Privacy Policy
Operated by Skyfury LLC (“Skyfury”, “Company”, “we”, “us”, or “our”).
Last Updated: September 30, 2026
Our Data Privacy Principles
Skyfury LLC builds tools to protect construction contractors and streamline compliance. We believe in total transparency:
1. Overview & Scope
This Privacy Policy explains how Skyfury LLC collects, uses, protects, and discloses personal information and business records when you interact with COI Hound (coihound.com), our APIs, subcontractor upload portals, and related services.
This policy applies to:
- Client Users: General Contractors, builders, project managers, and administrators who register accounts on COI Hound;
- Vendor Users: Trade subcontractors, suppliers, and insurance brokers who submit Certificates of Insurance or interact with our magic-link upload portals; and
- Website Visitors: Individuals who browse our public marketing pages or use our interactive demonstration tools.
2. Information We Collect
We collect information in several ways depending on how you interact with our platform:
When you create an account or configure project settings, we collect your name, company name, email address, telephone number, business address, and subscription tier.
To facilitate insurance tracking, General Contractors provide subcontractor company names, contact names, trade classifications (e.g., Roofing, Electrical, HVAC), business email addresses, and phone numbers.
When an ACORD 25 PDF or certificate photo is uploaded via our magic link or dashboard, we store the file and extract relevant insurance metadata, including: insurance producer/broker agency name, insurer carrier names, policy numbers, effective dates, policy expiration dates, General Liability occurrence and aggregate limits, Workers' Compensation statutory status, Automobile Liability limits, Umbrella/Excess limits, and Certificate Holder / Additional Insured endorsements.
If you purchase a paid subscription, payment card details and billing addresses are collected directly by our payment processor (Stripe). Skyfury LLC does not store full credit card numbers on our servers.
We automatically collect technical data when you use the platform, including IP address, browser type, device identifiers, referring URLs, timestamps, and upload transaction IDs.
3. Artificial Intelligence & Automated OCR Processing
How We Use AI for Certificate Extraction:
When a Certificate of Insurance is uploaded, COI Hound utilizes optical character recognition (OCR) and enterprise artificial intelligence APIs (such as OpenAI's API) to read and normalize policy figures into structured JSON data.
- No Model Training: Under our enterprise API configuration, data and files transmitted to our AI processors are processed strictly to return extraction results and are not used to train, retrain, or improve foundational machine learning models.
- Ephemeral Vision Processing: Images and document text sent for OCR parsing are processed transiently and are not retained by the AI processor beyond transient inference requirements.
4. How We Use Collected Information
Skyfury LLC uses the information we collect solely for business purposes related to operating and improving the Services:
- Providing, operating, and maintaining the COI Hound tracking dashboard;
- Validating certificate policy dates and generating automated renewal notices (e.g., 30, 14, and 3 days before expiration);
- Drafting actionable endorsement request emails for insurance brokers;
- Generating downloadable CSV audit reports for annual General Contractor insurance audits;
- Processing subscription payments and preventing fraudulent use; and
- Responding to customer support requests and communicating technical updates.
5. How We Share Information
We do not sell personal information or customer records. We disclose information only in the limited circumstances described below:
- Between Contractor and Subcontractor: Subcontractors uploading certificates through a magic link submit their documents directly to the requesting General Contractor's private organization dashboard.
- Authorized Service Providers: We share data with trusted cloud infrastructure providers who assist in operating the platform, subject to strict confidentiality agreements:
- Convex Inc.: Realtime database, file storage, and serverless backend execution.
- Vercel Inc.: Application hosting, edge computing, and SSL encryption delivery.
- OpenAI LLC: Optical character recognition and structured JSON extraction via enterprise API.
- Stripe Inc.: Payment gateway and subscription billing management.
- Legal Compliance & Protection: We may disclose information if required to do so by law, subpoena, or court order, or when we believe disclosure is necessary to protect the rights, property, or safety of Skyfury LLC, our customers, or the public.
- Business Transfers: In the event of a merger, acquisition, reorganization, or sale of company assets, customer information may be transferred as part of the transaction, subject to the recipient honoring this Privacy Policy.
6. Data Security & Storage
Skyfury LLC employs industry-standard technical and organizational security controls designed to safeguard your information against unauthorized access, loss, or alteration:
- All web traffic and API transmissions are encrypted using Transport Layer Security (TLS 1.3 / HTTPS);
- Stored documents and database records are encrypted at rest using AES-256 encryption;
- Subcontractor upload links use cryptographically generated high-entropy random tokens to prevent URL guessing or unauthorized enumeration; and
- Database access is restricted through least-privilege administrative controls and role-based policies.
7. Your Privacy Rights & Data Choices
Depending on your jurisdiction (including California under CCPA/CPRA, and other applicable state or international data protection laws), you may have the following rights regarding your personal information:
- Right to Know & Access: You may request details on the categories and specific pieces of personal information we have collected about you.
- Right to Correction: You may request correction of inaccurate personal data maintained in your account.
- Right to Deletion: You may request the deletion of your account and associated uploaded records, subject to legal recordkeeping exemptions (e.g., tax records or active dispute resolution).
- Right to Opt-Out: Because we do not sell your personal information or share it for cross-context behavioral advertising, we do not require an opt-out mechanism for sales.
To exercise any of these rights, please email your request to privacy@coihound.com. We will respond within thirty (30) days following identity verification.
8. Retention of Records
We retain customer account information, subcontractor records, and insurance certificates for as long as your account remains active or as necessary to fulfill the purposes outlined in this policy, support General Contractor audit defense obligations, comply with statutory tax and accounting requirements, and resolve legal disputes. You may delete individual subcontractor entries or request account termination at any time through the dashboard.
9. Children’s Privacy
COI Hound is a commercial business-to-business platform and is not directed to individuals under eighteen (18) years of age. We do not knowingly collect personal information from children.
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our operational practices, technology, or legal requirements. Material revisions will be posted on this page with an updated “Last Updated” date. Continued use of our Services after the effective date of an updated policy constitutes your acknowledgment and agreement.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact: