1. Information We Collect
Information you provide:
- Account registration: email address, display name, password
- Payment information (processed securely by Stripe — we never store your card details)
Information we collect automatically:
- Usage data: pages visited, search queries, filters applied
- Device information: browser type, operating system, IP address
- Geolocation data: approximate location inferred from your IP address (country and region)
Property data from public sources:
- County assessor records (property values, ownership, parcel data)
- Court filings (probate, foreclosure, civil records)
- Tax records and delinquency status
- Census Bureau geocoding data
- Google Street View imagery (for condition assessment)
2. How We Use Information
- Provide and improve the Service
- Process and manage your account and subscriptions
- Send service notifications (account updates, terms changes)
- Aggregate and anonymize usage data for analytics
- Enforce GeoIP access controls (US-only access)
- Verify compliance with these Terms of Service
3. Cookies & Tracking
We use essential cookies for authentication (session management) and security. We do not use third-party analytics cookies or advertising trackers. Your session cookie is HttpOnly and SameSite=Lax.
4. Third-Party Data Sharing
We share limited data with the following third parties for Service functionality:
- US Census Bureau — Batch geocoding of property addresses (API queries only; no data retained)
- Google LLC — Street View Static API for property condition assessment (image thumbnails only)
- Mapbox — Geospatial data for map rendering
5. Data Security
- All data is served through a Cloudflare Tunnel (no open ports)
- Passwords are hashed using bcrypt before storage
- API keys are stored as SHA-256 hashes — we never store plaintext keys
- Database is secured with environment-variable-only credentials
6. Your Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal data we collect, use, and share
- Delete your personal data (subject to legal retention requirements)
- Opt out of the sale of personal data (we do not sell data)
- Not be discriminated against for exercising these rights
To exercise these rights, contact us at [email protected].
7. Children's Privacy
The Service is not intended for children under 18. We do not knowingly collect personal data from children under 18. If we learn we have collected such data, we will delete it promptly.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via email or service notice. Your continued use after changes constitutes acceptance of the updated policy.
9. Contact
Questions about this Privacy Policy? Contact us at [email protected].