Privacy Policy

DeedFinder (“we,” “us,” or “our”) is operated by Sovereign Dynamics LLC. This Privacy Policy explains what information we collect when you use deedfinder.io, why we collect it, and the choices you have. We aim to keep this short, in plain English, and free of legalese.

1. Information we collect

Account information

When you create an account we collect your email address and a password hash (we never store passwords in plain text). If you choose to add an optional display name to your profile, we store that too. Authentication is handled by Supabase Auth, which keeps a session cookie in your browser so you stay signed in.

Subscription and billing

Payments are processed by Stripe. We never see or store your credit-card number, CVV, or full card data — Stripe handles all of it. From Stripe we receive only a customer ID, the last four digits of your card, the card brand, the expiration month/year, and the status of your subscription. That information is stored in our Supabase database so we can show your plan and billing status inside the app.

Usage and saved content

The product produces small amounts of data as you use it:

• Properties you save to your watchlist
• Searches you save and the alert preferences you set on them
• Notification read/unread state
• Pages you have recently viewed (stored in your browser's local storage so we can show them as “Recently viewed”)

Technical information

Our hosting provider (Vercel) and database provider (Supabase) record standard server logs that include your IP address, browser user agent, and the URLs you request. These logs are used for security, abuse prevention, and debugging. They are typically retained for 30–90 days.

Cookies and similar technologies

We use a small number of first-party cookies and browser storage items:

• Authentication cookies set by Supabase to keep you signed in.
• Preference storage in your browser's local storage to remember your selected state, theme (light/dark), and recently viewed properties.
• Analytics — basic page-view counts via Vercel Analytics. We don't set third-party advertising cookies for retargeting.
• Conversion pixels — if you arrive from a Reddit Ads campaign, the Reddit Pixel may fire a small no-cookie event when you sign up or upgrade so we can measure ad effectiveness. The pixel reports only the event type and (for purchases) the dollar value back to Reddit — never your email, name, or what properties you viewed. You can block it with any standard ad-blocker.

2. How we use your information

• To create and maintain your account
• To deliver the product features you request — saving searches, sending the alert emails you opt into, populating your watchlist
• To process subscription payments and send receipts
• To prevent fraud, abuse, and unauthorized access
• To communicate with you about service changes, security notices, and replies to support requests
• To improve the product (which counties scrape well, which searches return zero matches, where the experience breaks)

We do not sell your personal information to third parties, and we do not use your saved searches or watchlist to target you with advertising.

3. Service providers we share information with

We rely on a handful of well-known providers to operate the service. Each receives only what they need:

• Supabase — database hosting and authentication.
• Vercel — website hosting and content delivery.
• Stripe — subscription billing and card processing.
• Email delivery — transactional and alert emails (e.g. account verification, saved-search match alerts) are sent through a transactional email provider. Marketing newsletters are opt-in only.
• Map and street-view providers — to render maps and street-level imagery on listing pages. When those tiles or images load in your browser, the third party (e.g. Google) sees your IP address.

We may also disclose information when required by law (subpoena, court order, fraud investigation), or when necessary to protect our rights, property, or the safety of users.

4. Email communications

We send three kinds of email:

• Transactional — account verification, password resets, payment receipts. These are required to operate the account and cannot be opted out of while you have an active account.
• Alerts — when one of your saved searches gets a new match, when a property in your watchlist drops in price, or when an auction is approaching. You control these per-search via the “Email on / Email off” toggle on Account → Alert preferences.
• Product updates — occasional notes about new features or coverage. You can unsubscribe at any time from the link in the email.

5. Data retention

We keep account and usage data for as long as your account is active. If you delete your account, we delete your saved searches, watchlist, and notification history within 30 days. Billing records are retained for seven years to comply with tax and accounting law. Anonymized usage analytics may be retained indefinitely.

6. Security

Data is encrypted in transit (HTTPS) and at rest (managed encryption by Supabase). Database access is restricted via row-level security policies and service-role keys are never shipped to the browser. We use industry-standard practices, but no system is perfectly secure — if you become aware of a security issue, please email us at the address below.

7. Your rights

You can, at any time:

• View and edit your saved searches, watchlist, and notification history from your Account page.
• Update your email or password from the Account page.
• Cancel your paid plan from Account → Plan & billing. Cancellation takes effect at the end of the current billing period.
• Request deletion of your account and all associated data by emailing us at contact@deedfinder.io.

California residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of any “sale” of personal information (we do not sell personal information). Email us using the contact below to exercise these rights; we will respond within 45 days.

European Economic Area / United Kingdom (GDPR)

If you access the service from the EEA or UK, you have the rights of access, rectification, erasure, restriction, portability, and objection under GDPR / UK GDPR. The legal bases we rely on are contract performance (operating your account), legitimate interest (security, fraud prevention, product improvement), and consent (marketing emails). The same contact below applies.

8. Children's privacy

DeedFinder is intended for adults. We do not knowingly collect information from children under 13 (or under 16 in the EEA). If you believe a child has signed up, please contact us and we will remove the account.

9. Changes to this policy

We will update this page when our practices change. If a change is material — for example, expanding the categories of data we collect or adding a new third-party processor — we'll email you at the address on file at least 30 days before it takes effect, when feasible. Your continued use of the service after the effective date constitutes acceptance of the new policy.

10. Contact us

Questions, deletion requests, or concerns: email contact@deedfinder.io. Postal mail can be sent to Sovereign Dynamics LLC at the address on our company registration, available on request.