Privacy Policy
Last updated: 2026-05-28
What this covers
This policy covers the subxray.com marketing site. Use of the subXray product itself — uploading bid documents, generating leveling output — is governed by a separate pilot agreement and NDA signed before any bid documents are shared.
What I collect
From the lead form on this site: your name, work email, company, role, and your free-text answer about bid review.
Automatically, when you visit: standard server request logs — IP address, user agent, timestamp, requested URL — kept for security and abuse prevention.
No analytics, no advertising pixels, no tracking cookies. If that changes, this policy changes with it.
Why I collect it
- To respond to your inquiry about the pilot.
- To decide whether you fit the pilot criteria (mid-size GC or CM, 5–25 projects a year).
- To follow up by email about subXray — and only subXray.
Who sees it
Me — Konstantin, the person running subXray. That is the entire access list at pilot stage.
The site and database are hosted on Heroku, which has its own infrastructure-level access to the systems hosting your data. That's standard for any web-hosted service.
I don't sell your data. I don't share it with marketers or list brokers. I don't send it to third parties beyond the hosting infrastructure above.
How long I keep it
Lead-form submissions: kept while subXray is operating and you might still be a relevant contact. If you ask me to delete your record, I'll delete it within 30 days.
Your choices
Email hello@subxray.com to see what I have on you, correct it, or have it deleted.
Every email I send will include an unsubscribe link or a "reply STOP" instruction. Opting out of follow-ups doesn't require you to delete your record — they're separate.
Security
Your data is stored in a managed Postgres database with access limited to me. I take reasonable steps to protect it, but I won't pretend any system is unbreakable.
Children
This site is for construction-industry professionals. It is not directed at anyone under 18, and I don't knowingly collect information from minors.
Changes to this policy
If this policy changes in a way that matters, the "Last updated" date will move and I'll summarize the change at the top of this page for 30 days.