Privacy Policy

Supervisr is a business and productivity tool built for construction professionals and property owners. Contractors and homeowners upload jobsite photos and project information; our AI analyzes workmanship and flags potential quality issues; and we store the resulting projects, photos, documents, reports, and financial records so you can manage the quality and history of your work.

This Policy covers information we handle in operating that Service. It does not cover the practices of third-party services you separately choose to connect (such as your own CompanyCam account) beyond what we describe here, or third-party websites we may link to.

Supervisr is an independent, unaffiliated software business. It is not affiliated with, endorsed by, or certified by any construction trade association, standards body, manufacturer, or franchise organization.

2.1 Information you provide

• Account information. When you register through our authentication provider, we collect your name, business or company name, email address, and a securely hashed password. We never store your password in plain text.
• Profile and preferences. Trade preferences, notification settings, and similar account settings you configure.
• User content — project data: jobsite and project photos (native captures and uploaded files) and their metadata; project scope, milestones, notes, and job descriptions; customer information you choose to enter, such as a customer's name and property address; and documents and financial records (contracts, receipts, change orders, and labor or financial figures) that you add.
• Photos of customer properties. Photos you upload may depict jobsites and customer properties, including any people or property visible in them. You are responsible for having the right and any necessary consent to upload these photos.
• Communications. Messages you send us for support or other requests, including emails to support@supervisrapp.com or privacy@supervisrapp.com.

2.2 Information collected automatically

• Usage and analytics data — records of the features and analyses you use, together with technical details of the request such as your IP address, the approximate city, region, and country derived from it, a summary of your browser and device, and the page that referred you. We report on this data in aggregate, but the underlying event records are not anonymous: where an action involves information you typed — for example, the name, email address, and phone number you submit on an early-access or waitlist form — that information is stored in the event record too.
• Device and diagnostic data — application, device, and operating-system information, plus crash and error diagnostics, collected through our error-monitoring provider to keep the Service reliable. This may include device identifiers.
• Push notification tokens — if you enable notifications in the mobile app, we store a push token associated with your account so we can deliver notifications to your device.
• Free-tool data — if you use our public free tool without an account, we process the photos or questions you submit in order to return an analysis. No account is required. To enforce free-usage limits and prevent abuse of the tool, we also create a visitor record containing a browser fingerprint we generate, your IP address, the approximate city, region, and country derived from it, a summary of your browser and device, the page that referred you, and your usage counts and dates — plus your email address if you later give us one. Photos you submit to the free tool are stored in a private storage area. Section 6 explains how long we keep all of this.

2.3 Information from connected services

CompanyCam integration is optional and initiated by you. If you connect your own CompanyCam account, photos and related project metadata from the projects you choose to map are synced into Supervisr. We store your CompanyCam access credentials in encrypted form.

Google connections (Gmail, Google Calendar and Google Drive) are also optional and initiated by you. Section 11 describes exactly what each one accesses, what we store, how long we keep it, and our Limited Use commitment. We store your Google access credentials in encrypted form.

2.4 Payment information

Subscription billing is handled on the web by Stripe. When you subscribe, Stripe collects and processes your payment-card details directly. Supervisr does not receive or store your full card number. We retain only limited billing metadata (such as your subscription tier, billing period, and any promotional code). The Supervisr mobile app does not collect any payment information.

We use the information above to:

• Provide and operate the Service, including running AI analysis of your photos and text and generating flags, reports, and design renderings;
• Create, authenticate, and manage your account;
• Process subscriptions and trials (via Stripe on the web) and apply promotional codes;
• Send transactional emails such as account verification, billing notices, security alerts, and support communications;
• Deliver push notifications you have enabled;
• Provide customer support and respond to your requests;
• Monitor, secure, and troubleshoot the Service, prevent abuse, and detect and fix errors;
• Improve the Service using aggregated and anonymized usage data; and
• Comply with legal obligations and enforce our Terms of Service.

We do not use your information for third-party advertising or ad targeting, and we do not sell it.

SMS and text messaging

With your consent, Supervisr may send you SMS text messages related to your projects — for example, a link to upload jobsite photos, or a link to view a project report. Message frequency varies by project activity, and message and data rates may apply. You can reply STOP at any time to opt out, or HELP for help. We do not sell or share your mobile opt-in information or SMS consent with any third parties or affiliates for their own marketing purposes. See our Terms of Service for additional messaging terms.

