Privacy Policy

Draft — pending review by counsel (#222). This describes what the product actually stores today; the final wording ships before the first paid exhibit.

What we hold

• Account data — your email address (which is your username), your organization's name, and your role in it. Passwords are stored only as salted hashes.
• Project data — the geospatial datasets you upload (parcels, footprints, centerlines), optional logos, and every generated deliverable (PDFs, KMZ, shapefiles, computed results). This is land and landowner information; we treat all of it as confidential to your organization.
• Billing data — your plan, a ledger of billing events, and Stripe customer/subscription identifiers. Card numbers never touch our servers: payment is handled entirely by Stripe on Stripe-hosted pages.
• Operational logs — request and job logs, including IP addresses used for abuse throttling, and error reports sent to our monitoring service.

What we do with it

Run the service. Your project data is processed to generate the deliverables you request and shown only to members of your organization. We do not sell or share your data with third parties except the processors that operate the service (hosting, Stripe for payment, email delivery, error monitoring), each receiving only what that function requires.

How long we keep it

Uploaded datasets and generated files are kept for your plan's stated retention window measured from delivery, then deleted from our servers on a scheduled purge. Encrypted backups of the database and uploads persist for a bounded window beyond deletion. Account and billing records are retained while your account exists.

Isolation

All project data is scoped to your organization: access from another organization's account is refused and logged as a security event.

Your choices

You can request deletion of your account and its data — contact support. Deletion removes uploads, deliverables, and account data; billing records we are required to keep are retained.

Changes

Material changes will be notified to the account email.