Privacy Policy

Effective date: July 24, 2026

PlatNum collects the account information you provide when you sign up, the parcel and report data you actively request, and the technical logs needed to run and secure the service.

What We Collect

• first name, last name, and email address
• password hashes instead of plaintext passwords
• verification, reset, and session metadata
• parcel actions, pipeline and Portfolio records, scenario selections, and report or share snapshots you generate
• subscription status and billing references synchronized from Stripe
• operational logs such as IP address, browser, request time, and error traces
• authenticated product-usage events and session-replay recordings collected through PostHog, and web analytics collected through Vercel, each only while you have chosen to allow them

Your Analytics Choices

Analytics is optional and is never on until you choose it. On your first visit PlatNum asks, and nothing beyond essential functionality runs before you answer. You can change or withdraw your choice at any time from Change your analytics choices at the end of this policy, which the Privacy link in the footer of any page reaches.

There are two separate choices:

• Product analytics. A fixed list of events such as logging in, searching for a parcel, changing Unlisted Opportunities filters, saving or dismissing a parcel, selecting a scenario, generating a report, sharing a snapshot, or completing checkout. These are associated with your internal PlatNum user ID. PlatNum does not send your name, email address, searched address, parcel ID, notes, report or snapshot identifiers, or financial inputs as event properties. Vercel web analytics and performance timings ride this same choice.
• Session replay. A recording of how you interact with the application, so PlatNum can reproduce usability problems. Form inputs are masked. Because a recording can capture your deal pipeline and financial assumptions, this is a separate choice that stays off unless you turn it on, and it cannot be enabled without product analytics.

Withdrawing consent stops collection immediately, including any recording in progress. Accepting the Terms of Service does not by itself permit analytics or session replay.

Session replay only ever runs for a signed-in user, so an anonymous session cannot be recorded. Your choice is stored in your browser, which means it is per-device and is cleared if you clear site data.

How We Use It

• authenticate you and secure the application
• deliver verification and password-reset emails
• generate parcel analyses and reports you request
• troubleshoot outages, prevent abuse, and improve the product
• understand whether product workflows are useful and diagnose confusing interactions
• review scenario-correction reports that you submit, including the parcel,

scenario, current rationale, and your explanation

• when you separately opt in, combine de-identified Portfolio facts with other users' data to improve aggregate benchmarks and models
• support billing and customer support when paid subscriptions launch

Sharing

We do not sell personal data. We may share data with service providers that host the application, database, email delivery, analytics, and payments infrastructure. PostHog processes the product-usage events and masked session-replay data described above on PlatNum's behalf.

When you request an enhanced site visual, parcel address, scenario geometry, source site-plan imagery, and available reference property imagery may be sent to OpenAI to generate the conceptual rendering. Generated visuals are presentation artifacts only and do not replace the app's deterministic zoning, feasibility, or financial outputs.

Retention

We keep account-owned app data while your account is active. Self-service account deletion first blocks new billing activity for the account, then asks Stripe for every open Checkout session and nonterminal subscription associated with the customer references PlatNum has recorded. PlatNum removes the local account and its account-owned rows only after that provider cleanup can be confirmed. If provider cleanup cannot be confirmed, deletion reports an error and can be retried instead of reporting a partial success.

Generated report and deal-share snapshots are link-accessible artifacts. Account deletion deletes the report and deal-share snapshots created by that account, so those existing links stop working. PlatNum keeps a minimal operational record that an export or deletion occurred. Separate technical and security logs, including processed Stripe webhook identifiers, may also contain identifiers related to earlier account activity; they are not part of the local account-owned rows removed by the self-service transaction.

Stripe customer, invoice, payment, and other provider-side billing records are managed by Stripe and are outside PlatNum's local account-deletion transaction. Self-service deletion does not claim to remove those separate provider records or operational logs on the same schedule as local account data.

Security

We use reasonable administrative, technical, and organizational safeguards, but no system can guarantee absolute security.

Your Choices

The authenticated account page lets you:

• choose whether de-identified Portfolio facts may be used in aggregate product and model improvements, and revoke that choice at any time without losing core Portfolio features;
• download a JSON bundle of the account data PlatNum can attribute to you; and
• permanently delete your account after entering your current password and an explicit confirmation.

Scenario-correction reports are account-owned. They are included in the JSON account export and deleted with the account.

The export excludes password hashes, one-time-token hashes, report/share-link capabilities, raw Stripe provider payloads, and shared snapshot contents. You can also contact PlatNum using the support method published in the current Terms of Service to request account correction or help with these operations.

You may also contact PlatNum through that support method with questions about product analytics or session replay.

Changes

We may update this policy from time to time. The current version posted in the app controls.