1. Information We Collect

We collect the following categories of information when you use UglyHouses.ai:

Account information: Your name, email address, company name, and password when you register.
Property data: Addresses and property lists you upload, search queries, scan areas you define, and property scores generated by our AI.
Usage data: Pages viewed, features used, scan history, and interaction patterns to improve the Service.
Payment information: Billing details are collected and processed by Stripe. We do not store your full credit card number on our servers.
Device and browser data: IP address, browser type, and device information collected automatically via standard web protocols.

2. Third-Party Data Processing

We use third-party services to enrich property data and provide the Service. These services may process addresses and property information you submit:

Skip trace providers: Owner contact lookup services.
Google Maps Platform: Street View imagery and geocoding.
Google Cloud: AI vision analysis for property scoring.
Stripe: Payment processing.
Direct mail providers: Postcard and letter printing and delivery.
Vercel: Web application hosting.
Supabase: Authentication and database services.

Each third-party service operates under its own privacy policy. We only share the minimum data necessary for each service to function.

3. How We Use Your Data

Provide the Service: Score properties, enrich data, generate AI analysis, facilitate skip traces, and send mailers.
Improve accuracy: Analyze scoring patterns to improve our AI models and property assessment quality.
Communications: Send account notifications, billing receipts, product updates, and support responses. You can opt out of marketing emails at any time.
Weekly digest emails: If you have digest notifications enabled, we send you a summary of new high-score leads, detected distress signals, and weekly activity on Monday mornings. You can disable digest emails under Settings > Notifications without affecting your account.
Outbound webhooks: If you configure a webhook URL in Settings, we send signed event payloads (scored leads and enrichment results) to the endpoint you provided. We log delivery attempts for reliability and debugging.
Shared links: When you generate a share link for a lead or campaign, we store the token, its expiration, and an audit record of views so you can revoke access if needed.
Security: Detect and prevent fraud, abuse, and unauthorized access.

4. Data Retention

Account data: Retained while your account is active and for 30 days after deletion request to allow for account recovery.
Property data: Property scores, AI analysis, and enrichment data are retained for 12 months after your last activity. After 12 months of inactivity, property data is automatically purged.
Webhook delivery logs: Retained for 30 days so you can debug failed deliveries, then purged automatically. Payload bodies are stored encrypted at rest.
Share link records: Active tokens and their view audit trail are retained until the link is revoked or expires. Revoked links are purged within 24 hours.
Payment records: Retained as required by applicable tax and financial regulations.
Usage logs: Retained for up to 90 days for debugging and security purposes.

5. Data Security

We implement industry-standard security measures to protect your data:

All data is encrypted at rest and in transit (HTTPS/TLS).
Personally identifiable information (PII) including owner contact data is encrypted at the field level.
Access to production systems is restricted and logged.
We use Supabase Row Level Security to ensure users can only access their own data.

6. Your Rights

You have the right to:

Access: Request a copy of the personal data we hold about you.
Correction: Update or correct inaccurate personal data.
Deletion: Request deletion of your account and associated data.
Export: Request an export of your property data in a portable format.
Opt out: Unsubscribe from marketing communications at any time.

To exercise any of these rights, contact us at support@uglyhouses.ai. We will respond within 30 days.

7. Cookies

We use minimal cookies:

Authentication session: Required to keep you logged in. Essential for the Service to function.
Analytics: Anonymous usage analytics to understand how the platform is used and improve the experience. No third-party advertising cookies.

8. Children's Privacy

The Service is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. Continued use after changes take effect constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at support@uglyhouses.ai.