Privacy Policy

This Privacy Notice explains how SubProApp LLC("SubPro," "we," "us," or "our") collects, uses, shares, and protects your information when you use our services ("Services"), including when you:

• Visit our website at subproapp.co
• Download and use the SubPro mobile application for iOS or Android
• Purchase a General Contractor (GC) project code and use the GC dashboard
• Contact us for support, or engage with us in other related ways

SubPro is a proposal tool for construction subcontractors — it helps subs build CSI-formatted proposals, track bid dates, and deliver PDFs to general contractors.

If you do not agree with our policies and practices, please do not use our Services. Questions go to support@subproapp.co.

Summary of Key Points

Table of Contents

1. What Information Do We Collect?
2. How Do We Process Your Information?
3. Market Benchmarks and De-Identified Pricing
4. When and With Whom Do We Share Your Information?
5. Do We Use Cookies and Other Tracking Technologies?
6. Do We Offer Artificial Intelligence-Based Products?
7. Information About General Contractors and Other Third Parties
8. How Long Do We Keep Your Information?
9. How Do We Keep Your Information Safe?
10. Do We Collect Information From Minors?
11. What Are Your Privacy Rights?
12. Controls for Do-Not-Track Features
13. Do United States Residents Have Specific Privacy Rights?
14. Do We Make Updates to This Notice?
15. How Can You Contact Us?

1. What Information Do We Collect?

In Short: Information you give us to run your account and build your proposals, plus limited technical and usage data.

Account information. To create an account we collect your email address. SubPro does not use passwords — you sign in with a one-time code sent to your email.

Company profile. Information you enter about your business so it can appear on your proposals: business name, contractor license number, business phone, business address, primary CSI specification, and a company logo if you upload one.

Proposal and project content. Everything you create in the app, including project names and locations, scope and terms language, line items, unit quantities, bid amounts, spec sections, proposal numbers, and bid status. This is your business content and we treat it as confidential.

Recipient contact details.To email a proposal we must store the recipient's name, email address, and (if you enter one) phone number. These are typically employees of general contractors who are not SubPro users. See Section 7.

Calendar entries. Project names, locations, and the bid, RFI, pre-construction and start dates you record.

Purchase and subscription data. Which plan you are on, when it started and renews, and whether it is active, cancelled, or expired. We never receive or store your card number. Mobile subscriptions are purchased through the Apple App Store or Google Play, who process payment under their own privacy policies and tell us only that a purchase occurred. GC project codes purchased on this website are processed by Stripe; see stripe.com/privacy.

Device permissions you grant. The app asks for these only when you use the feature, and each is optional:

• Camera and photo library — only to attach a company logo or project photo you choose. We do not browse your library.
• Files and documents — only to attach a document you select to a proposal.
• Push notifications — bid-date reminders and account alerts. We store a device push token. Opt out in your device settings.
• Face ID / Touch ID / fingerprint — used to lock the app. Your biometric data never leaves your device and is never transmitted to or stored by SubPro. Your operating system tells us only whether the check passed.

Information collected automatically.

• IP address, device type and model, operating system version, and app version
• Log and diagnostic data, including crash reports
• Product analytics — which screens and features are used, session counts, onboarding completion, and free-to-paid conversion. Analytics events are deliberately coarse: bid amounts are recorded only as broad size bands, and general contractor names are never sent to our analytics provider.

We do not collect device location. Project locations are text you type, not GPS readings, and the app never requests location permission.

2. How Do We Process Your Information?

In Short: To run the Services you asked for, keep them working and secure, and improve them.

• To create and authenticate your account and deliver one-time sign-in codes
• To generate, store and email your proposals as PDFs
• To send bid-date reminders and account notifications you have enabled
• To provide AI-assisted scope, terms and summary suggestions when you request them (Section 6)
• To determine your plan, enforce plan limits, and process upgrades, cancellations and restores
• To diagnose crashes, prevent abuse and fraud, and keep the Services secure
• To understand aggregate product usage and improve features
• To produce de-identified market benchmarks, unless you opt out (Section 3)
• To comply with legal obligations and enforce our Terms

3. Market Benchmarks and De-Identified Pricing

In Short: We build regional pricing benchmarks from bid totals. Contributions are de-identified by design, and you can opt out at any time.

