Privacy Policy

1. Introduction

DataAcre Inc. (“DataAcre,” “we,” “us,” “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, and related services (collectively, “Service”). By using the Service, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Property owners: Name, email address, phone number, property address, acreage, zoning classification, and other property characteristics you submit for analysis.
• Buyers: Name, email address, phone number, company name, company type, and business information provided during account registration.
• Messages: Content of messages exchanged through the platform between buyers and property owners.
• Payment information: Billing details processed through our third-party payment processor (Stripe). We do not store credit card numbers on our servers.

2.2 Information Collected Automatically

• Usage data: Pages viewed, features used, timestamps, referring URLs, and clickstream data.
• Device information: Browser type, operating system, device identifiers, screen resolution, and language preferences.
• IP address: Used for security, fraud prevention, and approximate geolocation.
• Cookies and similar technologies: We use essential cookies for authentication and session management. See Section 7 for details.

2.3 Information from Third Parties

• Public data sources: We collect property-related data from FEMA, USGS, OpenStreetMap, utility databases, county records, and other publicly available sources to generate property scores and analyses.
• Geocoding services: We use geocoding providers to convert addresses to geographic coordinates.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including property analysis and scoring
• Process buyer applications and manage subscriptions
• Facilitate communication between buyers and property owners
• Send transactional emails (reports, notifications, account updates)
• Detect, prevent, and address fraud, abuse, and security issues
• Analyze usage patterns to improve the Service
• Comply with legal obligations and enforce our Terms of Service
• Generate aggregate, de-identified analytics and market insights

We do not sell your personal information to third parties.

4. How We Share Your Information

We may share your information in the following circumstances:

• With buyers (property owners): If your property qualifies and you are matched with a buyer, we share property details and your contact information with approved buyers on the platform. Owner contact information is only visible to active, verified buyers.
• With property owners (buyers): When you send a message to a property owner, your company name and message content are shared with the owner.
• Service providers: We share data with third-party vendors who help us operate the Service, including Supabase (database and authentication), Stripe (payments), Resend (email delivery), and cloud hosting providers. These providers are contractually obligated to protect your data.
• Legal requirements: We may disclose information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, prevent fraud, or ensure the safety of our users.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• Aggregate data: We may share aggregate, de-identified data that cannot reasonably be used to identify you for research, analytics, or marketing purposes.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Specifically:

• Property data: Retained indefinitely to maintain platform integrity and historical records.
• Account data: Retained for the duration of your account plus 3 years after termination for legal and audit purposes.
• Messages: Retained for 3 years after the last message in a conversation thread.
• Payment records: Retained for 7 years as required by tax and financial regulations.
• Usage logs: Retained for 12 months, then aggregated and de-identified.

You may request deletion of your personal data by contacting us. We will comply within 30 days, except where retention is required by law or for legitimate business purposes.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication via Supabase Auth with bcrypt password hashing
• Row-level security policies on database tables
• HMAC-based token verification for magic link access
• Regular security reviews and access controls

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

7. Cookies and Tracking

We use the following types of cookies:

• Essential cookies: Required for authentication, session management, and security. These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with the Service. We use aggregate analytics and do not track individual users across third-party websites.

We do not use advertising cookies or sell cookie data to third parties. You can control cookies through your browser settings, but disabling essential cookies may prevent you from using certain features.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Opt-out of communications: Unsubscribe from marketing emails at any time. Transactional emails (reports, account notifications) cannot be opted out of while your account is active.

To exercise any of these rights, contact us at hello@dataacre.io. We will respond within 30 days.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to delete personal information we hold about you
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

To submit a CCPA request, contact us at hello@dataacre.io with the subject line “CCPA Request.”

10. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country. By using the Service, you consent to this transfer. If you are in the European Economic Area (EEA) or United Kingdom, we process your data on the legal basis of legitimate interests, contractual necessity, and your consent where applicable.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, contact us at hello@dataacre.io.

12. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the “Last updated” date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

14. Contact

For questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

DataAcre Inc.
hello@dataacre.io