Privacy Policy
Last updated: July 12, 2026
1. Who We Are
SubZeroMetrix LLC ("we", "us"), a Florida limited liability company, PO Box 66093, Saint Petersburg, FL 33706, operates Metrix Command Center (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your choices. Contact: info@subzerometrix.com.
2. Information We Collect
Account information you provide directly: name, email address, password (stored hashed by our authentication provider, never in plain text — real, currently implemented via Supabase Auth).
Business and Customer Data you input into the Service: business profile details, contact/lead/customer/property records, estimates, jobs, communications, and related CRM data you choose to store. If this includes personal information about your own customers, you are responsible for having a lawful basis to collect and store it, and we process it on your behalf as your data processor for that data.
Usage and technical data: authentication session data (cookies, required for login), and standard web-server logs. We do not currently use any analytics or tracking beyond session cookies.
AI-processed data: content you provide to AI-assisted features (e.g. business context used to draft communications) is sent to our AI model provider, OpenAI, to generate the output shown to you, subject to OpenAI's own data-use and retention policies for API customers.
3. How We Use Information
- To provide, maintain, and improve the Service.
- To authenticate you and secure your account.
- To send Service-related communications (account, billing, security).
- To generate AI-assisted outputs you request.
- To comply with legal obligations.
We do not sell or share your personal information, as those terms are defined under CCPA/CPRA.
4. How We Share Information
We share information only with the third-party service providers necessary to operate the Service (see Terms of Service §12 for the current list — Supabase, Vercel, Resend, Stripe, Google, and OpenAI), each acting as a data processor/subprocessor on our behalf, and only to the extent necessary to provide their respective service.
We do not share your Customer Data with other customers — each workspace is technically isolated (row-level security enforced at the database layer, confirmed real and tested repeatedly throughout this product's development).
We may disclose information if required by law or to protect our rights, safety, or the rights/safety of others.
5. SMS / Text Messaging Communications
If you or your customers opt in to receive text messages from the Service (for example, appointment reminders or missed-call follow-ups), the following applies:
- No sharing with third parties for marketing purposes. SMS opt-in consent and mobile phone numbers collected for text messaging are not shared with third parties for their own marketing or promotional purposes.
- Message frequency may vary, depending on your account activity and the features you use.
- Message and data rates may apply, as charged by your mobile carrier.
- Reply STOP to any message to opt out of future text messages at any time.
- Reply HELP to any message for assistance, or contact us at info@subzerometrix.com.
6. Data Retention
We retain your information for as long as your account is active. After you request deletion (see below), we retain only what is necessary to comply with legal, tax, fraud-prevention, security, backup, or contractual obligations, and delete or anonymize the remaining personal data within 90 days.
7. Your Rights: Export and Deletion
- Export: you may export your workspace's data at any time (real, currently implemented feature).
- Deletion: you may request deletion of your workspace's data via the Service's data-deletion request feature (real, currently implemented feature — requires a confirmation phrase before processing, to prevent accidental deletion).
- California residents: you have the right to know, delete, and correct your personal information, and to non-discrimination for exercising these rights, under CCPA/CPRA. Because we do not sell or share personal information, no "Do Not Sell/Share My Info" mechanism is required. To exercise these rights, contact us at info@subzerometrix.com.
- EU/UK residents: the Service is not specifically marketed to EU or UK residents at this time. If you access the Service from the EU or UK, you may have rights under the GDPR (access, rectification, restriction, portability, objection, erasure); contact us at info@subzerometrix.com and we will respond within 30 days.
8. Cookies
We use cookies required for authentication and session management. We do not currently use analytics or advertising cookies. If that changes, this section, the Terms of Service §11, and a cookie-consent mechanism will be updated together before that feature ships, not after.
9. Data Security
We use our infrastructure providers' standard security practices (encryption in transit, access controls, workspace-level data isolation enforced at the database layer). No system is completely secure; we cannot guarantee absolute security. We do not currently hold SOC 2, ISO 27001, HIPAA, or other formal security certifications.
10. Children's Privacy
The Service is intended for use by businesses and individuals 18 years of age or older (or the age of majority in your jurisdiction, if higher). We do not knowingly collect information from children.
11. International Data Transfers
The Service is operated from the United States and is not specifically marketed outside the United States at this time. If we begin actively marketing the Service internationally, we will implement appropriate data-transfer safeguards (such as Standard Contractual Clauses) before doing so.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will provide notice of material changes by posting the updated policy on the Service and updating the "Last updated" date above, at least 14 days before the change takes effect where reasonably practicable.
13. Contact
Questions about this Privacy Policy or your data: info@subzerometrix.com