Privacy policy

Last updated Oct 13, 2026.

Asking about your city

When you tell us where your units are, we store:

• your email address and, if you give it, your phone number
• your answers: the city your units are in, your role, how many units you have and how you track lead paint records today
• whether we may call you
• the page you signed up on, the campaign link you came from, and the country your request came from

It is kept in a database at Cloudflare (D1), which also hosts this site. We use it only to contact you about ViolationProof, including a short call if you ticked that box. We do not sell or share it.

Your account

The app keeps what you put in it: your company, the people you invite, your buildings, units, records, photos and notes. It lives in a database and file store at Supabase and is yours: you can download a building’s records file at any time, on any plan. The app and its server functions run at Vercel; sign-in codes, invitations and reminder emails go out through Resend, which sees the name and email address they are sent to. Payments are taken by Lemon Squeezy, which stores your card details; we never see them.

How long we keep it

Your records stay as long as your account exists, because the laws ask for them for years (NYC: ten). Ask us to delete the account and everything in it goes, apart from invoices, which tax law makes us keep. What you tell us about your city is kept until you ask us to delete it.

Analytics

We count visits with Plausible, which uses no cookies and collects no personal data.

Your choices

Reminder emails can be switched off in the app’s Settings at any time; sign-in codes and invitations are sent only when you or your team ask for them. We send no newsletters. To see or delete what we hold about you, email [email protected].