Privacy Policy — Rekiva
Last updated: 2026-10-19 · Operated by Connealy Koll LLC
Rekiva ("we", "us") helps contractors track subcontractor paperwork (W-9, General Liability, Workers' Comp), payments, and projects. This policy explains what we collect and how we use it.
What we collect
- Account info: your email address, a password hash (if you sign up with email), and your business name. If you choose Sign in with Google, we receive your Google account's basic profile (name, email address, and a stable account identifier) solely to create and secure your account.
- Your business data: the contacts, projects, paperwork statuses, and payment records you enter into Rekiva.
- Documents in YOUR Google Drive (optional): if you connect Google Drive, Rekiva files documents into folders in your own Drive and stores only the resulting file ID and link in our database. The document contents are never uploaded to or stored on our servers.
How we use Google user data (Limited Use)
Rekiva requests only the drive.file scope, which grants access exclusively to files the
app itself creates in your Drive — never to the rest of your Drive. We use Google sign-in data
only to authenticate you, and Drive access only to store and retrieve the documents you organize
through Rekiva.
Rekiva's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not:
- sell Google user data, or use it for advertising;
- transfer or use it for any purpose other than providing and improving Rekiva's features;
- allow humans to read your Google data, except (a) with your explicit consent, (b) as needed for security or to comply with law, or (c) when the data is aggregated and anonymized for internal operations.
Sharing
We share your data only with infrastructure providers needed to run Rekiva (hosting, database, and transactional email delivery) and only as required to operate the service. We do not sell your data. When you choose to share a document or request with a contact, only the specific items you select are shared.
Retention & deletion
You can delete documents, records, or your entire account at any time. On account deletion we remove your Rekiva records; files already created in your own Google Drive remain in your Drive under your control, and you may revoke Rekiva's Drive access at any time at myaccount.google.com/permissions.
Security
Passwords are hashed (bcrypt). Sessions use signed, http-only cookies and can be revoked. Data is transmitted over HTTPS.
Contact
Questions or data requests: support@rekiva.app