Privacy Policy

1. Who we are

"MySiteLogic," "we," "us," and "our" mean the MySiteLogic service available at mysitelogic.com and its operator. MySiteLogic is currently operated by its founding team; a formal legal entity name will be listed here upon formation. This policy describes what we collect, how we use it, and the choices you have.

2. Information we collect

• Account information: your email address, a securely hashed password (we never store or see your actual password), the date you confirmed your email address, your marketing-email preference, the date your account was created, and the version of the Terms you accepted and when.
• Profile details you choose to add: first name, last name, and company. These are optional, entered from the Profile dialog, and the app works fully without them.
• Analyses you run: the property addresses you enter, their map coordinates, and the feasibility reports generated from them, saved to your account. This includes the assumptions you edit on a report and your saved default assumptions.
• Site Finder searches: MySiteLogic also lets you search every parcel in the City of San Diego by filters (zone, lot size, unit capacity, age, overlays). Those searches run against our own precomputed index of public parcel data; we do not build a profile of which parcels you looked at.
• Usage & cost records: which features and data sources each analysis uses, timestamps, and the cost of each data call, tied to a numeric account ID, so we can enforce limits and monitor spending and reliability.
• Technical data: your IP address and basic request logs, used for security, abuse prevention, and rate limiting. (Administrative actions by our own staff are also logged with the administrator's IP.)
• Support & corrections: if you submit a data correction or feedback, we keep the submission (including the property address and the corrected values).

3. Cookies & local storage

We use two cookies, both essential: a session cookie that keeps you signed in during a visit, and a remember-me cookie that lasts up to 30 days. Both are HttpOnly and restricted to our site. Your browser's local storage holds only your own display preferences — your theme, a flag noting you've seen the tutorial, your Site Finder size filter, and your chosen map background. None of it is personal information and none of it leaves your browser. We do not use third-party advertising cookies, cross-site tracking, or third-party analytics.

4. How we use your information

To provide and run analyses; keep your account secure and enforce daily limits and abuse protections; monitor cost and reliability; send essential account emails such as password resets; send product or marketing emails only if you opted in; and improve the product using de-identified or aggregated information.

5. Third-party services

To generate reports we share the minimum necessary data with providers acting on our behalf:

• Render: hosts the application and database (all stored account data).
• Cloudflare: sits in front of the site to deliver it and protect it from attack and abuse. It handles the encrypted connection between your browser and us, and therefore sees your IP address and the pages you request.
• Google Maps Platform: receives the address text you type (for autocomplete, geocoding, and maps).
• RentCast: receives the property address or coordinates (rent and sale comparables).
• Anthropic: the property address is included in AI prompts used to research zoning, and the AI may include it in web searches performed as part of that research.
• PDFShift: when you export a report as a PDF, the rendered report — including the property address and its analysis — is sent to this service to be converted into a PDF file, which is returned to you. It is used only at the moment you click export.
• U.S. Census Bureau, SANDAG, City & County of San Diego, HUD, FRED: public agencies and public data services that receive coordinates, a ZIP code, or nothing personal at all, for demographic, parcel, GIS, affordable-rent, and interest-rate lookups.
• Resend: delivers transactional email (email confirmation, password resets) to your email address.
• Sentry: error monitoring; reports are scrubbed of your email, IP address, and analyzed addresses before sending, keeping only a numeric account ID.

Each provider's use of data is governed by its own terms. We do not sell your personal information, and we do not share it for advertising.

6. Data retention & deletion

Your reports are kept until you delete them or delete your account. Deleting your account permanently removes your account and all of your saved reports: this is self-service from inside the app and cannot be undone. We retain de-identified usage and cost records (not linked to your identity) for up to 400 days for analytics and service integrity, and data-correction submissions (which may include a property address, retained without a link to your account) to keep our data accurate. If you unsubscribe from marketing email we keep a record of that choice indefinitely, because that is the only way to guarantee we don't email you again. Cached third-party data expires automatically on its own timers, and limited security logs are kept as needed for protection and legal compliance.

7. Your rights & choices

• Download your data: self-service: open the account menu and choose "Download my data." You get a machine-readable file containing your profile and every report saved to your account.
• Delete your account: self-service: open the app footer, choose "Delete account," and confirm with your password. This erases your account and reports.
• Correct your data: email us using the contact below and we will respond to verified requests.
• Marketing emails: you can opt out at any time from Email preferences (linked at the bottom of the app) or via the unsubscribe link in any marketing email; essential account emails (like password resets) still apply.
• California residents: you have the right to know what personal information we collect and how it is used (this policy), to request access or deletion, and to not be discriminated against for exercising those rights. We do not sell or share personal information as defined by the CCPA.

8. Security

Passwords are stored hashed, data is encrypted in transit (HTTPS), access to production systems is restricted, and activity is monitored. No system is perfectly secure, but we work to protect your information and limit who can reach it.

9. Children

MySiteLogic is not intended for anyone under 18, and we don't knowingly collect information from children.

10. Changes & contact

We'll update this page as the product evolves and refresh the "Last updated" date above; material changes will get prominent notice. Questions or requests? Email support@mysitelogic.com.