Supervisr is an AI product. To generate quality-assurance analysis, design renderings, and related output, the photos and text you submit are sent to third-party AI providers for processing:

• Anthropic (Claude API) — analyzes your jobsite photos and project text to detect and describe potential workmanship and quality issues.
• Google (Gemini API) — performs specialist jobsite quality-assurance analysis and generates images (for example, design renderings).

These providers process your content to return results to us; they act as our service providers under commercial API terms. Under those terms, your content is not used to train their foundation models. We do not use your photos, documents, or other content to train third-party AI models, and we do not sell your content.

If you use the optional voice assistant, your spoken audio is transcribed by a speech-to-text provider to process your request; the voice feature is off by default and enabled by you in Settings. Project addresses may be used to retrieve public property records (such as the year a home was built) to surface age-related safety advisories.

For each analysis, we privately store — inside your own account — a record of the exact context provided to the AI, so you can later understand what information the AI was given when it produced a particular result.

Important limitations of AI analysis

Supervisr can make mistakes. Double-check responses, and use with caution.

Supervisr is not a licensed home inspection service. Its AI analysis is informational only and is not a substitute for inspection or evaluation by a licensed inspector, contractor, engineer, or architect. For any decision affecting a renovation, repair, warranty claim, insurance claim, or legal dispute, consult a qualified licensed professional. AI analysis may be incomplete or inaccurate, and you should not rely on it as your sole basis for any decision.

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined under applicable U.S. privacy laws. We do not engage in third-party advertising or ad targeting.

We share information only in the following circumstances:

5.1 With service providers and sub-processors

We share information with the vendors that help us operate the Service, each under contractual obligations to protect it and use it only to provide services to us:

• Supabase — database, authentication, file storage, and real-time infrastructure (hosting and data storage).
• Anthropic (Claude API) — AI analysis of photos and text (no training on customer content).
• Google (Gemini API) — AI quality-assurance analysis and image generation (no training on customer content).
• Deepgram — speech-to-text transcription, only when you actively use the optional voice assistant; your voice audio is transcribed to text to fulfill your request.
• RentCast — property-records lookup; receives only a project's street address to return the home's construction year for safety advisories, and no other personal data.
• CompanyCam — optional photo synchronization, only if you connect your own CompanyCam account.
• Stripe — subscription payment processing on the web (PCI-compliant; card data is handled by Stripe, not stored by Supervisr).
• Resend — delivery of transactional email.
• Expo — delivery of mobile push notifications.
• Sentry — error monitoring and crash diagnostics.
• Vercel — hosting of the Supervisr web application.

We keep this list current. If we add or remove a sub-processor, we will update this Policy accordingly.

5.2 For legal and safety reasons

We may disclose information to comply with applicable law, regulation, legal process, or a lawful government request; to enforce our Terms of Service; or to protect the rights, property, safety, or security of Supervisr, our users, or the public.

5.3 In a business transfer

If Supervisr is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. We will require the recipient to honor this Policy or provide notice and choices where required by law.

5.4 With people you share reports with

If you generate and send a share link (for example, a Client Report to a homeowner), anyone with that link can view the report you created, without an account. That report contains only the information you chose to include.

We retain your account and project data for as long as your account is active and as needed to provide the Service. We do not automatically delete inactive accounts or the photos, projects, and reports inside them: your data stays indefinitely until you delete it or delete your account, so a project you finished years ago is still there when you come back to it.

Deletion

When you delete your account, your subscription is canceled immediately and you are refunded; you keep access until your account is deleted. Your account is then locked for 5 days so you can change your mind — sign in during that window and everything comes back exactly as it was. After that, we permanently erase your profile, projects, photos, documents, financial records, and related data; copies held in routine encrypted backups are purged within 90 days. Once the 5 days have passed, deletion cannot be reversed — not by you, not by us, and not from a backup.

What we keep, and why

Two categories survive account deletion.

