Privacy Policy

Last updated: July 9, 2025

1. Overview

SubBase Technologies, Inc. ("SubBase," "we," "us," or "our") provides software and related services to construction companies in the United States. We value your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the choices you have.

2. Information we collect

We do not collect payment details, precise location, or sensitive categories of data. When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address. We (or service providers on our behalf) may then send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by visiting app.retention.com/optout.

3. How we use your information

1. Provide and operate the SubBase platform;
   
   
2. Authenticate and secure your account, enforce role‑based access controls, and detect fraud;
   
   
3. Monitor and improve stability, performance, and user experience via Heap and Datadog;
   
   
4. Communicate with you about updates, support, and—if you opt in—SMS notifications;
   
   
5. Comply with legal obligations and enforce our Terms of Use.
   
   

We do not sell or rent your personal information.

4. Sharing & disclosure

We share information only with:

• Service providers under contract who process data on our behalf and under confidentiality (e.g., Heap, Datadog, AWS hosting, Telnyx for SMS);
  
  
• Authorities or other parties when required by law (e.g., court orders);
  
  
• Successors in a business transfer, with notice to you and the option to delete your data.
  
  

We require all service providers to protect your data to standards equal to or greater than those described here.

5. Data retention

• Account & Customer Data: retained while your account is active and up to 60 days after account deletion or contract termination to allow for billing reconciliation and backup restoration, unless longer retention is required by law.
  
  
• Diagnostic & Audit Logs: retained indefinitely for security, troubleshooting, and audit purposes, but are stored separately and access‑restricted.
  
  

When data is no longer required, we securely delete or anonymize it in accordance with our Data Management Policy.

6. Security measures

SubBase is SOC 2 Type II compliant and employs industry‑standard safeguards, including:

• Encryption of data in transit (TLS 1.2+) and at rest;
  
  
• Role‑based access control with least‑privilege principles;
  
  
• Continuous monitoring and alerting via Datadog;
  
  
• Annual third‑party penetration testing and vulnerability management;
  
  
• Encrypted, access‑controlled backups.

7. Your choices & rights

• Access / Update: View or edit profile information in‑app or by emailing privacy@subbase.io.
  
  
• Delete Account: Request deletion via help@subbase.io; data erased per Section 5.
  
  
• Analytics Opt‑Out: Email us to disable Heap‑based usage tracking.
  
  

SMS Opt‑In/Opt‑Out: You will be asked to consent before receiving SMS; each message will include opt‑out instructions (e.g., REPLY STOP).

8. Children’s privacy

SubBase is not directed to children under 13 and we do not knowingly collect personal data from children. If we learn that we have, we will delete it immediately.

9. Changes to this policy

We will post any changes on this page and, if they are material, notify you via email or in‑app message at least 30 days before they take effect.

10. Contact us

SubBase Technologies, Inc.
300 SW 1st Ave Suite 155 Ft Lauderdale, FL 33301
Email: help@subbase.io

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us anytime.