Privacy Policy

We respect your privacy. This page explains exactly what we collect, why, and how to control it.

1. Who we are

DeedScout ("we", "us", "our") operates this website and the related Pro subscription service. We are headquartered in Florida, USA. For privacy questions, use our contact form.

2. Information we collect

Information you give us

• Account information: name, email address, password (stored as a salted hash by our auth provider).
• Subscription information: if you subscribe to Pro, we receive your billing email, plan, subscription status, and renewal date from Stripe. We never see or store your card number.
• Watchlist data: the parcel IDs, addresses, notes, bid limits, and statuses that you choose to save in your research notebook.
• Alert preferences: the counties you sign up to receive email alerts about.
• Support messages: the contents of any email you send us.

Information we collect automatically

• Log data: IP address, browser type, referrer, and timestamps for each request, retained for up to 30 days for abuse prevention and debugging.
• Aggregate usage: page views and feature usage in aggregate, with no per-user analytics or third-party tracking pixels.

Information we do not collect

We do not use Google Analytics, Facebook Pixel, ad networks, or session-replay tools. We do not track you across other websites. We do not sell your information.

3. How we use information

We use the information we collect to:

• Operate and improve the service.
• Authenticate you and protect your account.
• Process subscription payments and send transactional billing emails.
• Send the per-county email alerts you have opted into.
• Respond to your support requests.
• Investigate suspected fraud, abuse, or violations of our Terms.
• Comply with legal obligations.

4. When we share information

We do not sell or rent personal information. We share information only with the following service providers, strictly for the purposes listed:

• Supabase — database and authentication hosting. Stores your account, watchlist, and alert preferences.
• Stripe — payment processing for the Pro subscription. Stripe's privacy policy: stripe.com/privacy.
• Netlify — hosting for the website and serverless functions.
• Email delivery provider — sending transactional and alert emails.
• Government and law enforcement — only when legally required by valid subpoena, court order, or comparable process.

5. Cookies and local storage

We use the minimum necessary set:

• An authentication session cookie/token from Supabase, so you stay signed in.
• Browser local storage for the research notebook on free accounts (the data never leaves your device unless you upgrade to Pro).
• A preferences cookie for things like remembered region filters.

We do not use any third-party advertising or analytics cookies.

6. Payments and billing

All payment processing is handled by Stripe, Inc. Card details are submitted directly to Stripe and are never transmitted to or stored on our servers. Stripe is a PCI-DSS Level 1 certified service provider.

7. Data retention

• Account data is retained while your account is active and for 30 days after deletion.
• Billing records are retained for seven (7) years to comply with tax and accounting obligations.
• Server logs are retained for up to thirty (30) days.
• Aggregate, non-personal usage data may be retained indefinitely.

8. Your rights

Regardless of where you live, you may at any time:

• Access a copy of your personal data.
• Correct inaccurate data via your account page or by emailing us.
• Delete your account and associated personal data.
• Export your watchlist as CSV (Pro feature; available on request for free accounts).
• Unsubscribe from alert emails using the link in any alert message.
• Object to or restrict our processing of your data.

To exercise any of these rights, contact us through the contact form. We will respond within 30 days.

California residents have additional rights under the CCPA, including the right to know what we collect and the right not to be discriminated against for exercising privacy rights. We do not sell personal information.

9. Security

We use industry-standard safeguards including TLS encryption in transit, encrypted database storage, hashed passwords, row-level security in our database, and least-privilege access for staff. No system is perfectly secure; if we ever experience a breach affecting your data, we will notify affected users without undue delay.

10. Children

This service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect the change. For material changes affecting how we use your data, we will notify subscribers by email at least 14 days before the change takes effect.

12. Contact

For any privacy question or to exercise your rights, contact the DeedScout team through the contact form on this website.