Privacy Policy

1. Information we handle

• Account and workspace information: names, email addresses, authentication records, workspace membership and roles.
• Your work: search requests, filters, saved sites, opened candidate details, notes, comparisons, generated reports and related usage limits. We record detail opens to let you exclude previously opened sites from searches.
• Billing and support: Stripe customer, subscription and transaction references, plan and payment status, and information you send us. Stripe collects payment details through its hosted services; we do not directly collect or store complete card numbers or card security codes.
• Technical and security information: requests, device/browser information, cookies, session identifiers, errors and abuse-prevention signals. Hosting and security providers may process IP addresses. Our public-trial controls use derived identifiers to enforce limits.
• Public records: parcel, assessment, road, planning, permit and related records. Some records contain owner names or mailing addresses. These are distinct from private customer workspace information.

2. Why we use information

We use information to authenticate users, operate workspaces, return searches and reports, manage subscriptions and limits, respond to requests, prevent fraud and abuse, investigate errors, and meet applicable legal obligations. If you separately choose to subscribe, we send FrontageRadar product updates, tips and offers. Marketing is optional: change your choice in My account or use the unsubscribe link in a marketing email. Unsubscribing does not stop sign-in, security or essential billing emails. With your analytics choice, we also measure product usage to improve the service.

We do not sell your private account or workspace information, use it for cross-context behavioral advertising, or share it with unrelated Auroyo products for their marketing. Information intentionally shared within a workspace is available according to its roles and features; workspace owners and administrators control access.

3. Service providers and AI

We use providers to perform specific functions, including:

• Supabase: account authentication, application database and storage.
• Cloudflare: website delivery, hosting and security, including bot protection.
• Stripe: checkout, payment methods, invoices and subscription management.
• OpenAI: AI-assisted searches and explanations through our primary API connection.
• OpenRouter: a backup routing service for AI-assisted searches and explanations when the primary connection is unavailable. Requests routed through it are also processed by the selected model provider.
• PostHog: optional product analytics.
• Resend and Zoho: account emails, optional marketing email preferences and support correspondence.

When you use an AI feature, we send the request and relevant site or workspace context needed for that feature to the AI provider handling that request, directly or through the backup routing service. Avoid entering sensitive or confidential information that is unnecessary for your search. Our direct OpenAI API requests disable response storage; that setting does not eliminate provider security or abuse-monitoring retention. Retention and data use for backup requests follow the routing service and selected model provider’s applicable API policies and settings.

Providers may also handle information for their own legally required payment, fraud, security or compliance purposes under their policies. External maps and links may involve other providers; visiting another website is governed by that site's practices.

We may disclose necessary information to comply with law or valid legal process, protect rights and security, or complete a business transfer with appropriate safeguards and notice where required. Such a transfer does not itself authorize unrelated new uses of your information.

4. Cookies and analytics choices

Essential cookies and local storage support sign-in, security, trial limits and your saved privacy choice. Optional product analytics remain off until you choose to allow them. Refusing analytics does not prevent normal use of the service.

If you allow analytics, PostHog uses cookies/local storage and records selected page and product events. Signed-in events can be associated with your user and workspace identifiers, so this is not fully anonymous. Our analytics configuration disables session replay and automatic click capture, and excludes raw search text and private workspace content from the selected event properties.

Use Cookie preferences to change your choice on this browser. Withdrawal stops future optional collection; you can contact us about previously collected information. We keep analytics disabled when the browser sends Global Privacy Control. Other browser signals such as Do Not Track do not have a separate implementation. Choices are per browser and may need to be set again after clearing storage.

Security, essential service operation and billing records are not switched off by declining analytics.

5. International processing

Our primary application database is hosted in the United States. Hosting, payment, email, analytics and AI providers may process information in the United States and other countries. Authorized personnel may access information from their locations when needed to operate or support the service. We do not promise that all storage, processing or access occurs only in the United States. Where applicable law requires transfer safeguards, those requirements apply.

6. Retention and security

We retain information for the purposes described above for as long as reasonably necessary, taking account of the account's status, your saved work, support requests, security needs and applicable recordkeeping obligations. Saved workspace content is generally retained while the workspace remains in use. Canceling a subscription does not by itself delete the account or workspace.

Deleting your account stops FrontageRadar marketing emails and ends your access to all workspaces. Team content is retained when you leave as a member, with your authorship displayed as Deleted user. Workspace owners must transfer ownership or explicitly close their workspaces; closing a workspace cancels its subscription and removes its private content and report files. Other members' accounts and subscriptions in other workspaces are unaffected. Deletion does not automatically issue a refund.

To prevent repeated claims of new-user referral and first-payment rewards, we retain a keyed email fingerprint for 180 days after an account deletion request. This is limited, linkable anti-abuse information, not anonymous data. During that period, a new account using the same email can register and purchase normally, but referral and new-user reward eligibility requires support review. Expired fingerprints are deleted through our scheduled cleanup.

Following a verified deletion request, we remove information from active systems when required, subject to necessary legal, security and shared-workspace exceptions. We keep the minimum email preference needed to honor an opt-out; creating another account does not automatically resubscribe a previously recorded contact. Backup copies may remain until normal backup rotation, and limited billing or dispute records may need to be retained separately. We will explain relevant limitations when handling a request; we do not promise immediate deletion from every backup.

We use access controls, workspace permissions, restricted server credentials and encrypted transport to protect information. No online service or security measure is completely secure.

7. Your requests and public-record corrections

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of your information, or to object to or restrict certain processing. Send requests to support@frontageradar.com, preferably from your account email. We may need to verify identity and authority before acting. We will respond within applicable legal time limits; you can request account deletion in My account settings. Other privacy requests, provider or backup limitations, and reward eligibility reviews are handled through support.

For team content, we consider workspace ownership and other members' rights. To report incorrect public owner or parcel information, send the relevant site or source reference. We can investigate our presentation and any applicable correction or removal request, but cannot change or erase the original government record. Do not send passwords, card details or identity documents in an initial email.

The service is intended for adult business users and is not directed to children. Contact us if you believe a child has provided personal information. You may also raise concerns with a competent data-protection authority where applicable.

8. Policy updates and contact

We update this policy when our practices change and keep the effective date visible. We will notify affected users of material changes and obtain consent where required before using previously collected information for materially different purposes.

Privacy and service contact: support@frontageradar.com. Subscription cancellation and refunds are described in our Terms of Service.