Privacy Policy

Effective date: July 24, 2026

Plat Num collects the account information you provide when you sign up, the parcel and report data you actively request, and the technical logs needed to run and secure the service.

What We Collect

• first name, last name, and email address
• password hashes instead of plaintext passwords
• verification, reset, and session metadata
• parcel actions, pipeline and Portfolio records, scenario selections, and report or share snapshots you generate
• subscription status and billing references synchronized from Stripe
• operational logs such as IP address, browser, request time, and error traces
• authenticated product-usage events and session-replay recordings collected through PostHog after you accept the current Terms and Privacy Policy

Product-usage events describe actions such as logging in, searching for a parcel, changing Top Candidates filters, saving or dismissing a parcel, selecting a scenario, generating a report, sharing a snapshot, or completing checkout. These events are associated with your internal Plat Num user ID. Plat Num does not send PostHog your name, email address, searched address, parcel ID, notes, report or snapshot identifiers, or financial inputs as event properties.

Session replay records how an authenticated user interacts with the application so Plat Num can reproduce usability problems and improve workflows. Form inputs are masked, and replay does not begin until the authenticated user has accepted the current policy version. Public pages and users awaiting acknowledgement of an updated policy are not recorded.

How We Use It

• authenticate you and secure the application
• deliver verification and password-reset emails
• generate parcel analyses and reports you request
• troubleshoot outages, prevent abuse, and improve the product
• understand whether product workflows are useful and diagnose confusing interactions
• support billing and customer support when paid subscriptions launch

Sharing

We do not sell personal data. We may share data with service providers that host the application, database, email delivery, analytics, and payments infrastructure. PostHog processes the product-usage events and masked session-replay data described above on Plat Num's behalf.

When you request an enhanced site visual, parcel address, scenario geometry, source site-plan imagery, and available reference property imagery may be sent to OpenAI to generate the conceptual rendering. Generated visuals are presentation artifacts only and do not replace the app's deterministic zoning, feasibility, or financial outputs.

Retention

We keep account-owned app data while your account is active. Self-service account deletion first blocks new billing activity for the account, then asks Stripe for every open Checkout session and nonterminal subscription associated with the customer references Plat Num has recorded. Plat Num removes the local account and its account-owned rows only after that provider cleanup can be confirmed. If provider cleanup cannot be confirmed, deletion reports an error and can be retried instead of reporting a partial success.

Generated report and deal-share snapshots are link-accessible artifacts. Account deletion deletes the report and deal-share snapshots created by that account, so those existing links stop working. Plat Num keeps a minimal operational record that an export or deletion occurred. Separate technical and security logs, including processed Stripe webhook identifiers, may also contain identifiers related to earlier account activity; they are not part of the local account-owned rows removed by the self-service transaction.

Stripe customer, invoice, payment, and other provider-side billing records are managed by Stripe and are outside Plat Num's local account-deletion transaction. Self-service deletion does not claim to remove those separate provider records or operational logs on the same schedule as local account data.

Security

We use reasonable administrative, technical, and organizational safeguards, but no system can guarantee absolute security.

Your Choices

The authenticated `/account` page lets you:

• download a JSON bundle of the account data Plat Num can attribute to you; and
• permanently delete your account after entering your current password and an explicit confirmation.

The export excludes password hashes, one-time-token hashes, report/share-link capabilities, raw Stripe provider payloads, and shared snapshot contents. You can also contact Plat Num using the support method published in the current Terms of Service to request account correction or help with these operations.

You may also contact Plat Num through that support method with questions about product analytics or session replay.

Changes

We may update this policy from time to time. The current version posted in the app controls.