Privacy Policy

Privacy Policy

SupSonic

OVERVIEW

SupSonic ("we," "our," "the tool") is an administrative productivity tool for roofing professionals. This Privacy Policy describes how we handle information when you use our service.

INFORMATION WE COLLECT

Account Information

When you create an account, we collect your name, email address, and company name. This information is used for account management and communication.

Uploaded Documents

Users upload insurance approval documents for processing. These documents may contain personally identifiable information (PII) including policyholder names, addresses, phone numbers, and insurance policy numbers.

HOW WE HANDLE UPLOADED DOCUMENTS

PII Identification and Redaction

Personally identifiable information within uploaded documents is identified and redacted prior to document processing. Our system removes policyholder names, addresses, phone numbers, and policy numbers before extracting relevant roofing scope information.

What We Extract and Retain

After PII redaction, our system extracts structured data including roofing line items, quantities, measurements, and approved scope details. Only this non-PII structured data is retained for generating draft content.

What We Do Not Store

We do not store policyholder names, property addresses, phone numbers, Social Security numbers, policy numbers, or other policyholder PII.

THIRD-PARTY SERVICES

Our document processing infrastructure uses Google Cloud services, including Google Cloud Data Loss Prevention (DLP) for PII identification and Google Document AI for document processing. These services operate under Google Cloud's Data Processing Addendum, which prohibits Google from using customer data for advertising or model training purposes. Redacted documents—not original uploads—are sent to Document AI for processing.

DATA SECURITY

We implement industry-standard security measures including encryption in transit and at rest, secure cloud infrastructure, and access controls. Documents are processed in a secure environment and PII is redacted before document processing occurs.

DATA RETENTION

Account information is retained while your account is active. Structured extraction data (non-PII line items and scope details) is retained to provide our services. Original uploaded documents are not retained after processing is complete.

YOUR RIGHTS

You may request deletion of your account and associated data at any time by contacting us. Upon account deletion, all associated data will be removed from our systems.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify users of material changes via email or in-app notification.

CONTACT

If you have questions about this Privacy Policy or our data handling practices, please contact us at support@supsonicapp.com.