Records of completed work. Supervisr maintains permanent public records of work completed at property addresses. Such a record contains the property address, the category and scope of work, the completion month and year, and the contractor of record. It contains no property owner's name, no contact details, and no financial information, and we do not link it to any account after that account is deleted. We maintain these records in de-identified form, we have taken measures to prevent them from being re-associated with any individual, we do not attempt to re-identify them, and we require anyone we share them with to do the same. Photographs appear on a record only where the property owner has given specific permission for them, and that permission can be withdrawn at any time. A property owner may have their address suppressed permanently at any time, without giving a reason, by contacting privacy@supervisrapp.com or using the link on any record page.

Legally required records. Invoices, payment records, and tax documentation, retained for the period the law requires and used for no other purpose.

Other retention

• Free-tool uploads and the free-tool visitor record described in Section 2.2 are retained indefinitely. Photos you submit to the free tool are kept in a private storage area, are not attached to any account, and are not published; we do not currently run an automatic purge of them. The visitor record — the browser fingerprint, IP address, approximate location, browser and device summary, referrer, and usage counts — is kept for as long as we need it to enforce free-usage limits and prevent abuse of the tool. You can ask us to delete your free-tool uploads and visitor record at any time by emailing privacy@supervisrapp.com; because they are not tied to an account, please tell us roughly when you used the tool and what you submitted so we can find them.
• We may retain limited information for longer where necessary to comply with legal obligations, resolve disputes, prevent abuse, or enforce our agreements.

We take reasonable and appropriate measures to protect your information:

• Data is encrypted in transit (TLS) and at rest.
• Each account's data is isolated using row-level security so that users cannot access one another's data.
• Connected-service credentials, such as CompanyCam access tokens, are encrypted at the database layer.
• Secrets and API keys are stored in a secured vault and are never exposed in the app or returned in API responses.
• We host data with established infrastructure providers located in the United States.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your information, we will notify you as required by applicable law.

You have control over your information:

• Access and correction — you can view and update much of your account and project information directly in the app, and request a copy of the personal information we hold about you.
• Export — you may request an export of your personal information.
• Deletion — you may delete individual content in the app, and you may delete your account, which deletes your data as described in Section 6.
• Withdraw consent — where our processing relies on your consent, you may withdraw it at any time; this does not affect processing already carried out.
• Notification choices — you can turn push notifications on or off through your device or app settings, and unsubscribe from non-essential emails using the link in those emails. We may still send essential transactional or security messages.
• Connected services — you can disconnect your CompanyCam integration or any Google connection at any time in the app.

How to make a request. Email privacy@supervisrapp.com to access, correct, export, or delete your personal information, or to exercise any privacy right. You may also reach general support at support@supervisrapp.com. We will verify your request as appropriate and respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

8.1 California residents (CCPA/CPRA)

If you are a California resident, you have the right to know the categories of personal information we collect (identifiers such as name, email address, IP address, and the browser fingerprint we generate for free-tool abuse prevention; commercial information such as subscription details; internet or network activity; approximate geolocation derived from your IP address; and the photos and content you upload); to access, delete, and correct that information; to obtain a copy of it; and not to be discriminated against for exercising these rights. We do not sell or “share” personal information as those terms are defined under California law. To exercise your rights, email privacy@supervisrapp.com.

8.2 Other U.S. state privacy rights

If you reside in a state with a comprehensive consumer privacy law (for example, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, or Montana), you have similar rights to access, correct, delete, and obtain a copy of your personal information, and to opt out of any sale of personal information or targeted advertising — neither of which we conduct. Use the same contact: privacy@supervisrapp.com. Where required, you may appeal a decision on your request by replying to our response.

Supervisr is a business and productivity tool intended for adults (18 and older). The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18 (or under 13 under the U.S. Children's Online Privacy Protection Act). If you believe a child has provided us personal information, contact privacy@supervisrapp.com and we will delete it.

Supervisr is operated from the United States, and our infrastructure and service providers store and process data in the United States. The Service is intended for users in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, where data-protection laws may differ from those in your location. By using the Service, you consent to that transfer and processing.

The Service may contain links to third-party websites and may connect to third-party services you choose to use (such as CompanyCam or Google). Those services are governed by their own privacy policies and terms, not this one. We encourage you to review the privacy practices of any third-party service before connecting it or providing information to it. We are not responsible for the content or privacy practices of third parties.

