1. Who we are

PrequalPilot is a compliance management platform for specialty contractors. We help you track ISNetworld documents, draft RAVS answers, and manage safety programs so nothing expires or slips through the cracks. Our service is operated at prequalpilot.com. If you have any questions about this policy, contact us at hello@prequalpilot.com.

2. Information we collect

Account information

When you create an account we collect your email address and, optionally, your full name. Your account is authenticated via a magic link sent to your email — we do not store passwords.

Organization and document data

When you use PrequalPilot you provide information about your company (organization name) and your compliance documents: document names, document types, issuance dates, expiry dates, and the file uploads themselves (PDFs, images). This data is the core of what you entrust to us and it is yours — we do not claim any rights to it.

RAVS answers and safety program content

When you draft RAVS answers or manage safety program content through the platform, that content is stored in your account. Content you submit for AI-assisted drafting is processed by Anthropic (see Third-party services below).

Phone number

If you opt in to SMS alerts, we collect your mobile phone number. Providing a phone number is entirely optional. You can opt out or remove your number at any time from Settings → Alerts.

Usage data

We collect standard server logs including IP addresses, browser type, pages visited, and timestamps. This helps us diagnose errors and understand how the product is used. We do not use third-party advertising trackers.

3. How we use your information

To provide the service — storing and displaying your documents, tracking expiry dates, sending reminder emails and SMS alerts on your chosen schedule, and generating AI-assisted RAVS answer drafts.
Transactional emails — sign-in magic links, document expiry reminders, and account-related notifications. These are not marketing emails and cannot be unsubscribed from while your account is active.
SMS alerts — only sent to users who have explicitly opted in and saved a phone number. You can opt out at any time from Settings → Alerts, or by replying STOP to any message.
Product improvement — aggregate, anonymized usage patterns help us prioritize features. We do not sell data or build advertising profiles.

4. Third-party services

We share your data with the following sub-processors only as needed to operate the service:

Supabase — database hosting, authentication, and file storage. Your documents and account data are stored on Supabase infrastructure. Supabase is SOC 2 Type II certified.
Resend — transactional email delivery. Your email address and the content of reminder emails are processed by Resend to deliver messages to your inbox.
Twilio — SMS delivery. If you have opted in to SMS alerts, your phone number and the text of alert messages are processed by Twilio.
Anthropic— AI-powered features. When you request a RAVS answer draft or use AI-assisted writing features, the relevant context (question text, any notes you provide) is sent to Anthropic's API. We do not send full document files to Anthropic. Anthropic's API does not train on API inputs by default.

We do not sell your data to any third party. We do not use your data for advertising.

5. Data retention

We retain your account and document data for as long as your account is active. If you close your account or request deletion, we will delete your data within 30 days, except where we are required to retain it for legal or financial record-keeping purposes.

6. Your rights

You can, at any time:

Access the data we hold about you by logging in to your account
Update your profile information from Settings
Remove your phone number and opt out of SMS from Settings → Alerts
Request a full export or deletion of your data by emailing hello@prequalpilot.com

If you are in the European Economic Area or United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

7. Security

All data is transmitted over HTTPS. Database access requires authenticated, encrypted connections. File uploads are stored in private Supabase Storage buckets with row-level security. Authentication is handled via one-time magic links — there are no passwords to compromise. We take security seriously and will notify affected users promptly if a breach occurs.

8. Cookies

We use only functional cookies necessary for authentication (session tokens). We do not use advertising or cross-site tracking cookies.

9. Changes to this policy

We will update this policy as the product evolves. Material changes will be communicated by email to all active users before they take effect.

10. Contact

Questions or requests regarding your data: hello@prequalpilot.com

Privacy Policy