# Privacy policy

This policy describes what ComplySub collects, why, and how to have it removed. ComplySub is operated by Agentic Labs LLC (agntwrk). Last updated 2026-10-06.

## What we collect

Account data: the email address and name you sign in with (by email link or Google) and the details of your organization, such as its name, state, and members. Business data: the requirements you set, your projects and vendors, vendor and insurance agent email addresses, license numbers, and the insurance certificates and other documents you or your vendors upload, together with the fields read from them (insured name and address, producer, policies, limits, dates, endorsements, certificate holder). Signing in sets a session cookie. Standard server logs record the IP address, user agent, and request path. We do not sell personal data and do not use it for advertising.

## People who are not account holders

If a customer adds you as a vendor or as a vendor's insurance agent, we hold your email address and what you upload through your link, and we email you reminders on that customer's behalf. Vendors upload without an account, using a personal link. Reminders carry an unsubscribe link, and you can write to us to have your details removed.

## How we use it

To read and check certificates and licenses, to show you the gaps and expirations, to send reminders and digests, to let subcontractors share a compliance packet with the general contractors they choose, to secure the service, and to contact you about your account. A customer sees the documents its vendors uploaded to it. A subcontractor's packet is visible only to the people who hold its share link, and the subcontractor can revoke the link.

## AI processing of documents

To read an uploaded certificate, we send the document to Google Gemini on Vertex AI, run in the Google Cloud region us-central1 in the United States. The model returns the extracted fields and processes the document only to return them. Google does not use it to train its models, and we do not use customer documents to train models. AI extraction can be wrong, so every result keeps the original document next to the fields read from it. ComplySub is not legal or insurance advice.

## Service providers

We host the service on Google Cloud in the United States (Cloud Run, Firestore, Cloud Storage, Secret Manager, and Vertex AI in us-central1). Stripe processes payments, Resend delivers email, and Google provides sign-in and Google Analytics. These providers process data only to run the service.

## Payments

Payments are processed by Stripe. We never see or store your full card number; we keep your Stripe customer id, plan, and billing status.

## Email

We send sign-in links, reminders to vendors and their insurance agents, and a weekly digest of open gaps. Reminders and digests carry an unsubscribe link; sign-in links are needed to use the service.

## Analytics

The public pages (home, pricing, guides, documentation, and sign-in) use Google Analytics 4 to count visits. Google Analytics does not log or store IP addresses. Vendor upload links, subcontractor packet links, and the signed-in application do not use analytics.

## Retention and deletion

We keep your documents and data while your account is active. When you delete your account, or write to us to delete it, we delete the account, its documents, and the data read from them within 30 days. Server logs expire after 30 days.

## Your rights

Depending on where you live, you may have the right to see, correct, export, or delete your data, or to object to how we use it. Write to us and we will respond within 30 days. If your data was added by one of our customers, we may refer your request to that customer.

## Security

Data is encrypted in transit and at rest, secrets live in Google Secret Manager, upload and share links are random and stored only as hashes, and access to production data is limited to the people who operate the service.

## Children

The service is for businesses and is not directed to children under 13.

## Changes

We update this page when our practices change and change the date above.

## Contact

hello@agntwrk.com