Google user data (Gmail, Google Calendar and Google Drive connections)

Connecting Google is optional and you start it. If you connect a Google account in Supervisr's Settings, Supervisr asks only for the permission each connection needs, one connection at a time. Every connection includes basic sign-in information (openid, email and profile — your Google account ID, email address and name), used only to show which account is connected and to send from the right address. The connections are: send email from your Gmail address (gmail.send — Supervisr cannot read your inbox, your sent mail or any other message in your Gmail account); list your calendars and read events on the calendars you choose (calendar.calendarlist.readonly and calendar.events.readonly — nothing is written to those calendars); create and manage a calendar that Supervisr itself makes for your production schedule (calendar.app.created — your other calendars are unreachable); and see only the Drive files and folders Supervisr created or you picked in Google's own file picker (drive.file). Supervisr uses Google user data solely to provide the connection you switched on: sending your bids, work orders, reports and follow-ups from your own address; showing your sales appointments and turning one into a project; writing your job schedule to the Supervisr calendar; and backing up project files and your client message thread to your Drive.

For sales appointments, we store the events on the calendars you chose — time, title, location, organizer, attendees and notes — and the contact details our own software picks out of them; no AI model reads your calendar events. Those appointments appear on your company's sales schedule in Supervisr, where the account owner and other team members who can see that schedule can view them. We keep events from about 60 days in the past to 120 days ahead, erase an event's notes once the appointment is more than 30 days past, and delete every event we copied when you disconnect. If you turn an appointment into a project, the details you choose to carry across (such as the client's name, address, phone and email, and the event notes if you tick that option) become part of that project and are handled like your other project content, including the AI processing described in Section 4 when you use an AI feature on that project.

Supervisr's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and neither we nor our AI providers use it to train AI models. We do not transfer it to anyone except as needed to provide the features you enabled (including to the service providers in Section 5.1 that host and process it for us), for security purposes, to comply with law, or, with your consent, as part of a merger, acquisition or sale of assets. No person at Supervisr reads your Google user data except with your consent, to investigate a security or abuse problem, or where the law requires it. You can disconnect any Google connection at any time in Supervisr's Settings, or remove Supervisr's access from your Google account's permissions page. When you disconnect in Supervisr, we revoke our access at Google, delete the stored tokens and delete the calendar events we copied. Files already saved to your Drive, events already written to the Supervisr calendar, and projects you created in Supervisr remain yours.

This section is for people who apply to work with, or send documents to, a contractor that uses Supervisr (“Applicants”). The contractor is the one collecting your information and deciding how it is used. Supervisr stores and processes it for that contractor, as its service provider, and only to provide the contractor's hiring tools. Supervisr does not find, rank, or recommend Applicants, never shows your information to any other contractor, and never charges you anything.

12.1 What is collected

• On a contractor's apply link: your company and name, business address, phone numbers and email, two emergency contacts (name and phone), your trades and experience, your answers to short questions about your work, up to six photos of your work, and, if you choose, a certificate of insurance. We remove location and camera data from photos. We also record the language you chose, your consent and when you gave it, and a scrambled (hashed) form of your IP address. We use the scrambled address to prevent abuse on both links. When you upload a document, fill out the online W-9 or sign the agreement, we also keep it with that record as evidence of where it was sent from, and the signed agreement and the online W-9 each print a signing record that shows the first 16 characters of it and a summary of your browser and device.
• On the private link a contractor sends you: a Form W-9 (uploaded, or filled out online on our substitute form), insurance and workers' compensation certificates, and, only if that contractor asks, an auto insurance ID card or a driver's licence; your agreement to use electronic records and signatures, your signature, and the signed agreement.
• If you already work with the contractor, it can send you the private link without an application. The contractor then gives us your name, business name, email address, phone number and business address from its own records; what you send is saved to your record with that contractor; a new W-9 replaces the one the contractor had on file; and Supervisr sends you no automatic reminders.
• Pay rates are never asked for on these forms.

