Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you create an account or use the Service, we collect:

• Email address
• Password (stored as a bcrypt hash — we never store plain text passwords)
• Payment information (processed by Stripe — we do not store card numbers on our servers)
• Any other information you voluntarily provide when contacting us

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

• IP address and approximate geographic location
• Browser type and version
• Pages visited and features used within the Service
• Date and time of access
• Referring URL
• Session duration and activity logs

1.3 Property and Contact Data

The Service provides access to publicly available property records and skip-traced contact information sourced from third-party data providers. This data pertains to property owners and is not derived from our users' personal information. We do not sell or share our users' personal data with third parties for marketing purposes.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Process subscription payments and manage billing through Stripe
• Provide, maintain, and improve the Service
• Send transactional emails such as password reset links and account notifications
• Respond to your support requests and communications
• Monitor and analyze usage patterns to improve the Service
• Detect and prevent fraudulent or unauthorized activity
• Comply with legal obligations

We do not use your personal information for targeted advertising and we do not sell your personal data to third parties.

3. Sharing of Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

3.1 Service Providers

We share information with trusted third-party service providers who assist in operating the Service, including:

• Stripe — for payment processing. Stripe's privacy policy is available at stripe.com/privacy
• Resend — for transactional email delivery
• DigitalOcean — for server infrastructure and hosting

These providers are contractually obligated to protect your information and may only use it to provide services to us.

3.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service prior to your information being transferred and becoming subject to a different privacy policy.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you cancel your subscription, we will retain your account data for 90 days to allow for account recovery, after which it will be deleted.

We retain billing records and transaction history as required by applicable law, typically for a period of seven (7) years.

You may request deletion of your account and personal data at any time by contacting us at marketing@woodbullscapital.com. We will process deletion requests within 30 days, subject to any legal retention obligations.

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

• HTTPS encryption for all data transmitted between your browser and our servers
• Bcrypt hashing for all stored passwords
• Secure token-based authentication
• Regular security reviews of our infrastructure

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain your session and improve your experience on the Service. We use:

• Session cookies — to keep you logged in during your session
• Analytics cookies — to understand how users interact with the Service (aggregate, non-personal data)

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of the Service, including the login functionality.

7. California Consumer Privacy Act (CCPA)

If you are a resident of California, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA). This section describes those rights and how to exercise them.

7.1 Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information:

• Identifiers — email address, IP address, account credentials
• Commercial information — subscription records, transaction history, credits usage
• Internet or electronic network activity — pages visited, features used, session logs
• Geolocation data — approximate location derived from IP address

We do not collect sensitive personal information as defined by the CCPA, such as Social Security numbers, financial account numbers, precise geolocation, or biometric data.

7.2 How We Use This Information

We use the personal information listed above for the business purposes described in Section 2 of this Privacy Policy. We do not sell personal information and we do not share personal information with third parties for cross-context behavioral advertising.

7.3 Your Rights Under CCPA

As a California resident, you have the right to:

• Right to Know — request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it
• Right to Delete — request deletion of personal information we have collected about you, subject to certain exceptions
• Right to Correct — request correction of inaccurate personal information we maintain about you
• Right to Opt-Out — we do not sell personal information, so this right does not apply. However, you may contact us to confirm this at any time
• Right to Non-Discrimination — we will not discriminate against you for exercising any of your CCPA rights

7.4 How to Exercise Your CCPA Rights

To exercise your rights under CCPA, please submit a verifiable consumer request to:

We will respond to verifiable consumer requests within 45 days. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We may need to verify your identity before processing your request.

You may designate an authorized agent to make a request on your behalf. We will require written proof of the agent's permission and may verify your identity directly.

8. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information. If you believe we have inadvertently collected information from a minor, please contact us at marketing@woodbullscapital.com.

9. Third-Party Links

The Service may contain links to third-party websites, including property listing sites and mapping services. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last updated' date. For material changes, we will provide additional notice such as an email notification.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For CCPA-specific requests, please include 'CCPA Request' in the subject line of your email.