This Privacy Policy describes how Zoning Assist LLC ("Zoning Assist," "we," "us," or "our"), an Arizona limited liability company, collects, uses, stores, shares, and protects information when you use our zoning feasibility platform accessible at zoningassist.com (the "Service").
This Privacy Policy is incorporated into and forms part of our Terms of Service and Subscription & Billing Agreement. By using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.
Zoning Assist LLC is the data controller for personal information collected through the Service.
| Category | Specific Data Elements | How Collected |
|---|---|---|
| Account Information | Full name, professional email address, company name, job title/profession type, phone number (optional) | Account registration form |
| Billing Information | Billing name, billing address, payment method type; full payment card data is processed by Stripe and not stored by Zoning Assist | Subscription checkout; processed via Stripe |
| Property Search Queries | Property addresses submitted for zoning lookup, geographic coordinates, parcel identifiers | Report generation requests |
| Profession Data | Professional role (developer, investor, architect, attorney, planner, broker, etc.), intended use type (residential, commercial, industrial), organization type | Account setup and optional survey |
| Communications | Support requests, feedback submissions, email correspondence, chat transcripts | Support channels and direct email |
| Category | Specific Data Elements |
|---|---|
| Usage Data | Pages visited, features used, report IDs generated, search history, timestamps, session duration, click patterns, navigation paths |
| Device and Technical Data | Browser type and version, operating system, device type, screen resolution, IP address, referring URL, language settings |
| API Usage Data | API keys used, endpoints called, request volume, rate limit consumption, API response times |
| Log Data | Server access logs including IP addresses, timestamps, request types, response codes, bytes transferred |
| Cookie and Tracking Data | Session identifiers, authentication tokens, preference settings. See Section 8 for full cookie details. |
We do not purchase personal data from data brokers. We may receive limited information from:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Providing zoning lookup and report generation services | Account info, property queries, usage data | Contract performance |
| Processing payments and managing subscriptions | Billing info, account info | Contract performance |
| Authentication and account security | Account info, device data, IP address | Contract performance / Legitimate interest |
| Improving Service accuracy and expanding coverage | Property queries, usage data (aggregated/anonymized) | Legitimate interest |
| Improving AI models and analysis quality | Aggregated, de-identified report output patterns (never re-associated with individual users) | Legitimate interest |
| Detecting fraud, abuse, and unauthorized access | Usage data, device data, IP addresses | Legitimate interest |
| Customer support and communications | Account info, communications, usage context | Contract performance |
| Sending required service notices (billing, changes to Terms) | Email address | Contract performance / Legal obligation |
| Sending product updates and marketing (with opt-in) | Email address, profession type | Consent |
| Aggregate analytics and business intelligence | Anonymized usage data, geographic query patterns | Legitimate interest |
| Enforcing Terms of Service | Usage data, account info, IP data | Legitimate interest / Contract performance |
| Complying with legal obligations | As required by applicable law | Legal obligation |
Property addresses and coordinates you submit are used to generate your requested reports and to improve Service coverage (e.g., identifying frequently queried jurisdictions not yet in our coverage area). Query data is stored in association with your account for the duration described in Section 6 (Data Retention).
We do NOT resell individual property query histories to third parties. Aggregated, anonymized geographic query patterns (e.g., "Arizona metro areas are most commonly queried") may be referenced in internal analytics and marketing materials.
Your profession type and intended use information helps us customize the Service for your professional context, prioritize feature development, and send relevant product updates. This information is never sold or shared with third parties for marketing purposes.
