1. What We Collect
Account data: name, email, company name, phone (if provided), and password (stored hashed — we never see it). Project data: project details, parcel locations you analyze, estimates, line items, uploaded plan files, and generated reports. Purchase data: which products or plans you bought, when, and the record that you accepted the Terms of Service, No-Refund Policy and Estimate Disclaimer (date, time and version). Card numbers are handled by Stripe and never reach our servers. Usage data: log data such as request timestamps, IP addresses (for rate limiting and security), and error reports.
2. How We Use It
To operate the Service: produce your estimates and reports, run soil analyses on parcels you specify, process your purchases and enforce plan limits, send transactional email (account verification, purchase confirmations, team invites, and a follow-up to arrange the walkthrough included with a first Land Screening), secure the platform, provide support, and improve the product. We keep the record of your terms acceptance to resolve any billing dispute. We do not sell your personal information, and we do not use your project data to benefit other customers. The only project details ever shown to a third party are the ones you choose to send when you request an introduction to a partner (section 4).
3. Service Providers We Share Data With
We use a small set of processors to run the Service: Supabase (database, authentication, and file storage), Amazon Web Services (hosting), Resend (transactional email), Stripe (payments — Stripe receives your name, email and card details directly; we never store card numbers), and — only for the specific features you invoke — OpenAI (scope assistant, estimate review and plan analysis), Perplexity (supplementary price lookups) and the USDA Soil Data Access API (which receives only the parcel coordinates you analyze, never your identity). Each provider receives only what its function requires.
4. Partners & Introductions
Estimates show a "Your Project Team" section of paid, Sponsored partners (engineers, surveyors, lenders and similar firms). Seeing that section shares nothing about you with anyone. Only when you click Request Intro do we send that one partner your name, email, phone (if you give it), the project county, approximate acreage and a budget range. Partners never receive your estimate total, line items, parcel address, or plan files. The exact fields are shown to you before you confirm. Partners are contractually limited to using that information to respond to your request. Tracking. We count partner card views, clicks and introductions so partners can see how their listing performs. Signed-in users are counted by account; public share-page viewers are counted with a random identifier stored in the browser, never a name or email. If you are a partner, we collect your company profile, logo, contact person, plan choice and the introductions sent to you, and Stripe holds your card. Your company name, description, logo and service area are displayed publicly in the app, on share pages and in estimate PDFs while your listing is live. We keep the record of your acceptance of the partner terms.
5. Cookies & Local Storage
We use local storage for your login session and interface preferences. We do not use third-party advertising trackers.
6. Data Retention & Deletion
Your data is retained while your account is active. Delete your account and we delete your personal data and project content within 30 days, except minimal records we must keep for legal, billing, or security reasons. You can export your estimates (CSV/PDF) at any time.
7. Security
Data is encrypted in transit (TLS) and at rest. Access is enforced with row-level security — each account can only read its own records. No system is perfectly secure; notify us immediately at the address below if you suspect an issue.
8. Your Rights
You may access, correct, export, or delete your personal data at any time via Settings or by contacting us. We honor applicable rights under US state privacy laws (including Virginia's CDPA).
9. Children
The Service is for business use and not directed at anyone under 16.
10. Changes
We may update this policy; material changes will be announced in the app or by email. The "Last updated" date always reflects the current version.
11. Contact
Privacy questions: support@dirtbidai.com