12.2 How it is used, including AI

• To give your application and documents to the contractor, to send you the messages described below, and to keep the forms secure.
• If the contractor has AI features on, our AI providers (section 4) may read your insurance certificates, translate your written answers into English (your original words are kept), and describe the work shown in your photos. The photo notes describe the work, never you, and contain no score or ranking. You are told before you send photos that the contractor may use AI tools to help review them.
• The AI does not decide anything. No application is accepted, turned down, ranked, or sorted by the AI or by any other automatic process; a person at the contractor makes every decision.
• Your W-9 and driver's licence are never sent to an AI model. We do not use your photos, signature, or documents to identify you by your face, fingerprint, voice, or any other biometric identifier, and we collect no biometric identifiers.
• The contractor may keep its own notes about your application, including a note not to work with someone, and may be told when a new application matches such a note. Those notes stay inside that contractor's account.
• We never sell your information, never use it for Supervisr's own marketing, and never use your contact details for anything but your application and your work with that contractor.

12.3 Your W-9 and other sensitive documents

Your full taxpayer identification number is kept only inside your W-9 file. Each W-9 or driver's licence is encrypted with its own key before it is stored, and that key is itself encrypted with a key held in a separate secrets vault. Our database keeps only the type of number (SSN or EIN) and its last four digits. Only the contractor's account owner can open these documents, through a one-time link that works for five minutes, and every view is logged. Other people on the contractor's team see only that a document is on file. A Supervisr administrator can open one only at the contractor's request or in an emergency, with a written reason, and that access is logged.

12.4 Messages

Supervisr emails you on the contractor's behalf, and replies go to the contractor: a copy of what you sent, your private link and one-time code, signed copies, and no more than three reminders about missing documents, at least 24 hours apart and only between 8 a.m. and 9 p.m. When you apply, the copy of what you sent, your packet link, your signed copy and every reminder have a link where you can stop reminders or withdraw your information; one-time codes and links you asked for do not. A packet the contractor sends you as a crew it already works with has no such link, on the packet email or on your signed copies: Supervisr sends no automatic reminders for it, and what you send becomes part of the contractor's own business records, kept for the periods in 12.5. To ask the contractor to stop, or to ask about your information, reply to the email (replies go to the contractor) or email privacy@supervisrapp.com. If a contractor emails you its apply link before you have applied, that email has an unsubscribe link. When you send your application you agree that the contractor, and Supervisr on its behalf, may call and text you about it. Supervisr does not send hiring text messages today. If it starts, you can reply STOP to stop and HELP for help, and your mobile number and consent are never shared with anyone for their marketing.

12.5 How long it is kept

• A W-9 or driver's licence from someone the contractor does not activate as a crew is deleted 30 days after it was uploaded.
• For a crew the contractor activates, those documents are kept while the crew is active and for 4 years after the contractor's last payment to it, because the contractor may need them for tax reporting.
• An agreement signed by both sides is kept for the working relationship and 6 years after, as a contract record.
• An application that is never sent is deleted after 30 days. An application the contractor passes on is deleted after 12 months. A note not to work with someone is kept for up to 24 months.
• If you withdraw (using that link, or by asking the contractor or emailing privacy@supervisrapp.com), the contractor stops seeing your information right away and it is deleted within 30 days. If you are already an activated crew, that link only stops reminders, and the contractor keeps the records it needs for tax and contract purposes for the periods above; to ask for anything else to be deleted, ask the contractor or email privacy@supervisrapp.com.
• To have an application or a document deleted sooner, the contractor (or you) can email privacy@supervisrapp.com, and we delete it within 10 days, after checking the request with the contractor where it comes from you. If the contractor deletes its Supervisr account, its hiring records are deleted with it.

12.6 Your rights and how to reach us

To see, correct, or delete your information, or to ask about a decision, contact the contractor you applied to; its emails come from “<company> via Supervisr” and replies go to it. You can also email privacy@supervisrapp.com. Because we hold your information for the contractor, we will pass your request to the contractor and help it respond, and we will act on it ourselves where the law requires us to. Depending on where you live, privacy laws such as California's (CCPA/CPRA) may give you the right to know what was collected and to access, correct, and delete it. We will not treat you differently for making a request.

We may update this Policy from time to time, and we will update the "Last updated" date above whenever we do. When we make material changes, we will show you a notice in the app describing what changed, with a link to the full Policy, and ask you to accept it. For an existing account, the revised Policy takes effect for you when you accept it — not on a date we pick. For a new account, it is part of what you agree to at signup. If we cannot reach you in the app, we will notify you by email before the changes take effect.