Privacy Policy
Last updated: July 14, 2026
1. What We Collect
Account data: name, email, company name, phone (if provided), and password (stored hashed — we never see it). Project data: project details, parcel locations you analyze, estimates, line items, uploaded plan files, and generated reports. Usage data: log data such as request timestamps, IP addresses (for rate limiting and security), and error reports.
2. How We Use It
To operate the Service: produce your estimates and reports, run soil analyses on parcels you specify, enforce plan limits, secure the platform, provide support, and improve the product. We do not sell your personal information, and we do not use your project data to benefit other customers.
3. Service Providers We Share Data With
We use a small set of processors to run the Service: Supabase (database, auth, and file storage), our hosting providers, and — only for the specific features you invoke — AI providers (Anthropic for the scope assistant and estimate review, OpenAI for plan analysis, Perplexity for supplementary price lookups) and the USDA Soil Data Access API (which receives only the parcel coordinates you analyze, never your identity). Stripe processes payments when billing is active; we never store card numbers. Each provider receives only what its function requires.
4. Cookies & Local Storage
We use local storage for your login session and interface preferences. We do not use third-party advertising trackers.
5. Data Retention & Deletion
Your data is retained while your account is active. Delete your account and we delete your personal data and project content within 30 days, except minimal records we must keep for legal, billing, or security reasons. You can export your estimates (CSV/PDF) at any time.
6. Security
Data is encrypted in transit (TLS) and at rest. Access is enforced with row-level security — each account can only read its own records. No system is perfectly secure; notify us immediately at the address below if you suspect an issue.
7. Your Rights
You may access, correct, export, or delete your personal data at any time via Settings or by contacting us. We honor applicable rights under US state privacy laws (including Virginia's CDPA).
8. Children
The Service is for business use and not directed at anyone under 16.
9. Changes
We may update this policy; material changes will be announced in the app or by email. The "Last updated" date always reflects the current version.
10. Contact
Privacy questions: support@dirtbid.com