personal information. Subtl does not sell or share personal information for cross-context behavioral advertising.

California residents have additional rights under the CCPA/CPRA, including the right to know what categories of personal information we collect, the right to deletion, the right to correct inaccurate information, and the right to non-discrimination for exercising these rights. To exercise any privacy right, email support@gosubtl.co. We will verify your request and respond within the timeframes required by law.

If you are a contractor using Subtl to manage subcontractors, you are the controller of the personal information you upload about those subcontractors, and Subtl acts as a processor on your behalf. You are responsible for ensuring you have the necessary rights and notices to share that information with Subtl. If a subcontractor wishes to exercise privacy rights regarding data you uploaded, please direct them to the contractor that owns the account.

The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect personal information from children.

Subtl is operated from the United States, and your information is processed and stored in the United States. By using the Service you understand that your information will be transferred to and processed in the United States.

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date above and, for material changes, provide additional notice through the Service or by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Questions about this policy or your data: support@gosubtl.co.