Privacy Policy

Effective date: August 24, 2026

This Privacy Policy explains how Fieldwork Studio LLC ("CertBunker," "we," "us," or "our") collects, uses, stores, and shares information when you use the CertBunker website and application (the "service"). It works alongside our Terms of Service. By using CertBunker, you agree to this Policy.

1. Information we collect

Information you provide

• Account information: your company name, email address, and a securely hashed password.
• Subcontractor information you enter: the company and contact names, email addresses, phone numbers, and trades of the subcontractors you add.
• Documents: the certificates of insurance, licenses, W-9s, and similar compliance documents that you or your subcontractors upload, which may contain business and personal information.
• Communications: messages you send us, such as support emails.

Information collected automatically

• Log and usage data: IP address, browser type, pages viewed, and timestamps, used to operate and secure the service.
• A strictly necessary session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Payment information

Subscription payments are processed by Stripe. We receive limited billing details (such as your subscription status and card brand/last four digits), but we do not collect or store your full card number.

Security tooling

We use Cloudflare Turnstile on our sign-in and sign-up pages to distinguish humans from bots; it may process limited technical signals for that purpose.

2. How we use information

• Provide, operate, and maintain the service.
• Send transactional emails: document requests to your subcontractors, upload notifications to you, and expiration reminders.
• Process subscriptions and billing.
• Secure the service, prevent abuse, and troubleshoot problems.
• Respond to your support requests.
• Comply with our legal obligations.

3. Subcontractor information and your responsibility

Much of the information in CertBunker — your subcontractors' contact details and documents — is entered by you, our customer. We process that information on your behalf to provide the service. As described in our Terms of Service, you are responsible for having the authority and any necessary permissions to provide it to us.

4. How we share information

We do not sell personal information. We share it only in these cases:

• Service providers (sub-processors) who help us run CertBunker under confidentiality obligations:
  • Stripe — payment processing
  • Postmark — transactional email delivery
  • Cloudflare — content delivery, DNS, document storage (R2), and bot protection
  • Render — application and database hosting
  • Sentry — error monitoring (when enabled)
• For legal reasons — to comply with law, respond to lawful requests, or protect rights, safety, and property.
• In a business transfer — if we are involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction.

5. How we store and protect information

• Uploaded documents are held in private, access-controlled cloud storage (Cloudflare R2) and are reachable only through your authenticated account, on links that expire within minutes.
• Passwords are stored only as salted hashes, never in plain text.
• We apply reasonable technical and organizational safeguards. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

6. How long we keep information

• We keep your information for as long as your account is active.
• If you cancel, your account becomes read-only and your data is retained — not deleted — so you keep your records, unless you ask us to delete it.
• You can export your compliance data (CSV) at any time.
• We will delete your data on written request, except where we must retain it to meet legal obligations or resolve disputes.

7. Your choices and rights

You may:

• Access and review the information in your account.
• Correct or update your account and subcontractor information directly in the app.
• Export your compliance data at any time.
• Request deletion of your data by emailing [email protected].

Depending on where you live, you may have additional rights under applicable privacy laws — such as the right to access, correct, delete, or restrict the use of your personal information. To exercise any right, contact us at [email protected] and we will respond as required by law. We do not sell personal information or use it for cross-context behavioral advertising.

8. Children's privacy

CertBunker is a business tool intended for companies and is not directed to children. We do not knowingly collect personal information from anyone under 18.

9. Where information is processed

CertBunker is operated in the United States, and information is processed and stored on servers in the United States. If you access the service from outside the U.S., you consent to processing your information in the U.S.

10. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify you. Your continued use of the service after changes take effect constitutes acceptance.

11. Contact us

Questions about this Privacy Policy or your data? Contact Fieldwork Studio LLC at [email protected], Exeter, New Hampshire.