Privacy Policy

Last updated: March 2026

1. Information We Collect

PaperBoss collects information you provide when creating an account (email, company name, state), adding subcontractors (name, email, phone, trade), and uploading compliance documents (certificates of insurance, W-9 forms, lien waivers). We also collect usage data through cookies and analytics tools.

2. How We Use Your Information

We use your information to provide the PaperBoss service, send document request notifications, expiration reminders, and account-related emails. We do not sell your personal information.

3. Third-Party Services

PaperBoss uses the following third-party services to operate: Supabase (database and authentication), Stripe (payment processing), Resend (email delivery), Sentry (error monitoring), and PostHog (analytics). Each service processes data in accordance with their own privacy policies.

4. Data Storage and Security

All data is stored on Supabase infrastructure in the US East (Virginia) region. Documents are encrypted in transit (TLS) and at rest. Access is controlled via row-level security policies ensuring cross-account isolation.

5. Data Retention

We retain your data for as long as your account is active. Compliance documents are retained for up to 7 years in accordance with IRS guidance. When you delete your account, all data is permanently removed.

6. Your Rights

You may access, update, or delete your personal information at any time through your account settings. To request a full data export or have questions about your data, contact us at privacy@paperboss.io.

7. Contact

For privacy-related questions, email privacy@paperboss.io.