Privacy Policy

Information you give us, and information the Service records

• Account details. Your email address or username, a password (stored only as a hash by our authentication provider), and, if you sign in with Google or Microsoft, the name and email address that provider shares.
• Projects and files. Site boundaries, addresses, parcel numbers, layouts, notes, comments, markups, drawings, images and other files you create or upload, and the project details you enter (such as client, broker and contact fields).
• Team activity. Teams you belong to, sharing settings, assignments, review status, mentions and the notifications they generate.
• Messages. What you send through the contact form or feedback tools, including your name, company, phone number and message.
• Usage and technical data. Events such as signing in and creating a project, error reports when something breaks, and standard server logs (IP address, browser type, pages requested, timestamps).
• Browser storage. We use your browser's local storage to keep you signed in and to remember preferences such as panel and view settings. We do not use advertising cookies or third-party ad trackers.

To run the Service, and little else

• Providing the Service: saving and loading your projects, running analyses, sharing with the people you choose, and sending the notifications you have turned on.
• Security and support: protecting accounts, preventing abuse, fixing errors and answering your messages.
• Improving the Service: understanding which features are used and where it fails.
• Legal reasons: complying with law and enforcing our Terms of Service.

Service providers and data sources

We share information only with providers that help us run the Service, under their own privacy and security terms:

• Supabase stores accounts, project data and uploaded files.
• Vercel hosts the website and its server functions.
• Resend delivers emails such as notifications and replies.
• Google and Microsoft, if you choose to sign in with them.

To show maps and site data, the Service sends the location you are working on (an address or map coordinates) to map, imagery and geocoding providers (such as Mapbox and Esri), Google (Street View availability), OpenStreetMap services, county and state parcel servers, and public agencies such as the U.S. Census Bureau, FEMA, USGS and the Railroad Commission of Texas. These requests carry a location, not your account details.

If you connect SiteSetter to your own AI assistant (such as Claude or ChatGPT), the plan information the assistant reads through that connection is handled under that provider's privacy policy. On our side we keep a short log of that connection for each account: when it was connected, how many times a day it was used and which tools it called, the assistant's name and its browser or app identifier. We use it to run and support the connection and keep it for up to 180 days.

We may also disclose information if required by law, to protect the rights or safety of anyone, or as part of a merger, acquisition or sale of assets.

How long we keep it

We keep your account and projects for as long as your account is open. When you delete a project or ask us to delete your account, we delete the associated data within a reasonable period, except where we need to keep it for legal, security or backup purposes. Backups expire on their normal schedule.

How it is protected

Data is encrypted in transit, and access to each project is restricted by database rules to its owner and the people it is shared with. No system is perfectly secure, so we cannot guarantee absolute security; please use a strong, unique password.

Access, correction and deletion

You can view, edit and delete your projects in the Service. You may also ask us to give you a copy of your personal information, correct it, or delete your account, using the contact form on the home page. Depending on where you live (for example, California or other U.S. states with privacy laws), you may have additional rights, and we will honor requests as the law requires. We will not discriminate against you for exercising them.

You can turn email notifications off in the Service.

Not for children

The Service is for business use by adults and is not directed to anyone under 18. We do not knowingly collect information from children.

Updates to this policy

We may update this policy. When we do, we will change the effective date above, and material changes will be announced in the Service or by email. SiteSetter is operated from the United States, and your information is processed there.

Questions: use the contact form on the home page.