Legal
Privacy Policy
Effective date: June 1, 2026
1. What we collect
We collect the minimum needed to run the Service: the email address you provide at checkout or sign-in, the locations and business types you analyze, payment metadata from Stripe (we never see or store full card numbers), and standard server logs including IP addresses used for rate limiting and abuse prevention.
2. What we don't do
We do not sell your personal information. We do not run third-party advertising trackers. We do not require passwords — sign-in uses one-time email links only.
3. How we use your information
Your email is used to deliver purchased reports, provide report recovery, and maintain your optional session. Analyzed locations are cached to keep costs down and to serve your reports. IP-based limits protect the free preview tier from abuse.
4. Service providers
We rely on a small set of processors to operate: Stripe (payments), Resend (transactional email), Backblaze B2 (report file storage), Mapbox and Google (mapping and places data), and our hosting provider. Each receives only the data necessary to perform its function.
5. Data retention
Shareable report links expire after 30 days. Underlying report records are retained so you can recover purchases by email. Cached analysis data expires on a rolling basis. You may request deletion of your personal data at any time (see Contact below); we will honor requests except where retention is required for tax or legal purposes.
6. Cookies
We use a single first-party session cookie when you sign in via magic link, valid for up to 30 days and revocable by signing out. No cross-site tracking cookies are used.
7. Security
Data is encrypted in transit. Access to production systems is restricted. No method of storage is perfectly secure, but we design the Service to hold as little sensitive data as possible — most of what we process is public government data about places, not people.
8. Children
The Service is intended for business use by adults and is not directed at children under 13. We do not knowingly collect information from children.
9. Changes
We may update this policy from time to time. Material changes will be reflected on this page with an updated effective date.
10. Contact
Privacy questions or deletion requests: contact@kurtzandboon.com.