Draft pending legal review. This policy must be approved and published before public launch (PRD launch-readiness criteria).
Customer data. We store your account email, company profile, alert configuration, and opportunity feedback. Payment details are collected and stored by Stripe; Buildout Radar never stores full card data.
Source data. Opportunities are derived from public building-permit records retrieved through approved data providers (Apify Actors). We retain raw source records as auditable evidence and display only public permit-party business information.
Processors. Railway (hosting), PostgreSQL (data), Amazon S3 (raw evidence), Apify (permit collection), Mapbox (area normalization), OpenRouter (classification, zero-data-retention routing), Resend (email), Stripe (billing), Sentry (errors), PostHog (product analytics with internal identifiers only).
Email. Non-transactional email always includes preference management or unsubscribe controls. Account deletion and data removal requests are honored via support until self-service deletion ships.