Privacy Policy

SuperReports ("SuperReports," "we," "us," or "our") is a daily-reporting application for construction superintendents and the companies they work for, operated by Sunstate Bay Ventures, LLC, a Florida limited liability company doing business as SuperReports. This Privacy Policy explains what information we collect when you use the SuperReports app at superreports.app, how we use it, who we share it with, and the rights you have over it.

By creating an account or using the app, you agree to the practices described here. If you do not agree, please do not use SuperReports.

1. Information we collect

Information you or your company provide

• Account information — your name and email address, used to invite you, sign you in, and identify you on a workspace.
• Report content — the daily reports you create, including the text you enter in each section (work performed, manpower, delays, safety, visitors, notes), photos you attach, and captions.
• Voice recordings — if you use voice notes, the audio you record. It is sent for transcription and organization (see Section 3), then discarded — we do not retain the audio file.
• Correspondence — anything you include if you email us (for example, at privacy@sunstatetrades.com).
• Mailing list address — if you subscribe to our monthly updates on the SuperReports website, the email address you enter. You do not need a SuperReports account to subscribe, and subscribing does not create one. We use it only to send that monthly email, and you can unsubscribe at any time by replying to any update or emailing privacy@sunstatetrades.com.

Information collected automatically

• Approximate location — if you allow it, your device's GPS position is used to fetch the weather for your report. The coordinates are rounded to roughly 100 metres before they leave your device, so they identify a neighbourhood rather than an address; the rounded pair is sent to our weather provider (see Section 3) and stored on the report as the day's weather summary. You can decline the location prompt and enter weather manually.
• Usage and device data — standard signals such as IP address, browser/device type, and timestamps, recorded by our hosting and database providers for security and operation.

Cookies and analytics

We use a small number of cookies and similar technologies on superreports.app and in the app at app.superreports.app:

• Strictly necessary — sign-in and session cookies set by Supabase to keep you logged in, and a local setting that remembers your email address on the sign-in screen if you tick that box. These are required for the service to work and cannot be switched off.
• Attribution — a first-party cookie named sr_attribution, kept for up to 90 days on the superreports.app domain. It records how you first reached us (the referring site, the page you landed on, and any campaign tags in the link) so that we can tell which channels bring people to SuperReports. It carries no name, email address, or report content, and query strings are stripped before anything is stored.
• Analytics — Google Analytics 4, which sets its own cookies to measure page views, which pages lead to a sign-up, and roughly where in the world visitors are. We do not send names, email addresses, or any report content to Google.

We do not use advertising cookies, and we do not allow third parties to track you across other websites through our site.

You can clear or block cookies in your browser settings; blocking the strictly necessary ones will stop you being able to sign in. The attribution and analytics cookies can be blocked without affecting how the app works — browsers can refuse them per site, and Google publishes a browser add-on that opts you out of Google Analytics everywhere. We are adding an in-page control so that non-essential cookies can be declined before they are set.

Payment information

Subscriptions are processed by Stripe. Your card details are entered on Stripe's hosted checkout and handled by Stripe — SuperReports never receives or stores your full card number. We store only a Stripe customer/subscription identifier and your plan status.

Children

SuperReports is a workplace tool intended for adults. We do not knowingly collect information from anyone under 16.

2. How we use information

• To operate the app — create, store, organize, and deliver daily reports.
• To authenticate you and manage your workspace and seats.
• To transcribe and organize voice notes into report sections for your review.
• To fetch weather for a report from your location.
• To process subscription payments and manage billing.
• To send transactional email (superintendent invitations, daily filing reminders you opt into, support replies, and account notices).
• To send our monthly product update, if you subscribed to it on the website — product and feature news and how-to guides. Every update includes a way to unsubscribe, and we do not add account holders to this list automatically.
• To respond to support requests, and to secure, maintain, and improve the service.
• To comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Service providers (subprocessors)

We rely on a small set of trusted providers to run SuperReports. Each processes data only to provide its service and under its own privacy terms:

4. How report data is shared

Daily reports are created for the construction company a superintendent works for. A report is shared in the following ways:

• Inside your workspace. Workspace owners and admins can view every submitted report for their company's projects from the SuperReports dashboard, together with the photos attached to those reports. A report a superintendent has started but not yet submitted stays private to that superintendent.
• By the superintendent, as a PDF. The superintendent generates a PDF and emails or otherwise shares it with whomever they choose — for example, their project manager — using their own device and email account. SuperReports does not send reports to recipients on their behalf.
• Bundled with Sunstate Trades. If the company also uses Sunstate Trades, submitted reports are made available to its project managers and owners inside their Sunstate Trades dashboard.

We otherwise share information only with the service providers in Section 3, or where required by law or to protect rights and safety.

5. Data retention

Submitted reports are the system of record and are retained for as long as the account/workspace is active, and afterward as needed for the company's records and our legal obligations. Photos attached to reports are retained with the report. Voice audio is not retained — it is transcribed and discarded. Account and billing records are kept while your account is active and for a reasonable period afterward. You can request deletion as described in Section 8.

6. How we protect information

We use reasonable administrative and technical measures to protect your information, including encryption in transit (HTTPS), row-level access controls in the database, private storage with short-lived signed access for photos, and keeping third-party API credentials server-side. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

7. International users

SuperReports is operated from the United States, and the information we collect is processed in the U.S. If you use the app from outside the U.S., you understand that your information will be transferred to and processed in the U.S., which may have different data-protection rules than your home country.

8. Your privacy rights

EEA / UK (GDPR / UK GDPR)

You may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, to withdraw consent, and to lodge a complaint with your data-protection authority. Our legal bases are performance of a contract (operating the service), consent (location and voice features you opt into), legitimate interests (security and improvement), and legal compliance.

California (CCPA / CPRA)

California residents may request to know, delete, or correct personal information, and to opt out of any "sale" or "sharing" as defined under California law. We do not sell personal information.

How to exercise your rights

Email privacy@sunstatetrades.com from the address on your account. Note that reports are typically owned by the construction company that operates the workspace; for deletion of report content we may direct or coordinate the request with that company. We will not discriminate against you for exercising your rights.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide notice in the app or by email.

10. Contact

Questions about this policy or your information can be sent to:

Sunstate Bay Ventures, LLC
d/b/a SuperReports
privacy@sunstatetrades.com