When you send a proposal, SubPro may record the bid total, the CSI specification division, and a metropolitan area derived from the project location, in order to build aggregate benchmarks of what scopes of work cost by region. We may publish or license these aggregate benchmarks as a separate product.

This is engineered so a contribution cannot be traced back to you:

• No user identifier is stored — the records contain no user ID and no link to your account, so there is nothing to join them back on
• No precise timing — the finest time granularity stored is the calendar month, so a contribution cannot be matched to a send
• No company, client, project name or street address is included
• Location is coarsened from your typed project address to a metro area, or to state level if the city is not recognized
• Aggregates are suppressed below 5 contributors — any regional figure drawn from fewer than 5 distinct contributors is withheld rather than published
• Rotating pseudonyms — the internal token used to prevent any one contributor flooding a region is re-derived every month, so it cannot be used to follow a company over time

Opting out. Turn this off in the app at Settings → Privacy. The opt-out is enforced at the database level, not merely in the app, so no contribution is recorded while it is on. Opting out does not limit any other feature.

Full detail — exactly which fields are stored, what is deliberately not stored, and the limits of de-identification — is in our Data Policy.

4. When and With Whom Do We Share Your Information?

In Short: With the service providers that operate SubPro, with the recipients you choose, and when the law requires it. We do not sell your information.

Recipients you choose. When you send a proposal, its contents and your company details go to the email address you entered. That is the point of the product, and you control it.

Service providers. We use the following processors, each bound to handle your data only to provide their service to us:

Aggregate benchmarks. We may publish or license de-identified, aggregated pricing benchmarks as described in Section 3. These do not identify you, your company, or your clients.

Legal and safety. We may disclose information where required by law, subpoena, or other legal process, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business transfers. Information may be transferred in connection with a merger, financing, acquisition, or sale of assets. Any acquirer remains bound by this Notice for information collected under it.

We do not sell personal information, and we do not share it for cross-context behavioral advertising or targeted advertising, as those terms are defined under US state privacy laws.

5. Do We Use Cookies and Other Tracking Technologies?

In Short: Only what is needed to keep you signed in and to understand product usage. No advertising trackers.

Our website uses cookies that are strictly necessary to operate it — principally to keep general contractors signed in to the GC dashboard and to protect against abuse. We also collect coarse product analytics as described in Section 1.

We do not use advertising or cross-site tracking technologies. There are no ad networks, no advertising pixels, and no third-party advertising SDKs in the website or the mobile app. The mobile app does not request the iOS Advertising Identifier (IDFA) or the Android Advertising ID, and does not present App Tracking Transparency prompts because it performs no tracking as Apple defines it.

6. Do We Offer Artificial Intelligence-Based Products?

In Short: Yes. AI features are optional, run only when you invoke them, and are powered by Anthropic.

SubPro offers optional AI-assisted features — suggesting scope-of-work language, contract terms, executive summaries, and analysis of bid documents. These run only when you explicitly request them.

When you use an AI feature, the relevant content — such as the scope text or project details involved in that request — is sent to Anthropic to generate a response. Anthropic processes it as our service provider under its commercial terms. Your content is not used to train third-party AI models.

AI output is a drafting aid, not professional advice. You are responsible for reviewing any generated scope, terms, or pricing language before sending it to a client.

7. Information About General Contractors and Other Third Parties

In Short: We store only the recipient details required to deliver a proposal, and we keep no standing address book.

To email a proposal, SubPro stores the recipient's name and email address with that proposal. We are direct about this rather than claiming otherwise: a proposal cannot be delivered without an address.

Those details are stored only as part of the proposal they were sent with. SubPro does not keep a separate list of your clients' contact details. When you start a new proposal, the app may suggest details from one of your earlier proposals, and that suggestion is read from your own proposal history.

What we do not do, in any case: we do not build marketing lists from recipient addresses, we do not contact recipients for our own purposes, we never send them anything other than the proposals you direct to them, and we do not sell or rent those addresses. We are also actively reducing what we hold here — we would rather not store contact details for people who never signed up for SubPro than hold them for convenience.

If you are a general contractor who received a SubPro proposal and you want to know what we hold about you, or want it deleted, email support@subproapp.co. Note that the subcontractor who sent the proposal is the party that entered your details, and may retain its own records.

