Privacy Policy

We collect the data we need to run Curbsight and bill you for it — nothing more. We don't sell it. We don't share your customer data with other customers. The data sources we use to build the property intelligence layer (county assessors, NOAA, ActDataScout, Google Maps) are public or licensed, and we treat the homeowner contact information they include as a regulated resource you're responsible for using lawfully.

• Account info — email, name, company name, phone (if provided), and the password hash for sign-in.
• Org membership — which organization you belong to, your role (owner / rep), and your plan tier.
• Activity telemetry — pages visited, leads viewed, phone reveals used, CSV exports, photos uploaded. Lets us improve the product and detect issues.
• Location — in the mobile app, when you grant permission, we use your device's precise location to show your position on the territory map and to tag your knocks and route stops with GPS. It's linked to your account for those features only; we don't sell it or share it with other customers, and you can revoke the permission anytime in your device settings.
• Camera, photos & video — in the mobile app, when you grant permission, we use the camera and photo library so you can capture and attach inspection, damage, and walkthrough photos and videos to a property or job. Roof, damage, and walkthrough images may be analyzed by our AI provider (see §4) to estimate roof age and generate inspection / adjuster reports.
• Microphone & audio — when you grant permission, the camera records audio together with your walkthrough videos so your narration is captured; narration may be transcribed to generate notes. The microphone is used only during an active recording.
• Project management data you create — jobs, notes, photos, estimate line items, pricing templates, homeowner contact log entries.
• Payment info — handled entirely by Stripe. We see your subscription status and the last 4 digits of the card on file, never the full card number.

• Property records — addresses, owner names, year built, sqft, assessment values from public county assessor records.
• Hail event data — NOAA Storm Events Database (public).
• Phone numbers — sourced from regulated data providers under license. We do not collect phone numbers from web scraping or homeowner volunteering.
• Parcel sketches and aerial imagery — linked from county GIS portals (ActDataScout) and Google Maps Satellite. We do not store the parcel sketches themselves; we link out.

• Operate the service — authenticate you, scope your tenant's data, render your dashboard.
• Bill your organization through Stripe.
• Send service emails — welcome, password reset, storm alerts, plan changes, payment receipts.
• Detect abuse — unusual access patterns, scraping attempts, RLS bypass attempts.
• Improve the product — aggregated usage trends, feature performance, error monitoring.

We use the following service providers (sub-processors). Each is bound by their own privacy and data-processing terms.

• Supabase — database, authentication, file storage (property photos and videos). Hosted in the US.
• Vercel — application hosting, serverless functions.
• Stripe — payment processing, subscription management.
• Resend — transactional email delivery.
• Google Maps — satellite + street view imagery on the dashboard.
• Anthropic (Claude) — AI analysis of property photos and data to estimate roof age and generate walkthrough / adjuster reports. The images and property facts you submit are sent to Anthropic to return results; under its commercial API terms Anthropic does not use them to train its models. US-hosted.
• BatchData — licensed owner-contact (skip-trace) lookups, run against a property address only when you reveal a phone number. US-hosted.
• NOAA — public storm data (we ingest; no PII flows back).

We do not share your customer-created data (jobs, photos, estimates, notes) with other customers or with anyone outside the sub-processors above.

Phone numbers shown in Curbsight come from licensed data providers. We make these available so contractors can contact homeowners about services they may want. Calling, texting, or otherwise contacting any number is your decision and is governed by federal and state laws — the Telephone Consumer Protection Act (TCPA), the National Do-Not-Call Registry, and any state equivalents.

Curbsight provides a per-property "Do Not Call" flag when the underlying source marks the number as DNC-listed. You are still responsible for checking the registry yourself before contacting any number — we cannot guarantee real-time accuracy of DNC status.

Strictly necessary — always on. These carry no advertising purpose and cannot be switched off without breaking the product.

• Auth cookies / tokens — to keep you signed in.
• Local storage — your theme preference and a few in-app settings.
• Visitor ID (cs_vid) — a random first-party identifier, set by us on our own domain, so we can count visits and see which pages lead to a demo. It is not linked to your name or email unless you submit a form, and it is never sold or shared.

Analytics — only with your consent. Aggregate page and traffic measurement (Vercel Analytics, which is cookieless, and Google Analytics 4 where enabled) to understand which pages work.

Advertising — only with your consent. On our public marketing pages we use the Meta (Facebook) Pixel and, where enabled, Google Ads conversion tracking, to measure whether our ads produce customers. These set third-party cookies (_fbp, _fbc) and may receive a hashed, irreversible version of your email address when you submit a form, so the ad platform can match a conversion to a click. We never send your raw email address to an ad platform. We also send some of these conversion events server-to-server (Meta Conversions API) so that a single conversion is not double-counted.

Your choice. Advertising and analytics cookies are set to denied until you accept them on the cookie bar. You can change your mind at any time — the bar can be reopened from the link in the footer. We honour the Global Privacy Control (GPC) browser signal automatically: if your browser sends it, advertising and analytics stay off and you will not be asked.

Do Not Sell or Share My Personal Information. Under the CCPA/CPRA, using advertising cookies for cross-context behavioural advertising counts as a "sale" or "share". To opt out, reject advertising cookies on the cookie bar (or send GPC) — that is a complete opt-out, and no further action is needed. We do not sell personal information in any other sense, and we never sell or share your phone number or SMS opt-in.

None of this runs on our internal or signed-in application surfaces — advertising and analytics tags are suppressed there entirely.

You can:

• Access the personal data we hold about you — email us.
• Request correction of inaccurate data.
• Delete your account — your project-management data is removed; aggregated usage metrics may persist in anonymized form.
• Export your data — we can provide a CSV / JSON dump of jobs, estimates, and contacts on request.

California residents have additional rights under the CCPA; EU residents under GDPR. Email us to exercise any of them.

We keep your account data for as long as your subscription is active and for a reasonable period afterward to handle billing reconciliation and re-activation. Backups may retain deleted data for up to 30 days before falling off the rolling-window.

We use Row-Level Security on every tenant-data table so your org's data is invisible to other customers at the database layer. Connections are TLS-encrypted. Passwords are hashed by Supabase. Stripe handles all card data. We're a small team — if you spot a vulnerability, email sol@curbsight.io and we'll get on it.

We'll update this page when our data practices change. Material changes will be announced via email or in-app notice.

Privacy questions or data requests: sol@curbsight.io.

If you provide your mobile number and opt in, Curbsight may send you SMS text messages — including account and support notifications and sales/appointment-scheduling messages. We do not sell or share your mobile phone number or your SMS opt-in with any third parties for their marketing purposes. Message frequency varies. Message and data rates may apply. Reply HELP for help or STOP to opt out at any time, or email sol@curbsight.io. Consent to receive texts is not a condition of any purchase.