Privacy
Effective October 17, 2026.
GetSubRoster is a service of Thriving Partners, LLC. This notice covers the contractors and agencies who use GetSubRoster, and the subcontractors and insurance agents whose information they keep in it. We do not sell, solicit, negotiate, or advise on insurance, and we don't sell personal information.
Resumen para subcontratistas
Un contratista con el que usted trabaja usa GetSubRoster para guardar su certificado de seguro y pedirle lo que falta. Guardamos el nombre de su empresa, su número de licencia, sus datos de contacto, sus documentos de seguro y los mensajes que le enviamos. Esos datos nos llegan del contratista, de su agente de seguros o de usted. Solo le escribimos por WhatsApp si usted acepta. Para dejar de recibir mensajes, toque "No enviar más mensajes" en su enlace (detiene todos los recordatorios de ese contratista) o responda BAJA por WhatsApp (detiene los recordatorios a su número de parte de todos los contratistas). Si nos envía por correo un archivo que no podemos leer, le respondemos una sola vez para pedirle una copia más clara. Para corregir sus datos, escriba a [email protected]. Este resumen es informativo; el texto en inglés es el que rige.
Contractors and agencies
We collect account holders' names and work email addresses, company details, and payment status. Card details stay with our payment processor.
If a business sends sample certificates before opening an account, we use them only to run the requested check, contact no one from them, and delete them within 30 days.
While you're signed in, the app records each sign-in session's first and last activity, IP address and browser, to keep accounts secure and to notice a login shared between people. These records are deleted after 90 days.
We email a company's members about its roster: the day a subcontractor turns Blocked, when reminders can't fix something, and a Monday summary. Each member can turn these off in Settings.
Subcontractors and their insurance agents
What we hold: business name and DBA, Florida license number, the subcontractor's email and mobile number and preferred language, their insurance agent's name, email and phone, their certificates and exemption documents, the results of license and state lookups, the messages we send, and any replies.
Where it comes from: the contractor or agency that keeps the subcontractor file (typed in, imported from a spreadsheet, or picked up from an email they forward), the subcontractor's insurance agent (contact details printed on a certificate), the subcontractor (documents they upload and messages they send), and public state records (license status from the Department of Business and Professional Regulation).
Why: to keep each contractor's subcontractor file current and to ask for missing or expiring documents. Each contractor sees only its own subcontractor files.
Messages, consent and opting out
Email and WhatsApp messages go out on behalf of the contractor. We send WhatsApp messages only to subcontractors who agreed themselves, on their link page or by sending us a message from their phone. A contractor can invite a subcontractor but can't agree for them. We keep a record of each agreement and each opt-out: the date and time, the phone number, the words shown or sent, and where it happened.
To stop messages, a subcontractor can:
- tap "Stop messages" on their link page, which ends that contractor's reminders on every channel (email, WhatsApp, and the requests to the subcontractor's insurance agent); or
- reply STOP or BAJA on WhatsApp, which ends reminders to that number from every contractor that has it in GetSubRoster. The confirmation says so.
Each opt-out is recorded with its scope. An insurance agent who doesn't want these requests can reply to say so, or write to [email protected], and we'll stop them.
When someone emails a certificates address a file we can't read at all, we send that sender one automatic reply asking for a clearer copy or the PDF, at most once a day.
Corrections and deletion
A subcontractor or agent can ask us to correct their contact details at [email protected]. The documents in a contractor's file are that contractor's audit records, so we'll pass a request to delete them to the contractor and tell you who to contact.
What we don't keep
When a document turns out to be a W-9, it's deleted without keeping the taxpayer identification number. Files that couldn't be read are deleted after 30 days.
Retention
Records stay while the contractor's account is open, so they can serve as audit evidence. A subcontractor removed from a roster stops getting messages, and its records are kept for the contractor's audit file. Consent and opt-out records are kept with the subcontractor's file. When a contractor closes its account and asks us to, we delete its records within 90 days, except what the law requires us to keep.
Who processes data for us
- Supabase: database, file storage and sign-in
- Cloudflare: website, the inbox that receives forwarded certificates, and cookie-free visit counts on our public pages (not on subcontractors' link pages or in the app)
- Anthropic: reads documents with an AI model; under its commercial terms, inputs aren't used to train models
- Resend: sends email
- Meta (WhatsApp Business Platform): sends and receives WhatsApp messages
- Stripe: payments
Files are stored encrypted and are visible only to the company that received them and to us when we provide support.
LicensedAndInsured.com
A subcontractor's link page shows an optional link to LicensedAndInsured.com, a separate service of Thriving Partners, LLC. Nothing about the subcontractor is shared with it unless they choose to sign up there.