Data Protection & Privacy

Privacy Policy

Operated by Skyfury LLC (“Skyfury”, “Company”, “we”, “us”, or “our”).
Last Updated: September 30, 2026

Our Data Privacy Principles

Skyfury LLC builds tools to protect construction contractors and streamline compliance. We believe in total transparency:

Zero AI TrainingYour insurance documents and customer records are never used to train public AI models.
No Data SellingWe do not sell, rent, or broker your subcontractor or project data to lead generators or third parties.
End-to-End EncryptionAll documents, tokens, and data payloads are encrypted in transit (TLS 1.3) and at rest (AES-256).

1. Overview & Scope

This Privacy Policy explains how Skyfury LLC collects, uses, protects, and discloses personal information and business records when you interact with COI Hound (coihound.com), our APIs, subcontractor upload portals, and related services.

This policy applies to:

  • Client Users: General Contractors, builders, project managers, and administrators who register accounts on COI Hound;
  • Vendor Users: Trade subcontractors, suppliers, and insurance brokers who submit Certificates of Insurance or interact with our magic-link upload portals; and
  • Website Visitors: Individuals who browse our public marketing pages or use our interactive demonstration tools.

2. Information We Collect

We collect information in several ways depending on how you interact with our platform:

A. Account & Contractor Information

When you create an account or configure project settings, we collect your name, company name, email address, telephone number, business address, and subscription tier.

B. Subcontractor Directory Data

To facilitate insurance tracking, General Contractors provide subcontractor company names, contact names, trade classifications (e.g., Roofing, Electrical, HVAC), business email addresses, and phone numbers.

C. Insurance Certificate (ACORD 25) Documentation & Extracted Data

When an ACORD 25 PDF or certificate photo is uploaded via our magic link or dashboard, we store the file and extract relevant insurance metadata, including: insurance producer/broker agency name, insurer carrier names, policy numbers, effective dates, policy expiration dates, General Liability occurrence and aggregate limits, Workers' Compensation statutory status, Automobile Liability limits, Umbrella/Excess limits, and Certificate Holder / Additional Insured endorsements.

D. Billing & Transaction Information

If you purchase a paid subscription, payment card details and billing addresses are collected directly by our payment processor (Stripe). Skyfury LLC does not store full credit card numbers on our servers.

E. Usage, Log & Device Data

We automatically collect technical data when you use the platform, including IP address, browser type, device identifiers, referring URLs, timestamps, and upload transaction IDs.

3. Artificial Intelligence & Automated OCR Processing

How We Use AI for Certificate Extraction:

When a Certificate of Insurance is uploaded, COI Hound utilizes optical character recognition (OCR) and enterprise artificial intelligence APIs (such as OpenAI's API) to read and normalize policy figures into structured JSON data.

  • No Model Training: Under our enterprise API configuration, data and files transmitted to our AI processors are processed strictly to return extraction results and are not used to train, retrain, or improve foundational machine learning models.
  • Ephemeral Vision Processing: Images and document text sent for OCR parsing are processed transiently and are not retained by the AI processor beyond transient inference requirements.

4. How We Use Collected Information

Skyfury LLC uses the information we collect solely for business purposes related to operating and improving the Services:

  • Providing, operating, and maintaining the COI Hound tracking dashboard;
  • Validating certificate policy dates and generating automated renewal notices (e.g., 30, 14, and 3 days before expiration);
  • Drafting actionable endorsement request emails for insurance brokers;
  • Generating downloadable CSV audit reports for annual General Contractor insurance audits;
  • Processing subscription payments and preventing fraudulent use; and
  • Responding to customer support requests and communicating technical updates.

5. How We Share Information

We do not sell personal information or customer records. We disclose information only in the limited circumstances described below:

  • Between Contractor and Subcontractor: Subcontractors uploading certificates through a magic link submit their documents directly to the requesting General Contractor's private organization dashboard.
  • Authorized Service Providers: We share data with trusted cloud infrastructure providers who assist in operating the platform, subject to strict confidentiality agreements:
    • Convex Inc.: Realtime database, file storage, and serverless backend execution.
    • Vercel Inc.: Application hosting, edge computing, and SSL encryption delivery.
    • OpenAI LLC: Optical character recognition and structured JSON extraction via enterprise API.
    • Stripe Inc.: Payment gateway and subscription billing management.
  • Legal Compliance & Protection: We may disclose information if required to do so by law, subpoena, or court order, or when we believe disclosure is necessary to protect the rights, property, or safety of Skyfury LLC, our customers, or the public.
  • Business Transfers: In the event of a merger, acquisition, reorganization, or sale of company assets, customer information may be transferred as part of the transaction, subject to the recipient honoring this Privacy Policy.

6. Data Security & Storage

Skyfury LLC employs industry-standard technical and organizational security controls designed to safeguard your information against unauthorized access, loss, or alteration:

  • All web traffic and API transmissions are encrypted using Transport Layer Security (TLS 1.3 / HTTPS);
  • Stored documents and database records are encrypted at rest using AES-256 encryption;
  • Subcontractor upload links use cryptographically generated high-entropy random tokens to prevent URL guessing or unauthorized enumeration; and
  • Database access is restricted through least-privilege administrative controls and role-based policies.

7. Your Privacy Rights & Data Choices

Depending on your jurisdiction (including California under CCPA/CPRA, and other applicable state or international data protection laws), you may have the following rights regarding your personal information:

  • Right to Know & Access: You may request details on the categories and specific pieces of personal information we have collected about you.
  • Right to Correction: You may request correction of inaccurate personal data maintained in your account.
  • Right to Deletion: You may request the deletion of your account and associated uploaded records, subject to legal recordkeeping exemptions (e.g., tax records or active dispute resolution).
  • Right to Opt-Out: Because we do not sell your personal information or share it for cross-context behavioral advertising, we do not require an opt-out mechanism for sales.

To exercise any of these rights, please email your request to privacy@coihound.com. We will respond within thirty (30) days following identity verification.

8. Retention of Records

We retain customer account information, subcontractor records, and insurance certificates for as long as your account remains active or as necessary to fulfill the purposes outlined in this policy, support General Contractor audit defense obligations, comply with statutory tax and accounting requirements, and resolve legal disputes. You may delete individual subcontractor entries or request account termination at any time through the dashboard.

9. Children’s Privacy

COI Hound is a commercial business-to-business platform and is not directed to individuals under eighteen (18) years of age. We do not knowingly collect personal information from children.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our operational practices, technology, or legal requirements. Material revisions will be posted on this page with an updated “Last Updated” date. Continued use of our Services after the effective date of an updated policy constitutes your acknowledgment and agreement.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact:

Skyfury LLC
Attention: Privacy Office (COI Hound)
General Support: support@coihound.com