Privacy Policy
Last updated October 28, 2026
Contractor Vitals is a service provided by Company Vitals to businesses that track the compliance documents of their contractors and installers. This policy explains what information the service handles and how.
Who controls the information
Each client business decides what information goes into its workspace and is responsible for it. Company Vitals processes that information on the client's behalf, under its agreement with the client, to provide and support the service.
Information we handle
- About people who sign in: name, email address and profile photo from your Google account; your role in a workspace; and a history of the changes you make.
- About contractors: business names, contact names, business phone numbers, email and mailing addresses, trades, license, certification and policy numbers, document dates and status, links to documents kept in the client's Google Drive, and notes.
- Information we don't accept: Social Security numbers, taxpayer IDs, bank or card details, and copies of the documents themselves. The service refuses common forms of tax IDs.
How we use Google sign-in
Contractor Vitals uses Google sign-in only to confirm who you are. It requests your name, email address and profile photo, and nothing else from your Google account. It does not access your Google Drive, Gmail, contacts or other Google data. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How we use information
- To provide the service: tracking documents, showing dashboards and sending reminder and invitation emails.
- To keep the service secure, including audit logs of changes and support access.
- To support clients when they ask for help.
We do not sell information, use it for advertising, or use it to train AI models. Reminder emails contain only a contractor's name, the document type, its expiration date and a link.
Who we share it with
We use a small number of service providers to run Contractor Vitals: Vercel (hosting), Supabase (database and sign-in), Resend (email delivery) and Google (sign-in). They process information only to provide their services to us. We may also disclose information if required by law.
Security
Each client's records are separated by the database itself, connections are encrypted, data is encrypted at rest and backed up daily, and Company Vitals staff can view a client's workspace only through a logged, time-limited support session the client can see.
Retention and deletion
Information is kept while the client's subscription is active. After it ends, the workspace stays read-only for 90 days so the client can export its records, and is then deleted; backup copies expire within 30 days after that. A client can ask us to delete its data sooner.
Your choices
If you are a contractor or a client's staff member and want to see, correct or delete information about you, contact the business that uses Contractor Vitals, or contact us and we will pass your request on. Team members can switch off reminder emails on their workspace's Team page.
Contact
Questions about this policy: jennifer@companyvitals.com. If we change this policy materially, we will update the date above and tell clients by email.