This Privacy Policy explains how Subtriva handles information when you visit our website, use our contractor compliance platform, or participate in our affiliate program.
Important notice
This document describes Subtriva's current service practices. It is not a substitute for legal advice. Have qualified counsel review it before relying on it as a binding legal document.
1. Scope and Roles
Subtriva is a business-to-business contractor compliance management service operated through the Subtriva website and application. The customer organization that uploads or manages subcontractor records is generally the controller of that business information; Subtriva processes it to provide the service under the customer’s instructions. When you create an individual account or contact us, Subtriva may act as the controller for the account and support information described here.
This policy covers the product, public website, account onboarding, document upload portals, notifications, support interactions, and our affiliate program. A customer’s own privacy notice and contracts may also apply to its subcontractors and team members.
2. Information We Collect
Account and organization data: name, work email, authentication identifiers, company name, team membership, preferences, billing status, and support communications. We do not ask you to place passwords or payment-card numbers in document notes.
Compliance and project data: project details, subcontractor contact and business information, licenses, permits, Certificates of Insurance, insurance policy data, expiration dates, notes, reviews, and audit events that customers choose to enter or upload. Documents may contain personal information belonging to a subcontractor or other third party; customers are responsible for having an appropriate basis and notice before uploading it.
Usage and device data: pages and features used, timestamps, diagnostic logs, browser and device information, approximate network information, and security events. Cookies or similar storage may be used for authentication, essential preferences, and product operation. We do not promise analytics or advertising cookies unless enabled and disclosed in the deployed product.
Payment and affiliate data: Lemon Squeezy may process checkout, billing, tax, and transaction data as merchant of record/payment provider. Affiliate referrals may use the tracking script supplied by Lemon Squeezy. Their own privacy and cookie policies govern their processing.
3. How We Use Information
We use information to provide and secure accounts, store and organize compliance records, identify upcoming or expired documents, run customer-configured reminders, support review workflows, provide extraction and compliance summaries, manage team access, process subscription status and limits, respond to support requests, prevent abuse, meet legal obligations, and improve reliability.
AI-assisted extraction or analysis, when enabled, may process submitted document content to return suggested fields such as expiration date, insured name, policy number, or coverage amount. Outputs can be inaccurate. The customer remains responsible for human review and compliance decisions; Subtriva does not make an insurance or legal determination.
5. Storage, Retention, and Deletion
Customer information is retained while the customer account is active and as needed to provide the service. Retention can vary by plan and feature. After account closure or a verified deletion request, we will take commercially reasonable steps to delete or de-identify customer data within a reasonable period, except for backups, security logs, records required for law, dispute resolution, or data retained by a customer’s own integrations. Backups may persist temporarily before being overwritten.
Customers should export records they need before terminating an account. Subtriva may retain limited billing, fraud-prevention, and legal records for the period required by applicable law.
6. Security and Confidentiality
We use access controls, authentication, transport encryption, service-provider safeguards, and operational practices designed to protect information. No internet service, storage system, or encryption method can be guaranteed completely secure. Access should be limited to authorized users, and customers are responsible for managing their account credentials and team permissions.
End-to-end encryption is not currently represented as a feature of Subtriva. The service may need readable document content to provide storage, previews, extraction, search, reminders, and review features. Do not upload highly sensitive data that the customer is not authorized to share. See the Security page for a plain-language description of current safeguards.
7. Privacy Choices and Rights
Depending on your location, you may have rights to access, correct, delete, or restrict certain personal information, or to object to some processing. Contact us through the Contact page and identify the account or organization involved. We may need to verify your identity and route a request to the customer organization that controls the data.
Customers should direct subcontractor or team-member requests to the appropriate organization administrator. We will assist the customer as required by applicable law and our service arrangements.
8. Children’s Information
The service is a business tool and is not designed for children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child provided information to us, use the Contact page.
9. International Processing
Our service providers may process information in the United States and other locations where they operate. Where required, we use appropriate transfer mechanisms and safeguards. Customers should not submit information that they are prohibited from transferring.
10. Changes to This Policy
We may update this policy as the service and legal requirements change. We will update the revision date and, where legally required, provide notice through the product or by email. Continued use after an effective update is subject to applicable law and any required consent.
11. Contact
For privacy questions or requests, use the Contact page. Subtriva’s legal entity name and mailing address should be added here once confirmed by the business owner before publication.