← Subpay

Privacy Policy

Last Updated: August 2, 2026

Subpay and Subpay.ai are trade names of Jones Creek Holdings, LLC, a Florida limited liability company (“Subpay,” “we,” “us,” or “our”). This policy explains what we collect and how we use it.

1. Information We Collect

We collect information you provide directly to us when you create an account, join our waitlist, or use Subpay.ai. This includes:

  • Account Data: Name, email address, and company information.
  • Financial Data: Payment information is collected and processed securely by our third-party payment processor (Stripe). Subpay does not store raw credit card numbers.
  • User Content: Documents, change orders, contracts, and blueprints you upload to the platform.

2. How We Use Your Information

We use your information to provide, maintain, and improve our services. Specifically, we use your data to:

  • Process and route your subcontractor documents.
  • Utilize our AI Smart Import features to classify Request for Change Orders (RCOs) and executed Change Orders (COs).
  • Send you technical notices, security alerts, and support messages.
  • Support & communications: Messages you send through the in-app support chat are processed by an AI assistant (Anthropic's Claude API) to generate answers; questions the assistant cannot answer are relayed to our team via Telegram, and support conversations are stored so the assistant can answer similar questions in the future.

3. Data Sharing and Sub-Processors

We do not sell your personal data or uploaded documents to data brokers. We share data only with trusted third-party sub-processors necessary to run the platform:

  • Cloud Hosting & Storage: Supabase and Vercel for database and application hosting.
  • AI Processing: We utilize external AI APIs for document classification. Your data is sent to these services exclusively for processing your specific requests and is strictly opted out of being used to train their base models.
  • Billing: Stripe for payment processing.
  • AI & Support: Anthropic (Smart Import document extraction and the AI support chat — opted out of model training under our API terms) and Telegram (relays escalated support questions to our team for answering).
  • Email: Resend for transactional email (billing-deadline reminders and support notifications).
  • Infrastructure: Upstash for rate limiting and abuse protection.

4. Data Security

We implement commercially reasonable security measures to protect your data. File uploads are authenticated and access-controlled. However, no digital transmission is 100% secure, and we cannot guarantee absolute security.

5. Cookies

Subpay uses only essential cookies — the session cookie that keeps you signed in. We do not use advertising cookies or cross-site tracking.

6. Data Retention and Deletion

We retain your data for as long as your account exists (including read-only periods after a subscription lapses — we never delete your records for non-payment). You may request deletion of your account and data at any time by contacting support@subpay.ai; we will delete your account data within 30 days of a verified request, after which residual copies age out of encrypted backups.

7. Your State Privacy Rights

Depending on where you live — including under the Florida Digital Bill of Rights (FDBR) and the California Consumer Privacy Act (CCPA) — you may have the right to access, correct, delete, or obtain a portable copy of your personal information, and the right not to be discriminated against for exercising those rights. To exercise any of these rights, email support@subpay.ai from your account email. We will verify and respond to requests within 45 days. We do not sell personal information.