Privacy Policy

Last updated: April 23, 2026

Placeholder. This document has not been reviewed by legal counsel. Replace with a version drafted or reviewed by an attorney before onboarding paying users.

What we collect

Account info you provide: name, email, phone (optional), company (optional), bio (optional).
Usage data: which ZIPs you watch, which signals you peek, which actions you complete.
Billing data: handled by Stripe. We store the Stripe customer and subscription identifiers, not card numbers.
Device data: standard server access logs (IP, user agent, timestamp), retained briefly for abuse prevention.

How we use it

To run the Service, authenticate you, and send you the alerts you have enabled.
To bill your subscription via Stripe.
To improve the product (aggregated, non-identifying analytics).

What we do not do

We do not sell your personal information.
We do not share your identity with advertisers or data brokers.
We do not use your data to train third-party AI models.

Third parties we rely on

Supabase (database, auth, realtime).
Cloudflare (hosting, CDN).
Stripe (billing).
SendGrid (email), Twilio (SMS), Lob (postal mail) — only when you initiate those outreach actions.
A skip-trace provider (disclosed upon vendor selection) — only when you explicitly request a skip trace.

Your rights

You can download your data (“Download My Data” under Preferences) or permanently delete your account (“Delete Account” under Preferences). For California and EU residents, additional rights under the CCPA and GDPR apply; contact us to exercise them.

Data retention

Account data is kept while your account is active and for up to 30 days after deletion for backup purposes. Billing records are kept for the period required by tax law.

Security

Row-level security in Supabase isolates your data. Secrets are stored in Cloudflare Worker secret storage and never ship to the browser. We review access controls periodically.

Contact

Questions or requests: contact@globalcollectivere.com.