Privacy Policy

Account information. When you sign up, we (through our authentication provider, Supabase) collect your name, email address, and a securely hashed password, or, if you sign in with Google, basic profile information from that provider (name, email, profile photo).

Billing information. If you subscribe to a paid plan, our payment processor, Stripe, collects and stores your payment card details and billing address directly — we do not receive or store your full card number. We receive limited billing metadata from Stripe (plan, billing status, amounts, and transaction history) to manage your subscription.

Usage & content data. We collect the addresses and parcels you search or save, the questions you ask our AI features and the responses generated, notes and comments you add to a saved parcel, organization/team membership and invitations, and generated reports.

Device & log data. We and our analytics provider (Google Analytics) automatically collect information such as IP address, browser type, device identifiers, pages viewed, and referring URLs, via cookies and similar technologies (see Section 4).

• To provide, maintain, and improve the Service, including running the parcel lookups, scoring, and AI analyses you request;
• To process payments and manage subscriptions;
• To communicate with you about your account, transactional notices, and — where you have not opted out — product updates;
• To monitor, analyze, and improve usage of the Service, including via Google Analytics;
• To detect, investigate, and prevent fraud, abuse, and security incidents;
• To comply with legal obligations and enforce our Terms of Use.

To generate Outputs, the questions you ask, the parcel data associated with them, and related context are sent to third-party AI model providers for processing, currently Google (Gemini models) and, as an automatic fallback when Google's models are unavailable, Anthropic (Claude models). These providers process this data under their own applicable API terms to generate a response, which the Service returns to you. Do not enter sensitive personal information (e.g. Social Security numbers, financial account numbers, health information) into chat questions or notes — this is a business research tool, and such data is not necessary for the Service to function.

We use essential cookies to keep you signed in and to operate core account and security features. We also use Google Analytics (Google tag / gtag.js), which sets cookies to help us understand how visitors use the Service in aggregate. You can control or disable cookies through your browser settings, and you can opt out of Google Analytics using Google's browser add-on. Disabling cookies may limit some functionality of the Service.

We do not sell your personal information. We share information only in the following circumstances:

• Service providers who process data on our behalf to operate the Service — currently including Supabase (authentication and database hosting), Stripe (payment processing), Google (analytics and AI processing), Anthropic (AI processing fallback), and Mapbox (mapping);
• Your organization — if you join a team/organization workspace, other members of that workspace may see parcels, notes, comments, and reports you save or share within it, as configured by your organization's administrator;
• Legal & safety — where required to comply with law, legal process, or to protect the rights, property, or safety of the Company, our users, or the public;
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

We retain account and usage data for as long as your account is active and as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account, we will delete or anonymize your personal information within a commercially reasonable period, except where retention is required by law or legitimate business record-keeping (e.g. billing records).

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction, including encryption in transit and reliance on providers (Supabase, Stripe) that maintain their own security certifications. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You may access, update, or delete much of your account information directly from account settings, or by emailing privacy@brainz.city. Depending on where you live, you may have additional rights under applicable law (such as the right to access, correct, delete, or restrict processing of your personal information, or to opt out of certain sharing). We will honor verifiable requests as required by applicable law. You may opt out of marketing emails using the unsubscribe link in those emails; you will still receive transactional and account-related communications.

The Service is not directed to, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at privacy@brainz.city and we will take steps to delete it.

The Service is operated in, and primarily intended for use in, the United States, and covers Florida real property records. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have different data protection laws than your country of residence.

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

Questions about this Privacy Policy, or requests regarding your personal information, can be sent to privacy@brainz.city.