Privacy Policy

1.1 Analytics Data

We collect anonymous usage data to improve our platform:

• IP Addresses: Hashed with SHA-256 (a one-way hash, not encryption) and not stored in plain text
• Session Tokens: Cryptographically generated session identifiers
• Device Information: Device type (mobile/desktop/tablet), browser type
• User Behavior: Pages viewed, features used, button clicks, time on site
• Interaction Patterns: How you navigate and use the platform

Note: Some events stay in your browser: tool and pre-tour clicks, plus a first-touch record (landing path, referring hostname, campaign labels, and the date first seen). The site also sends events to our server. Feature clicks record the control, the page path, and a timestamp. Share clicks record the post, platform, and a timestamp. Funnel events (session start, capture view, capture submit, report preview, and report checkout click) are stored as aggregate counts with those first-touch fields. Those counts do not include your email address. Newsletter email is stored separately with that subscription. Essentials clicks store a post slug and a session token. Vercel Web Analytics receives page views and a related-tool click event. We do not load an advertising pixel.

1.2 Town Vibes Voting Data

• Votes and Tags: Your selections when voting on town characteristics
• Vote Timestamp: Date and time of each vote
• Session Data: Anonymous session identifiers for rate limiting
• Hashed IP: SHA-256 hash of the IP address to limit repeat abuse. This is not encryption, and it is not the raw IP.

Anonymous: Votes are not linked to your identity. We cannot identify who voted for what.

1.3 Property Analysis Data

• Property Searches: Addresses and locations you analyze
• Analysis Requests: Investment type, budget preferences, priorities
• Results Generated: Reports and recommendations we create for you
• Cached Data: Temporarily stored analysis results for performance

1.4 Contact Information (Optional)

If you voluntarily submit information through forms:

• Email Address: For report requests or coverage requests
• Property Details: Address, city, state, zip code for specific requests
• Request Notes: Additional details you provide

Voluntary: You are not required to provide contact information to use most platform features.

1.5 Information We DO NOT Collect

We use collected information for the following purposes:

2.1 Service Delivery

• Generate property analysis reports and recommendations
• Display crowdsourced Town Vibes data
• Provide personalized neighborhood matching
• Respond to your inquiries and requests

2.2 Platform Improvement

• Analyze usage patterns to improve features
• Identify and fix technical issues
• Optimize user experience and performance
• Develop new features based on user behavior

2.3 Abuse Prevention

• Prevent spam and automated abuse
• Enforce rate limiting on votes and API requests
• Detect and block fraudulent activity
• Maintain platform security and integrity

2.4 Communication

• Send requested reports or analysis results
• Respond to coverage or report requests
• Send service updates or important notifications

3.1 Security Measures

• Hashing: IP addresses are hashed with SHA-256. That is a one-way hash, not encryption.
• Secure Tokens: Cryptographically generated session identifiers
• HTTPS: All data transmitted over encrypted connections
• Input Validation: Sanitization and validation of all user inputs
• Rate Limiting: Protection against abuse and DDoS attacks

3.2 Storage Locations

• Browser localStorage: First-touch page, referring hostname, campaign labels, and on-device tool events
• Server files: Feature-click logs and share-event logs (control or post, page, platform, timestamp)
• Our Redis counters: Aggregate funnel counts (views, newsletter signups, landing path, referrer host) and essentials click tokens (post slug plus session token). Email addresses for the newsletter are stored separately with that subscription.
• Server Storage: Town Vibes votes stored in JSON files on secure servers
• Cached Data: Temporary property analysis results cached for performance
• Request Files: Report and coverage requests stored in secure directories

3.3 Data Security Limitations

We retain different types of data for varying periods:

Data may be retained longer if required by law or for legitimate business purposes.

We use the following third-party services that may collect or process data:

5.1 Communication Services

• Slack: For internal notifications about new reports (does not process user data)
• Email Services: For sending requested reports and notifications

5.2 Payment Processing

• Stripe: Processes one-time payments for paid products such as the Property Report on /property-report. Stripe receives payment details you enter at checkout. This Platform does not store payment card numbers. We may receive limited payment metadata from Stripe (for example, email, payment status, and checkout session identifiers) needed to fulfill your purchase and send a report link.

5.3 Hosting & Infrastructure

• Vercel: Platform hosting. Vercel Web Analytics receives page views and custom events such as related-tool clicks. We do not send those events to an advertising network.

5.4 AI Services

• Anthropic API: AI-powered chat and analysis (property data sent for processing)

We do NOT share your data with advertising networks, data brokers, or marketing companies.

6.1 What We Use

• localStorage: First-touch attribution and on-device tool events. Clearing it removes that on-device record. Events already sent to our server stay on the server.
• Session Cookies: Authentication for admin features (if applicable)
• Functional Data: Temporary data for platform functionality

6.2 Managing Cookies

You can control cookies and local storage through your browser settings:

• Clear localStorage manually in browser developer tools
• Disable cookies in browser privacy settings
• Use private/incognito browsing mode

Note: Disabling cookies or localStorage may limit platform functionality.

6.3 Third-Party Cookies

We do not use third-party advertising cookies or tracking pixels.

Depending on your location, you may have the following rights:

7.1 General Rights

• Access: Request a copy of data we have about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to limitations)
• Opt-Out: Unsubscribe from communications at any time

7.2 CCPA Rights (California Residents)

If you are a California resident, you have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information
• Right to non-discrimination for exercising rights

Note: We do not sell personal information to third parties.

7.3 GDPR Rights (EU Residents)

If you are in the European Union, you have additional rights:

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with supervisory authority

7.4 Exercising Your Rights

To exercise any of these rights, please contact us through our contact form. We will respond within 30 days.

Our Platform is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us through our contact form and we will delete such information.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

Your continued use of the Platform after changes are posted constitutes acceptance of the updated Privacy Policy.

For material changes, we may provide additional notice (such as a banner on the homepage or email notification if you've provided contact information).