Privacy Policy

GeoLocity is built around the principle that you should know what is under your land. We collect the minimum amount of personal information needed to provide the Service. We do not sell your data. We do not use your queries to build a profile about you. Payments are handled by Stripe — we never see your card number. Specifics below.

Lookup queries. When you submit an address, parcel number, or coordinates, we receive that input in order to run the lookup. Anonymous free lookups are counted in aggregate for performance and quota purposes; they are not tied to your identity.

Account information (only if you create an account). Your email address, and either a password (stored only as a secure hash by our authentication provider) or your Google sign-in identity. We never see or store your Google password.

Saved reports.Reports you run while signed in — and reports you purchase — are saved so you can return to them. A purchased report is saved even if you weren’t signed in when you bought it, so your purchase can’t be lost; it attaches to your account when you sign up in the same browser. You can delete any saved report, or your whole account, at any time.

Purchase records.When you buy something we keep what is needed to honor it: which parcel was unlocked, the subscription state, and Stripe’s reference for the transaction. Your card details go to Stripe directly and never touch our servers.

Basic technical data. Standard server logs (IP address, browser user-agent, timestamp) are kept short-term for security and abuse prevention. Where we count requests for rate limits and free-report quotas, we store a salted one-way hash — never your raw IP address.

Sign-in security records (only if you have an account). When you sign in, our authentication service records the event — including the IP address and browser it came from — so that unauthorized access to your account can be detected and investigated. These records are kept for up to 90 days after your last sign-in activity, then deleted. They are used for account security, never for marketing or profiling.

What we do NOT collect:your real name, phone number, mailing address, government identifiers, or any other sensitive personal information — unless you actively give it to us, and we will tell you why we’re asking.

To run the Service. To deliver and safeguard what you paid for. To prevent abuse. To improve the product based on aggregate usage patterns.

We do not sell, rent, or lease your information to advertisers or data brokers, and we do not use it for targeted advertising.

A small number of providers help us run the Service. Each receives only what its job requires:

• Stripe — payment processing. Your card details go to Stripe directly. See Stripe’s privacy policy.
• Supabase — hosts our accounts and saved-report database (with your email and sign-in credentials handled by its authentication service). See Supabase’s privacy policy.
• Google— only if you choose “Sign in with Google.”
• Mapbox — when you submit a street address, we forward it to Mapbox to convert into coordinates. See Mapbox’s privacy policy.
• ATTOM Data Solutions — when you submit a parcel number, we forward the parcel number, county, and state to retrieve property coordinates. See ATTOM’s privacy policy.
• U.S. Geological Survey and other public agencies (FEMA, EPA, BLM, state sources) — coordinates are used to query their public endpoints.
• Water-demand scan providers— the paid scan queries OpenStreetMap, Google Maps business listings (via Apify), and a news-search service (Perplexity) for data-center activity near the parcel. They receive the parcel’s coordinates or its city/state — never your identity.
• Vercel and Render — host the website and its backend, and process traffic (including IP addresses) as any web host does.

We do not forward your email address or any other personal information to data providers as part of a lookup.

We use a small set of functionalcookies: your sign-in session, and a purchase record that lets a report you bought in this browser reach your account when you sign up. That’s what keeps a purchase from getting lost.

We use no marketing cookies and no third-party tracking pixels. If we ever add lightweight, privacy-respecting analytics (e.g., Plausible or Fathom), we will update this Policy and disclose what is collected.

Server logs are kept for short windows (typically 30 days) and then rotated out. Sign-in security records are deleted 90 days after your last sign-in activity. Aggregate query counts are retained in non-identifying form. Saved reports stay until you delete them or your account. Purchase records are retained as needed for accounting and legal obligations. A report purchased without an account is held so you can claim it; if you would rather have it removed, email us.

Depending on where you live (e.g., California, Colorado, Virginia, EU/UK), you may have the right to know what personal information we have about you, to correct it, to request deletion, or to opt out of certain data uses. Email us at the address below and we will respond within applicable timeframes.

We do not sell personal information. The Service is not directed to children; you must be 18 or older to create an account or make a purchase, and we do not knowingly process the personal information of children under 13.

We use standard transport-layer encryption (HTTPS) and reasonable safeguards for any personal information we hold, including row-level access controls on our database. No system is perfectly secure; if a breach affecting you occurs, we will notify you as required by law.

We will update this Policy as the Service evolves. The “Effective” date at the top of this page reflects the most recent change. Material changes will be communicated via email to account holders and announced on the site.

Privacy questions or requests? Email info@geolocity.com.

Operated by Blind Spot Intelligence LLC.