We share data with trusted service providers who assist us in operating the Service. All service providers are bound by data processing agreements and are prohibited from using your data for their own purposes:
| Service Provider Category | Data Shared | Purpose |
|---|---|---|
| Cloud Hosting (AWS / Google Cloud Platform) | All Service data at rest and in transit | Infrastructure and database hosting; servers located in the United States |
| Payment Processing — Stripe, Inc. | Billing name, address, payment method; card data processed and stored by Stripe directly | Subscription payment processing; Stripe's privacy policy governs Stripe's data use |
| Email Delivery (SendGrid / Postmark) | Email address, message content | Transactional and notification emails |
| AI Analysis — Anthropic, PBC (Claude API) | Property addresses and coordinates submitted for report generation; no account identifiers, names, or email addresses are transmitted to Anthropic | AI-powered analysis of zoning data, feasibility scoring, and report generation. Anthropic's API Terms of Service prohibit Anthropic from training models on API inputs without explicit opt-in; inputs are not used to train Anthropic's models by default. |
| Geocoding — Google Maps API | Property address strings submitted for geocoding | Converting street addresses to geographic coordinates (lat/lon) for GIS data lookup |
| CDN & DDoS Protection — Cloudflare, Inc. | IP addresses, HTTP request data, cookies for bot detection | Content delivery, DDoS mitigation, and security; Cloudflare processes this data as a service processor under Cloudflare's privacy policy |
| Analytics (first-party only) | Anonymized usage data; no third-party analytics platforms | Service performance monitoring and improvement |
| Error Monitoring (Sentry) | Technical error logs, stack traces (no PII included in error reports) | Bug detection and resolution |
When you submit a property address for a zoning report, the address coordinates are transmitted to third-party government GIS APIs (municipal, county, state, and federal) to retrieve zoning, parcel, hazard, and other data. This is a necessary technical function of the Service. By using the Service, you consent to your queried addresses being transmitted to applicable government data endpoints. Government agencies receive only the geographic query necessary to return data; they do not receive your name, email, or account information.
We may disclose your information when we reasonably believe disclosure is required or permitted by law, including:
Where legally permitted, we will notify you before disclosing your information pursuant to legal process.
In the event of a merger, acquisition, asset sale, financing, or corporate reorganization involving Zoning Assist LLC, your information may be transferred as part of that transaction. We will provide at least 30 days' notice via email before your personal data becomes subject to a materially different privacy policy, and you will have the right to delete your account before the transfer takes effect.
We may share aggregated, anonymized, de-identified data that cannot reasonably be used to identify any individual — such as city-level query volume statistics or industry-level usage patterns — with business partners, in press releases, or in published research. Such data does not constitute personal information under applicable privacy law.
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account profile information | Duration of subscription + 2 years after account closure | Service delivery; dispute resolution window |
| Property search queries and report history | Duration of subscription + 90 days after account closure | Report access and re-download capability |
| Generated report content | Duration of subscription + 90 days after account closure, then permanently deleted | User access; then purged to minimize data footprint |
| Billing records and invoices | 7 years from transaction date | Tax law and accounting requirements |
| Payment processing records (Stripe) | Per Stripe's data retention policy | Payment dispute and chargeback handling |
| Server access logs | 90 days from creation | Security monitoring; then deleted |
| Support communications | 3 years from last interaction | Support continuity and dispute resolution |
| API usage logs | 180 days | Rate limiting enforcement and abuse detection |
| Backup copies | Up to 30 days beyond primary deletion | Disaster recovery; purged on rolling basis |
Upon account deletion at your request, we will initiate deletion of your personal information within 30 days, subject to the retention periods above and our legal retention obligations. Billing records retained for tax purposes are stored in isolated systems without association to active account data.
We implement industry-standard security controls to protect your information, including:
No system is 100% secure. Despite our best efforts, we cannot guarantee the absolute security of data transmitted over the internet or stored on our systems. You provide information and use the Service at your own risk with respect to security threats that are beyond our reasonable control.
In the event of a data security breach that affects your personal information, Zoning Assist will notify affected users as follows:
Breach notifications will include: the nature of the breach, the categories of data affected, the likely consequences, the measures taken or proposed, and contact information for further inquiries.
You are responsible for maintaining the security of your account credentials, using a strong unique password, and logging out of the Service on shared devices. Do not share your password or API keys with anyone.
