Privacy Policy

At AlwaysDisclose.com, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and safeguard your data when you use our services.

Definitions

• Personal Data means any information that identifies or is reasonably capable of identifying an individual, including name, email address, and IP address.
• Disclosure Data means the property‑related information you enter (street address, property details), which we hash and salt before storage.
• Cookies means small text files stored on your device by your browser when you visit our Service.
• Service Providers means third‑party companies (e.g. Vercel, Supabase, AWS) who process data on our behalf under strict confidentiality obligations.

1. Information We Collect

• Disclosure Data: Property-related information you enter (address, property details); we hash and salt street addresses before storage.
• Technical Metadata: Browser type, device information, and session metadata collected via standard analytics.
• Error Reports: Performance and error logs sent to Sentry for debugging (no PII attached).

2. How We Use Your Data

• To generate on-demand PDFs of disclosure reports.
• To maintain and improve our platform via analytics.
• To monitor and resolve errors or security events.
• To comply with legal and regulatory obligations.

3. Legal Bases for Processing (GDPR)

If you are an EU resident, we process your data under the following legal bases:

• Contract: Processing necessary to fulfill our service agreement.
• Legitimate Interests: Improving product security and functionality.
• Legal Compliance: Meeting legal obligations under applicable laws.

All Users: Continued use of the Service after any changes to this Policy constitutes acceptance of those changes.

4. Analytics & Cookies

We use two categories of cookies:

• Essential Cookies: Required for core functionality (session identification, PIN verification).
• Analytics Cookies: Used by Google Analytics and Microsoft Clarity to understand usage patterns; no IP addresses or PII are stored.

You may disable cookies via your browser settings, but some features may not work. We do not honor browser “Do Not Track” signals—please adjust your privacy settings or use a browser extension if you wish to block tracking entirely.

5. Data Sharing & Third Parties

We may share data with:

• Service providers (Vercel, Supabase, AWS) under strict NDA
• Compliance and legal authorities when required by law

6. Data Retention

Disclosure data is retained for 30 days to allow edits via PIN. Metadata and logs are retained for 90 days, then anonymized or purged.

7. Your Rights (California Residents)

• Right to Know: Request disclosure of Personal Data categories collected and the business purpose for each.
• Right to Access & Portability: Request a copy of the Personal Data we hold about you.
• Right to Delete: Request permanent deletion of your Personal Data.
• Right to Correct: Ask us to rectify inaccurate Personal Data.
• Right to Limit Use: Instruct us to limit use of your sensitive personal data.
• Non‑Discrimination: Exercise your privacy rights without a change in price or service quality.
• Do Not Sell My Personal Information: We do not sell or share your Personal Data for monetary gain.

8. Children’s Privacy

Our service is not intended for children under 13. We do not knowingly collect data from minors.

9. International Transfers

Data may be stored or processed in the U.S., which may have different privacy laws. We implement standard contractual clauses to protect EU data.

10. Data Security

We employ industry-standard measures: TLS 1.3, encryption at rest, hashed PII, and regular security assessments.

11. Changes to This Policy

We may update this policy periodically. The "Last Updated" date at the top reflects the current version. No direct notifications are sent.

12. Third Party Links & Widgets

Our Service may contain links to third‑party websites or embed third‑party widgets (e.g., Google Maps). These third parties have their own privacy practices, and we are not responsible for their content or policies. Please review each third party’s policy before providing any Personal Data.

13. Jurisdiction and Governing Law

This Privacy Policy, and any dispute arising out of or in connection with it, shall be governed by and construed in accordance with the laws of the State of Nevada, without regard to its conflict‑of‑law provisions.

14. Severability

If any provision of this Privacy Policy is held to be invalid or unenforceable under applicable law, that provision shall be deemed omitted, and all other provisions shall remain in full force and effect.

15. Contact Us

For privacy questions or requests, email privacy@alwaysdisclose.com.