General contractors who purchase a project code and use the GC dashboard are our direct users. For them we collect a name, email address, company name, project details, trade selections and bid dates, and we process payment through Stripe.

8. How Long Do We Keep Your Information?

In Short: For as long as your account is open, and then only as long as the law requires.

• Account, profile, proposals and calendar entries — kept while your account is open. Deleted when you delete your account.
• Transaction and tax records — retained as long as required by tax and accounting law, typically seven years, even after account deletion.
• Backups — deleted data may persist in encrypted backups for up to 30 days before being overwritten.
• De-identified market benchmark contributions — retained indefinitely, because they contain no identifier that would let us locate or remove your specific contribution. This is a consequence of the de-identification, not an exception to it. If you do not want this, opt out before sending proposals.

9. How Do We Keep Your Information Safe?

We use appropriate technical and organizational measures, including encryption in transit, encryption at rest for our databases, row-level access controls that restrict every record to its owner, and storage of authentication credentials in your device's secure hardware keystore.

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. Access the Services from a device and network you trust.

10. Do We Collect Information From Minors?

In Short: No. SubPro is for adults working in the construction trades.

We do not knowingly collect data from or market to anyone under 18. By using the Services you represent that you are at least 18. If we learn we have collected information from someone under 18, we will deactivate the account and delete the data. Contact support@subproapp.co if you believe this has happened.

11. What Are Your Privacy Rights?

In Short: You can access, correct, export, or delete your information at any time.

• Access and correct — review and edit your profile and proposals directly in the app.
• Export — every proposal can be exported as a PDF. For a copy of your account data in machine-readable form, email us.
• Opt out of market benchmarks — Settings → Privacy in the app (Section 3).
• Opt out of push notifications — your device settings.
• Delete your account — in the app at Settings → Delete Account, or from our account deletion page, which does not require the app to be installed.
• Withdraw consent — where we rely on consent, you may withdraw it at any time. This does not affect processing already carried out.

Deleting your account does not cancel your subscription. Mobile subscriptions are billed by Apple or Google and must be cancelled in the App Store or Google Play. See our support page for instructions.

We do not discriminate against you for exercising any of these rights. To make a request, email support@subproapp.co. We may need to verify your identity, usually by confirming control of your account email, and will respond within the time required by applicable law.

12. Controls for Do-Not-Track Features

Most browsers and some mobile operating systems offer a Do-Not-Track ("DNT") setting. There is still no uniform standard for recognizing DNT signals, so we do not currently respond to them. This does not change anything in practice: we do not perform cross-site or cross-app tracking regardless of the signal your browser sends.

13. Do United States Residents Have Specific Privacy Rights?

In Short: Yes. If you live in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you have specific rights over your personal information.

Categories of Personal Information We Collect

Sources and Purposes

We collect this information directly from you, automatically from your use of the Services, and — for subscription status only — from Apple, Google, RevenueCat and Stripe. We use it for the purposes in Section 2 and disclose it to the service providers in Section 4 for business purposes.

Sale and Sharing

We have not sold personal information, and we have not shared personal information for cross-context behavioral advertising, in the preceding twelve months. We do not offer financial incentives in exchange for personal information. As described in Section 3, we do publish and may license de-identified, aggregated pricing benchmarks; we maintain the de-identification and do not attempt to re-identify that data.

Your Rights

• Right to know whether we are processing your personal data, and to access it
• Right to correct inaccuracies
• Right to request deletion
• Right to obtain a portable copy of data you provided
• Right to opt out of targeted advertising, sale, or profiling — we do none of these
• Right to non-discrimination for exercising your rights
• Right to appeal a denied request, where your state provides one

How to Exercise Your Rights

Email support@subproapp.co, or use the in-app and web controls in Section 11. You may designate an authorized agent to act for you, subject to verification. If we deny your request you may appeal by replying to our response; we will inform you in writing of the outcome.

California "Shine The Light" Law

California Civil Code Section 1798.83 lets California residents request information about personal information disclosed to third parties for their direct marketing purposes. We make no such disclosures.

14. Do We Make Updates to This Notice?

We may update this Privacy Notice as our Services and the law change. The revision date at the top will change, and if the changes are material we will notify you in the app or by email before they take effect. We encourage you to review it periodically.

15. How Can You Contact Us?

Email support@subproapp.co, or write to us at: