Privacy Policy

We collect personal information you provide directly and data generated through your use of LotFoundry:

• Account Identifiers: Name, email address, encrypted credentials, or third-party authentication tokens (Sign in with Google / Apple), and role designation (homeowner or builder).
• Property & Feasibility Inputs: Searched property addresses, geographical coordinates (latitude/longitude), custom parcel dimensions, setback adjustments, and ADU configurations you design or save.
• Builder Profile Information: Business name, contractor license details, phone numbers, service regions, and trade specializations.
• Marketplace Connection Data: Direct contact requests submitted by homeowners to connect with matched builders.
• User Photos & Visual Content: Optional photographs of your parcel or existing structures uploaded for AI architectural style matching.
• Billing & Transaction Records: Transaction IDs, purchase timestamps, certificate identifiers, and credit balances provided by Stripe, Google Play Billing, or Apple App Store (we never store raw payment card numbers on our servers).
• Technical Telemetry & Security Logs: IP address (truncated for analytics), user agent, device characteristics, request timestamps, and tamper-evident legal consent receipts (recording accepted terms and privacy policy versions).

We process personal information to: (a) provide the 3D Feasibility Studio and calculate zoning and financial estimates; (b) authenticate your identity and safeguard your account; (c) generate and deliver Certificates of Feasibility and AI Project Briefs; (d) facilitate homeowner-directed lead unlocks for builders; (e) process payments and prevent fraud; (f) respond to support inquiries; and (g) comply with legal and regulatory obligations.

We do not sell personal information for monetary or valuable consideration, nor do we share personal information for cross-context behavioral advertising. Homeowner contact information is disclosed to a builder only upon the homeowner’s affirmative, intentional direction.

To operate the Service, we share data with trusted third-party service providers bound by contractual confidentiality and data protection standards:

• Cloud Infrastructure: Hosted on Google Cloud Platform / Firebase (Firebase Hosting, Cloud Functions, Firebase Authentication, and Cloud Firestore).
• Geocoding & Spatial Data: Property searches use Google Maps Platform, Regrid (Loveland Technologies parcel boundaries), the US Census Bureau Geocoder, USA Structures (federal building footprints), and municipal GIS open data portals.
• Payment Gateways: Digital web purchases use Stripe. Mobile purchases use Google Play Billing or Apple In-App Purchase.
• Artificial Intelligence (OpenAI): We use OpenAI API to process both: (1) optional user-uploaded photos to generate architectural style-match imagery, and (2) parcel metrics, zoning constraints, and feasibility parameters to synthesize the narrative AI Project Brief and risk breakdown included with Certificates. OpenAI’s commercial API terms guarantee that user inputs are not used to train AI models.
• Address & Zoning Interpretation (TypeSafe): We use TypeSafe for narrow multiple-choice judgments, not generated text. When you search for an address, the text you typed and the candidate matches returned by our geocoding provider may be sent to TypeSafe to pick the address you meant. For signed-in parcel lookups that return zoning data, the zoning designation and description, with the parcel’s city, county, and state (not its street address), may be sent to TypeSafe to check how we classify the zoning district. Neither request includes your name, email, or account details.
• Usage and Conversion Measurement: Google Analytics 4 and Google Ads measure product usage and ad-driven purchases only with your affirmative consent (see Section 7).
• Aggregate Traffic Measurement: Cloudflare Web Analytics counts page views and referrers. It is cookieless, stores nothing on your device, does not fingerprint visitors, and performs no cross-site tracking (see Section 7).

When you use the AI Style-Match feature, your photo is processed locally in your browser to downscale the image and strip all embedded EXIF, GPS location, and camera metadata prior to transmission. The prepared image is sent directly via encrypted API to OpenAI to produce a concept visualization. LotFoundry does not store raw photos on our database servers.

When generating a Certificate of Feasibility, project feasibility parameters (lot size, calculated setbacks, jurisdiction, and target ADU dimensions) are transmitted to OpenAI to generate the Project Brief. Generating AI briefs or photos is never required to browse the studio.

Homeowner contact details (name, email, phone, and property address) are held in confidence and are never displayed publicly. Builders see only an anonymized, redacted preview (general neighborhood, lot size, and project scope) until a homeowner affirmatively submits a connection request.

When a homeowner submits a connection request and a builder unlocks the lead, the homeowner’s contact information is disclosed solely at the consumer’s express direction, constituting an exempt consumer-directed disclosure under applicable state privacy laws (including California Civil Code § 1798.140(ad)(1)). Builders act as independent data controllers upon unlocking a lead.

We retain personal information for as long as your account remains active. You may delete your account at any time within your Account Settings or via our public Delete Account portal (accessible without installing our mobile application).

Upon deletion, your active profile, saved scenario studies, and contact records are permanently removed from active product databases. We retain transactional, accounting, tax, dispute, and fraud records for up to seven (7) years as required by applicable commercial and financial regulations, in de-identified or pseudonymized format.

We use strictly necessary session cookies and Firebase Authentication state to maintain your login session and persist local studio preferences. We do not use behavioral retargeting. Optional Google Ads conversion measurement may use advertising cookies after you opt in, as described below.

Google Analytics 4 and Google Ads conversion measurement (Consent Gated): We load these Google tags only if you affirmatively opt in. They use first-party measurement cookies (including _ga, _ga_*, and _gcl_*) to measure site usage, ad-driven visits, and purchases. Google Ads measurement receives a purchase value, currency, and transaction identifier when a consented visitor completes a purchase. We do not send your address, email, or feasibility results to Google. Advertising personalization stays disabled. If you decline or take no action, no Google measurement scripts load or set cookies.

Cloudflare Web Analytics (Not Consent Gated): Separately, we use Cloudflare Web Analytics to count page views and referrers. It is not covered by the control below because it never stores anything on your device: no cookies, no local storage, and no device fingerprinting. It cannot follow you to other sites, and it collects none of the interaction detail GA4 does. Consent gates exist to protect access to your device’s storage, and this measurement never touches it.

You can change your Google measurement consent at any time below:

The Service is strictly designed and intended for adults aged 18 and older. We do not knowingly collect, maintain, or profile personal information from minors under the age of 18, and the Service is rated 18+ in mobile application stores.

In accordance with the Texas App Store Accountability Act (HB 18), California AB 1043, and the Amended COPPA Rule (2026), we respect platform age signals, prohibit targeted marketing to minors, and do not knowingly collect data from children under 13. If we discover that personal data from a child under 13 has been inadvertently collected, it will be deleted immediately.

Depending on your state of residence (including California, Virginia, Colorado, Connecticut, Texas, Utah, and Oregon), you may have the following statutory rights:

• The right to know and access personal information we hold about you.
• The right to request deletion of your personal information.
• The right to correct inaccurate personal data.
• The right to receive a portable copy of your data.
• The right to opt out of automated profiling or targeted advertising (which we do not conduct).
• The right to freedom from discrimination for exercising your privacy rights.

Submitting Requests & Appeals: To exercise any privacy right, email privacy@lotfoundry.net. We will verify your identity and respond within forty-five (45) days. If your request is denied, you have the right to appeal our decision by emailing privacy@lotfoundry.net with the subject line “Privacy Appeal”.

We may update this Privacy Policy periodically to reflect changes in our legal obligations or system architecture. We will post revised versions with an updated “Last updated” date. For material changes, we will provide additional notice on our website or via email.

For privacy inquiries or data requests, contact our Privacy Team at: privacy@lotfoundry.net. For general support: support@lotfoundry.net.

LotFoundry LLC · Legal & Privacy Compliance