Trust Center

Trust at Screwge

Last updated: 12 August 2026

Screwge holds the evidence and records behind subcontractor payments. This is one place to understand how we protect it, what we collect, and where we honestly stand on compliance.

SecurityEncryption in transit, tenant isolation, private storage, and what we haven't built yet. PrivacyWhat we collect, why, who sees it, and your rights over your data. TermsWhat Screwge is responsible for — and what stays your decision. CompanyWho operates Screwge and how to reach us.

Data retention

Screwge retains customer information only for as long as necessary to provide the service, satisfy customer-configured retention requirements, maintain security, and meet applicable legal obligations. Different categories of information have different retention periods, and we do not publish a single blanket number because statutory requirements differ per record type. When a purpose ends or consent is withdrawn, we delete the associated personal data unless retention remains necessary under law. Deleted documents are removed from active systems; encrypted backup copies expire automatically. Full detail is in the Privacy Policy.

Payments

Screwge does not hold, receive, custody, or transfer customer funds. Screwge helps contractors verify work, organize supporting evidence, determine payment readiness, and record payment workflows. Actual payments are executed through the customer's own bank or payment provider.

Subprocessors

Screwge relies on a small set of infrastructure providers to run the service:

  • Supabase — managed database, file storage, and authentication.
  • Vercel — hosting and serverless functions.
  • OpenAI — AI processing of submitted evidence and text (server-side).
  • Resend — transactional email (such as invitations).

Responsible disclosure

If you believe you have found a security vulnerability, email contactscrewge@gmail.com with the subject "Security". We investigate reports and work to resolve verified issues promptly. Details on the Security page.

Compliance status

We will be straight about this: Screwge is an early-stage product. We are building toward India's Digital Personal Data Protection (DPDP) framework — clear notice, purpose-specific handling, security safeguards, deletion when a purpose ends, a privacy contact, and a grievance channel.

We do not claim certifications we don't hold. Screwge is not SOC 2 or ISO 27001 certified, and we don't use "bank-grade", "RBI-approved", or "military-grade" security language. We implement controls first and describe them second. Independent certification will come as customer demand justifies it.

Contact

Trust, security, or privacy questions: contactscrewge@gmail.com.