SubProofAutomated COI for Contractors

Privacy Policy

Last updated October 14, 2026

SubProof is a service operated by MyREIO, LLC ("we," "us"). SubProof helps contractors collect and track their subcontractors' certificates of insurance. This policy explains what information we collect, how we use it, and the choices you have. It applies to subproof.co, app.subproof.co, and the emails and text messages we send.

Who this covers

  • Contractors who create a SubProof account.
  • Subcontractors invited by a contractor to share insurance documents.
  • Insurance agents and agencies we contact to confirm a certificate.
  • Visitors to our website, including people who join our early-access list.

Information we collect

  • Account information: name, email address, company name, address, state, contractor license number, and the team members you invite.
  • Google sign-in: if you sign in with Google, we receive your name, email address and profile picture from Google. We do not receive your Google password.
  • Subcontractor information: business name, contact name, email, phone number, trade, state, license number and workers' compensation exemption details, as entered by a contractor or the subcontractor.
  • Insurance documents: certificates of insurance, endorsements, exemption certificates and related files, and the details we read from them, such as policy numbers, insurers, limits and dates.
  • Agency information: agency name, license number, and the contact details listed in public state license records or the agency's public website.
  • Messages: messages sent through SubProof between contractors, subcontractors and agents, and a record of automated reminders.
  • Billing: plan and payment status. Card details are handled by our payment processor, Stripe; we do not store full card numbers.
  • Usage and device data: pages visited, actions taken in the app, IP address, browser type, and similar technical information used to run and secure the service.

How we use information

  • To provide SubProof: collecting certificates, reading them, checking them against a contractor's requirements, checking public license records, and asking insurance agents to confirm them.
  • To send service messages: sign-in links, invitations, certificate requests, verification requests and expiration reminders.
  • To keep a dated verification record for the contractor's account.
  • To bill for paid plans, provide support, and improve and secure the service.
  • To send contractors product updates and offers, which you can opt out of at any time.

We use automated tools, including AI services, to read the text of uploaded documents. Results are shown to the people involved for confirmation. We do not use your documents to train third-party AI models.

Text messages and reminder calls

Subcontractors can choose to receive automated reminder texts and calls from SubProof by checking a box on their certificate upload page (see how SubProof reminders work). Checking the box is optional and is not required to upload a certificate or to use SubProof.

  • What we send: insurance certificate requests and expiration reminders on behalf of the contractor who invited you, with a link to upload your renewal.
  • How often: up to 4 texts and 1 automated call per policy renewal, sent 7, 3 and 1 days before expiration and once if a policy lapses. Message frequency varies.
  • Cost: message and data rates may apply.
  • Opting out: reply STOP to any text to stop texts, or press 9 during a call to stop calls and texts. Reply HELP for help, or email support@subproof.co.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are excluded from every category of sharing described in this policy and will not be shared with any third parties, except the messaging providers that deliver our messages.

How we share information

  • Within an account: a contractor and their team can see the information and documents for their subcontractors. A subcontractor's documents are shared with the contractors who invited them, and with others only if the subcontractor chooses to share them.
  • With insurance agents: to confirm a certificate, we send the agent the certificate details needed for them to confirm or correct it.
  • With service providers who host and operate SubProof for us, including cloud hosting and database (Supabase), website hosting (Netlify), email, text and call delivery (Resend, Twilio), AI document reading, payments (Stripe), and customer relationship management (GoHighLevel). They may use the information only to provide services to us.
  • For legal reasons: when required by law, or to protect the rights, safety and property of SubProof, our users or others.
  • In a business transfer: if SubProof is sold or merged, information may transfer to the new owner under this policy.

We do not sell personal information.

Google user data

SubProof's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google sign-in only to create and secure your account, and we do not transfer, sell or use that data for advertising.

Retention

We keep account information and documents while an account is active, and for as long as needed to provide the verification record, meet legal obligations and resolve disputes. A contractor can ask us to delete their account and its data. Some records may be kept for a limited time where the law requires it.

Security

Documents are stored in private storage and shared through short-lived links. Access to account data is limited by role. No method of storage or transmission is completely secure, but we work to protect your information and will notify affected users of a breach as the law requires.

Your choices and rights

  • You can view and update your account information in the app.
  • You can unsubscribe from marketing emails using the link in each email, stop texts by replying STOP, and stop calls by pressing 9 during a call.
  • You can ask us to access, correct or delete your personal information by emailing support@subproof.co. Depending on where you live, you may have additional rights under state law, and we will honor them as required.

Children

SubProof is a business service and is not directed to children under 16. We do not knowingly collect their information.

Changes

We may update this policy. If we make material changes, we'll post the new date above and notify account holders by email.

Contact

MyREIO, LLC, operator of SubProof
Email: support@subproof.co