Privacy policy

Who we are

Subfloor, Inc. ("Subfloor", "we") runs this website, subfloor.io, and the sign-in service at auth.subfloor.io. You can reach us about your privacy at info@subfloor.io.

What we collect, and why

When you ask for a conversation. The form on our consulting page asks for your name and email, and if you choose to give them, your business and a message. We use them to reply and to find a time to talk. Sending the form creates a record of your enquiry in our customer system. It also sends us a notice, and sends you an email to say thanks.

When you join the waitlist. The waitlist asks for your email, and if you choose to give them, your name and what you would build first. We use them to tell you when you can start building, and to understand what people want to build. It goes into the same customer system, the same way. We send only news about Subfloor, and you can unsubscribe any time.

When you sign in. Some of our services use our own sign-in service. Depending on what your organization allows, you sign in with Google, with Microsoft (including your organization's own Microsoft directory), or with a password.

• With Google or Microsoft, the provider asks your permission to share your basic profile with us: your account ID, your email address, and your name. Google also tells us whether it has verified your email address, and may share your profile picture. We ask for nothing else. We do not keep the provider's access tokens, so we cannot act in your Google or Microsoft account.
• With a password, we store your password only in hashed form, never as you typed it.

We use these only to match you to an account that already exists. We let you in only when the sign-in proves the email address is yours: Google must have verified it, and a Microsoft address must belong to a domain your organization has verified with us, or come from its own directory. We never create an account from a sign-in on its own.

While you are signed in. Our sign-in service keeps a record of your sessions and of sign-in events, including your IP address and browser type. We use these to keep accounts secure: to show you and your administrators where you are signed in, and to look into anything unusual.

What this website does not do

This website sets no cookies and runs no analytics or advertising trackers. It does not follow you around the web.

Who handles your information for us

We use a few service providers to run Subfloor. Each one handles your information only to provide its service to us.

• Microsoft Azure hosts our services, in the United States (West US 2).
• Cloudflare sits in front of our websites and passes traffic to them.
• Saaltworks runs Atlas, the customer system where our enquiries and waitlist entries are stored.
• Google and Microsoft provide "Sign in with Google" and "Sign in with Microsoft".

We never sell your personal information.

Your choices

• Leave the waitlist at any time: reply to any email from us, or write to info@subfloor.io.
• See, correct or delete what we hold about you. Write to info@subfloor.io and we will show you what we hold, correct it, or delete it.
• Remove our access to your Google or Microsoft account at any time, in that account's settings for connected apps.

How long we keep it

We keep what we hold about you until you ask us to delete it. If we have had no contact with you for two years, we clear your enquiry or waitlist entry.

Age

Our services are for people aged 18 and over.

Changes to this policy

If we change this policy, we will update this page and the date at the top.

Contact

Questions about this policy go to info@subfloor.io.