Privacy Policy

1. Scope

This policy applies to tract.earth and the tract.earth developer API. It does not cover third-party sites or services you reach through links, or your own MLS provider, which handle your data under their own policies.

2. Information we collect

Information you provide

• Account data: your email address and authentication details (managed by Supabase), and profile details such as your role and company name;
• CRM content: contacts, deals, tasks, notes, lists, projects, and files you create or upload;
• MLS credentials: if you connect a live MLS feed, we store your MLS provider token encrypted at rest and use it only to load listings for you;
• Payment data: when you subscribe, Stripe collects and processes your payment details. We do not store full card numbers — we receive limited billing metadata (plan, status, last four digits) from Stripe.

Information we collect automatically

• Usage and device data: pages viewed, features used, approximate location derived from IP, browser and device type, and diagnostic logs;
• Cookies and local storage: session and preference data, described in our Cookie Policy.

Property and owner data

When you research a property, we retrieve and display data from public and licensed sources, and — when you request it — owner skip-trace results (names, phone numbers, email and mailing addresses). We keep a record of your searches, saved lists, and skip traces so you can return to them.

3. How we use information

We use information to:

• Provide, operate, secure, and improve the Service, including delivering property research, the CRM, and outreach tools;
• Authenticate you, meter plan usage and credits, and process subscription payments;
• Respond to support requests and send service and transactional messages;
• Detect, prevent, and investigate fraud, abuse, and security incidents; and
• Comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use the private content of your CRM to train machine-learning models.

4. How we share information (service providers)

We share information with vendors ("processors") who perform services for us under contract, only as needed to run the Service:

• Supabase — authentication and database hosting;
• Railway and Vercel — application and frontend hosting;
• Stripe — subscription payments and billing;
• Bridge Data Output / your MLS — live MLS listings (accessed with your credentials);
• Skip-trace and contact-data providers — owner enrichment you request;
• Lob or a comparable mail provider — USPS direct mail you send;
• Mapbox — maps and geocoding;
• Product analytics — aggregate usage measurement.

We may also share information to comply with law or valid legal process, to protect rights and safety, and in connection with a merger, acquisition, or sale of assets (with notice where required).

5. Data about property owners and third parties

Some information in the Service concerns people who are not our users — for example, a property owner you skip trace. This data comes from public records and licensed data brokers and is provided for legitimate real-estate purposes only. It is not a consumer report and may not be used for FCRA-regulated decisions.

If you are a property owner and wish to request access to, correction of, or deletion of data about you that we hold, contact us at support@earthengine.io. We will act on verified requests as required by applicable law; note that we may not control the underlying public records or data-broker sources.

6. Data retention

We retain account and CRM data for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, tax, security, and dispute-resolution needs. You can delete individual records in the app. When you close your account, we delete or de-identify personal data on a schedule consistent with those obligations.

7. Security

We use technical and organizational measures to protect information, including encryption in transit, encryption of sensitive credentials (such as MLS tokens) at rest, access controls, and row-level data isolation between accounts. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security.

8. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. Residents of California (CCPA/CPRA) and the EU/UK (GDPR) have specific rights, including the right not to be discriminated against for exercising them. We do not sell personal information.

To exercise a right, email support@earthengine.io from your account email. We may need to verify your identity before acting.

9. Children

The Service is for business use by adults and is not directed to children under 16. We do not knowingly collect personal information from children.

10. International users

We operate in the United States and our data is stored and processed there. If you access the Service from outside the U.S., you consent to the transfer and processing of your information in the U.S., which may have different data-protection laws than your country.

11. Changes to this policy

We may update this Privacy Policy. Material changes will be reflected in the "Last updated" date and, where appropriate, by additional notice. Continued use of the Service after changes take effect constitutes acceptance.

12. Contact

Questions or privacy requests? Contact us at support@earthengine.io.