Cookies are small text files placed on your device by websites you visit. We also use similar technologies such as local storage and session storage. These technologies serve important functions including authentication, security, and service operation.
| Cookie Type | Purpose | Duration | Can You Opt Out? |
|---|---|---|---|
| Essential / Strictly Necessary | Session management, authentication tokens, security (CSRF protection), keeping you logged in | Session or up to 30 days | No — required for Service to function |
| Functional / Preference | Remembering your preferences, UI settings, language choices | Up to 1 year | Yes — via browser settings (may affect Service functionality) |
| Analytics (First-Party) | Understanding how users navigate and use the Service; identifying errors and usability issues. No third-party advertising analytics. | Up to 2 years | Yes — via cookie preference settings |
We do NOT use:
You can control cookie preferences through your browser settings. Most browsers allow you to block, delete, or restrict cookies. Disabling essential cookies will prevent you from logging into the Service. Instructions for managing cookies in major browsers:
Regardless of where you are located, you have the following rights with respect to your personal information held by Zoning Assist:
| Right | Description | How to Exercise |
|---|---|---|
| Access | Request a copy of the personal information we hold about you | Email [email protected] |
| Correction / Rectification | Request correction of inaccurate or incomplete personal data | Account settings or email |
| Deletion / Erasure | Request deletion of your personal data, subject to legal retention requirements | Account settings → Delete Account, or email |
| Data Portability | Request your personal data in a structured, machine-readable format (JSON or CSV) | Email [email protected] |
| Opt-Out of Marketing | Unsubscribe from marketing and promotional communications at any time | Unsubscribe link in emails or account settings |
| Restriction of Processing | Request that we restrict processing of your data in certain circumstances | Email [email protected] |
| Objection | Object to processing based on legitimate interest grounds | Email [email protected] |
We will respond to all verifiable privacy requests within 30 calendar days (or as required by applicable law). We may need to verify your identity before fulfilling a request. We will not discriminate against you for exercising your privacy rights.
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights regarding your personal information.
In the preceding 12 months, Zoning Assist has collected the following categories of personal information as defined under the CCPA:
California residents have the right to:
To submit a CCPA request, email [email protected] with the subject line "CCPA Request." You may also designate an authorized agent to make a request on your behalf.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and applicable local data protection laws apply to our processing of your personal data.
We process your personal data on the following legal bases:
Zoning Assist is based in the United States. If you access the Service from the EEA, your personal data will be transferred to and processed in the United States. We provide appropriate safeguards for such transfers through Standard Contractual Clauses (SCCs) approved by the European Commission, or other appropriate transfer mechanisms recognized under applicable law.
For GDPR-related inquiries, you may contact us at [email protected]. You also have the right to lodge a complaint with your local data protection supervisory authority.
The Service is designed for and intended to be used by business professionals 18 years of age and older. We do not knowingly collect personal information from individuals under the age of 18. The Service is not directed to minors and does not include any features or content designed for children.
If we become aware that we have inadvertently collected personal information from a person under 18, we will promptly delete that information from our systems. If you believe we may have collected information from a minor, please contact us at [email protected].
The Service incorporates publicly available data from the following government sources. These sources are used to generate report content and are not data partners in the commercial sense:
These sources have their own terms of use and data policies. Our use of publicly available government data is consistent with applicable open data licenses and public records laws. Zoning Assist does not represent or imply endorsement by any government agency.
You may, at any time, exercise the following rights with respect to your personal information held by Zoning Assist:
Verification. To protect your account, we will verify your identity before fulfilling any access, correction, or deletion request. Verification may include confirmation from your account email and (for sensitive requests) additional knowledge-based verification.
Authorized agents. California residents may use an authorized agent to submit a request, subject to written authorization and identity verification.
Response timeline. We respond to access and deletion requests within 30 days (45 days when extension is justified, with notice). California residents have additional rights under the CCPA/CPRA; EU/UK residents have additional rights under GDPR/UK GDPR.
Zoning Assist is headquartered in Arizona, United States. Your personal information is stored and processed on servers located in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have different data protection laws than your home country.
We take appropriate contractual and technical safeguards to protect your personal data in accordance with applicable law when transferring data internationally.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify registered users of material changes via:
For non-material changes (such as clarifications or formatting updates), we may update the policy without individual notice — the "Last Updated" date at the top of this page will always reflect the current version. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
For privacy questions, requests, or complaints, please contact us:
| Contact Type | |
|---|---|
| Privacy Requests (access, deletion, correction) | [email protected] |
| General Support | [email protected] |
| Legal Notices | [email protected] |
| CCPA/GDPR Specific Requests | [email protected] — Subject: "Data Rights Request" |
Contact: [email protected]
We will respond to all privacy requests within 30 days (or sooner as required by applicable law).