Clear treatment of company and project data.

Version 1 · Effective August 5, 2026

Privacy contact: support@contractorcomply.us. Do not send sensitive documents or credentials by ordinary email.

1. Scope

This Policy describes how ContractorComply collects, uses, shares, retains, and protects information through its websites, applications, support, and related services. It does not govern information independently controlled by customers outside the Service.

2. Information collected

We may collect account and contact details; company and team information; project, contractor, requirement, insurance, licensing, document, payroll-related, and compliance-workflow records; support communications; subscription and transaction metadata; device, browser, log, security, and usage information; and preferences. Stripe processes payment-card information, and ContractorComply does not intend to store complete card numbers.

3. Sources

Information comes from users and their organizations, uploaded files, configured integrations, authentication and payment providers, customer support, and automatic technical logs generated when the Service is used.

4. Uses

We use information to provide and secure accounts; store and organize records; generate operational reminders and ComplyWatch flags; process subscriptions; provide support; send service messages; prevent abuse; diagnose and improve performance; comply with law; enforce agreements; and protect customers, the Service, and others.

5. Customer-controlled information

Business customers determine what project, workforce, contractor, payroll-related, and document information they submit and who may access it. Customers are responsible for providing required notices and obtaining necessary authority to process information about employees, subcontractors, vendors, and other individuals.

6. Sharing

Information may be shared with authorized company users; infrastructure, authentication, storage, hosting, payment, email, analytics, security, and support providers working on our behalf; professional advisers; authorities when legally required; a successor in a merger, financing, acquisition, or asset transfer; and other parties at the customer’s direction or with consent. We do not sell personal information for money.

7. Service providers

Current service providers may include Supabase for authentication, databases, and storage; Netlify for hosting and functions; Stripe for billing; GitHub for source deployment; and an email-delivery provider once configured. Their processing is governed by their agreements and privacy practices.

8. Retention

We retain information while an account is active and as reasonably necessary to provide the Service, resolve disputes, maintain security, enforce agreements, comply with legal or accounting obligations, and complete backup cycles. Customers should not use ContractorComply as their only legally required archive. Retention periods may differ by record type and plan.

9. Security

We use access controls, authenticated accounts, private storage, encrypted network connections, row-level database restrictions, and service-provider safeguards. No transmission or storage system is completely secure. Customers must use strong credentials, limit access, maintain secure devices, and avoid uploading unnecessary sensitive information.

10. Choices and rights

Depending on location and applicable law, individuals may have rights to request access, correction, deletion, portability, or restriction of certain personal information, or to appeal a decision. Requests may be sent to support@contractorcomply.us. We may verify identity, account authority, and legal requirements before acting.

11. Account exports and deletion

Authorized company users may request an export or deletion through available account controls or support. Deletion may be delayed or limited by legal holds, billing and security records, another authorized customer’s instructions, or backup cycles. Deleting a company workspace can permanently remove project records and documents.

12. Cookies and local storage

The Service may use strictly necessary cookies or browser storage for authentication, security, preferences, and session operation. If nonessential analytics or advertising technologies are added, this Policy and any required consent controls will be updated first.

13. Email

We may send account confirmation, password reset, invitation, billing, support, security, product, and compliance-reminder messages. Service-critical messages may be sent even when optional digests are disabled. Marketing messages will include legally required opt-out controls.

14. Children

The Service is intended for businesses and is not directed to children under 13. We do not knowingly collect personal information directly from children through consumer accounts.

15. United States processing

The Service is currently operated for United States businesses. Information may be processed in locations where service providers operate, subject to appropriate contractual and legal safeguards.

16. Changes

We may update this Policy as the Service, providers, or legal obligations change. Material changes will be posted with an updated effective date and communicated when appropriate.

17. Contact

Privacy questions, access requests, correction requests, export requests, and deletion requests may be sent to support@contractorcomply.us. We may request reasonable information to verify identity and authority before completing a request.

18. Intellectual property

This Privacy Policy does not grant any license or ownership interest in ContractorComply’s software, content, branding, or intellectual property. Intellectual-property rights and usage restrictions are governed by the Terms of Service. Customers retain ownership of information and documents they lawfully submit, subject to the limited processing rights described in this Policy and the Terms.