Privacy Policy
1. What Information Do We Collect?
Information you provide. We collect personal information that you voluntarily provide when you register: your email address, a password (stored only as a secure cryptographic hash; we never see or store the plain text), your selected trade vertical, and your subscription plan. All personal information you provide must be true, complete, and accurate. We do not process sensitive personal information.
Information collected automatically. When you use the Service we automatically collect usage information (actions such as searches, exports, and AI queries, with timestamps, used to enforce plan limits and improve the product) and technical information (IP address, browser type, and device characteristics through standard server logs and Google Analytics). This information does not reveal your specific identity on its own.
Content you create. Lead statuses, notes, watchlists, and saved searches you create in the Service belong to you and are processed only to operate those features on your behalf.
2. How Do We Process Your Information?
We process your information to deliver the Service, create and manage your account, send the digests and alerts you sign up for, respond to your inquiries, enforce plan limits, protect the security and integrity of the Service, comply with legal obligations, and improve the product. We process personal information only when we have a valid business reason to do so.
3. When and With Whom Do We Share Your Personal Information?
We do not sell your personal information, and we have not sold or shared personal information with third parties for a business or commercial purpose in the preceding twelve (12) months. We share information only with service providers who perform services on our behalf under contractual privacy obligations: DigitalOcean (hosting), Cloudflare (network security and email routing), Resend (outbound email delivery), Anthropic (automated analysis of public permit text; your account information is not sent to it), Google Analytics (anonymous site analytics), and Stripe (payment processing when billing is enabled; card details go directly to Stripe and never touch our servers). We may also share information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
4. Public Permit Records
The building permit records displayed in the Service are public records published by government agencies and may include names of permit applicants, contractors, property owners, and property addresses as filed with those agencies. This information originates with the issuing jurisdiction, not with us. If you believe a public record is displayed in error, contact us and we will review it.
5. Do We Use Cookies and Other Tracking Technologies?
We use one functional cookie to keep you signed in, and Google Analytics sets its standard measurement cookies to help us understand how the Service is used. We do not use advertising cookies or cross-site tracking. You can control cookies through your browser settings; disabling the functional cookie will prevent you from staying signed in.
6. How Long Do We Keep Your Information?
We keep your personal information only as long as necessary for the purposes set out in this notice: account information for as long as your account is active, and usage records for up to twenty-four (24) months for product analytics and limit enforcement, unless a longer period is required by law. When you close your account we will delete or anonymize your personal information within thirty (30) days, except minimal records we are required to retain for legal or accounting purposes.
7. How Do We Keep Your Information Safe?
We have implemented appropriate and reasonable technical and organizational security measures, including encrypted transport, hashed credentials, firewalled infrastructure, and least-privilege access. However, no electronic transmission or storage technology can be guaranteed to be 100% secure, so we cannot promise that unauthorized third parties will never defeat our security. Transmission of personal information to and from the Service is at your own risk.
8. Do We Collect Information From Minors?
We do not knowingly solicit data from or market to children under 18 years of age. By using the Service, you represent that you are at least 18. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under age 18, please contact us.
9. What Are Your Privacy Rights?
You may review, change, or terminate your account at any time from the Account page. You may opt out of digest and alert emails using the mechanisms in those emails or your account settings. You may contact us at any time to request access to, correction of, or deletion of personal information we hold about you, and we will act on your request as required by applicable law.
10. Controls for Do-Not-Track Features
Most web browsers include a Do-Not-Track ("DNT") feature. No uniform technology standard for recognizing and implementing DNT signals has been finalized, and we do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we will inform you in a revised version of this notice.
11. Do California Residents Have Specific Privacy Rights?
Yes. This section applies to California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, "CCPA").
Categories of personal information we have collected in the preceding twelve (12) months:
- Identifiers (email address, IP address, account name): COLLECTED. Retained while your account is active.
- Personal information under Cal. Civ. Code 1798.80 (contact information): COLLECTED. Retained while your account is active.
- Internet or other network activity (usage of the Service, analytics): COLLECTED. Retained up to 24 months.
- Commercial information (subscription plan and billing history via our payment processor): COLLECTED when billing is enabled.
- Protected classifications, biometric information, precise geolocation, sensory data, professional or employment information, education information, inferences used for profiling, and sensitive personal information: NOT COLLECTED.
We do not sell or share personal information as those terms are defined by the CCPA, we have not done so in the preceding twelve (12) months, and we will not do so without providing you a right to opt out. We do not use or disclose sensitive personal information for purposes requiring a right to limit.
Your CCPA rights: the right to know what personal information we collect, use, and disclose; the right to request deletion; the right to correct inaccurate personal information; the right to opt out of sale or sharing (not applicable, as we do neither); the right to limit use of sensitive personal information (not applicable); and the right to non-discrimination for exercising any of these rights. You may designate an authorized agent to make requests on your behalf.
Exercising your rights: submit a request to [email protected]. We will verify your identity by matching information you provide against information we already hold, and we will respond within the timeframes required by the CCPA.
Shine the Light. California Civil Code Section 1798.83 permits California residents to request, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.
12. Do We Make Updates to This Notice?
Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by a revised effective date. If we make material changes, we will notify you either by prominently posting a notice of such changes or by directly sending you a notification.
13. How Can You Contact Us About This Notice?
If you have questions or comments about this notice, or wish to review, update, or delete the data we collect from you, email us at [email protected].