Privacy Policy

1. Information we collect

Depending on how you use the Service, we collect:

• Account and profile information: first, middle, and last name; email address; account identifiers; the password you submit long enough to create or verify a one-way password hash; hashed verification and password-reset tokens and their expiration times; email-verification status; failed-login and lockout information; and your acceptance of required terms and disclaimers.
• Search and location information: addresses you enter, map coordinates, browser-provided precise location when you choose to allow it, search dates, search radius and filters, saved settings, results, and search history.
• Purchase and billing information: selected credit package, transaction amount and date, payment status, search-credit balance, billing name and address submitted to Stripe, and Stripe customer and payment-intent identifiers. Stripe, not Safe Living Search, collects and processes complete payment-card details and receives the billing information entered at checkout.
• Communications and delivery records: your name, email address, message, service emails sent to you, internal account-creation notifications, delivery status, delivery attempts, and delivery errors.
• Device, session, and usage information: IP address, browser and device information (including user-agent), session identifiers, login and last-seen times, request and error logs, and information used to prevent abuse and keep the Service reliable.
• Directory and resource information: professional or organizational names, titles, descriptions, images, addresses, phone numbers, email addresses, websites, and service categories displayed in our resource directories.

Please do not provide passwords, full payment-card numbers, medical information, government identifiers, criminal-history details, or other sensitive information in contact messages.

2. How we collect information

We collect information:

• directly from you when you create an account, search, purchase credits, change settings, or contact us;
• automatically from your browser or device when you use the Service;
• from Stripe about the status of payment transactions; and
• from Google Maps Platform and public, licensed, or directly provided directory and resource sources.

3. How we use information

• Create, verify, authenticate, support, and secure accounts and sessions.
• Process searches, display map results, save history when enabled, remember preferences, and manage search credits.
• Process purchases, confirm payment, maintain transaction records, and prevent fraud.
• Send verification, password-reset, security, transaction, support, and other service-related messages.
• Create internal operational notifications when an account is registered and maintain a limited delivery queue for email reliability and troubleshooting.
• Respond to questions, requests, feedback, and reports of missing or inaccurate locations.
• Publish and maintain professional and organizational resource-directory listings.
• Monitor, debug, maintain, protect, and improve the Service and enforce our Terms of Service.
• Comply with law, legal process, and our accounting, tax, and recordkeeping obligations.

4. Location information and Google Maps

You may search an address or ask your browser to provide your current location. Precise location is considered sensitive personal information under some laws. Browser location access is optional and occurs only after you grant permission. You can revoke that permission through your browser or device settings, although current-location features will then be unavailable. Search locations and resulting map data may be saved to your account history when Save search history is enabled. This account setting is separate from your browser’s location permission.

Because the Service focuses on residency-restriction research, an address, location, or search pattern could permit inferences about a person’s legal circumstances. We do not ask you to identify the person associated with a search. Do not search or submit another person’s precise location unless you have authority and a lawful reason to do so.

Safe Living Search uses Google Maps Platform, including maps, geocoding, and places functionality. Google may receive search terms, coordinates, IP address, device information, and usage data when its services load or are used, and may use cookies or similar technologies under its own policies. Your use of Google Maps features is subject to the Google Maps/Google Earth Additional Terms of Service and the Google Privacy Policy .

5. How we disclose information

We may disclose the categories described above to:

• Service providers: hosting, infrastructure, database, email-delivery, security, support, and other vendors that process information for us under appropriate restrictions.
• Stripe: account email, billing name and address, purchase details, payment-card information, and transaction identifiers needed to create and fulfill payments. Stripe handles payment information under its Privacy Policy .
• Google: search, map, location, device, and usage information needed to provide Google Maps Platform features.
• YouTube: IP address, device, referrer, cookie or similar-technology, and video-interaction information when you load or play the embedded demonstration. We use YouTube’s privacy-enhanced embed mode, but Google’s Privacy Policy still governs its processing.
• Authorities and other parties: when reasonably necessary to comply with law or legal process; protect rights, safety, and security; investigate fraud or abuse; or enforce our agreements.
• Transaction participants: in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business, subject to applicable law.

We do not sell personal information for money. We also do not use or disclose personal information for cross-context behavioral advertising as those terms are defined by applicable U.S. state privacy laws.

6. Cookies and similar technologies

We use an essential, secure session cookie to keep you signed in and protect your account. Google Maps, YouTube, and Stripe components may set or access cookies, local storage, or similar device information as described in their policies. We do not deploy cookies for our own targeted advertising. YouTube’s privacy-enhanced mode limits personalization but does not eliminate all data processing by Google. Blocking essential cookies may prevent account features from working. Browser privacy signals are not needed to opt out of a sale or targeted-advertising practice because we do not engage in those practices.

7. Data retention

We retain personal information only for as long as reasonably needed for the purposes described above. Account information and saved settings are generally retained while your account is active. Saved search history remains until you delete it or your account, subject to the exceptions below.

Save-history controls: saving search history is enabled by default. In Account → Search history, you can turn off Save search history for your account. We check this preference before saving new history. Turning it off does not delete existing history. Turning it back on allows future searches to be saved.

Deleting saved searches: use a search’s Remove button or Clear all search history in Account → Search history. After successful confirmation and deletion, the selected saved searches, their saved results, and related result caches are removed from our primary database. Clear all includes older searches not currently displayed and history previously hidden using the former removal feature. Deleted history cannot be restored through the Service. Clearing history does not turn saving off; disable Save search history as well if you do not want future searches saved.

Records that remain: disabling or deleting saved history does not stop the processing needed to perform searches or erase all information associated with them. Search-operation records, including search coordinates, dates, radius, and identifiers, and credit-ledger records remain for credit accounting and to prevent duplicate charges when requests are retried. These controls do not delete your account, change your credits, or erase security logs, backups, or records held independently by service providers such as Google or Stripe. You can request broader deletion using our Privacy Choices & Data Rights process.

Login sessions last up to two hours and are removed when they expire and are cleaned up, when you sign out or revoke them, or when you change or reset your password. Expired session records may remain until a later session cleanup or account deletion, but they cannot be used to access the Service. Short-lived rate-limiting records containing IP addresses generally expire within minutes.

Copies of sent service and contact emails in our delivery queue are automatically deleted approximately seven days after delivery. Permanently failed delivery records are deleted approximately 30 days after creation. Copies delivered to recipient mailboxes may remain under the recipient’s email-retention practices. Payment, credit-ledger, fraud-prevention, tax, accounting, support, and security records are retained based on operational and legal needs. Account deletion is designed to remove linked account, session, search, payment, and credit-ledger records from our primary database. Independently submitted contact messages, recipient mailbox copies, Stripe records, security logs, and backups are not necessarily deleted at the same time and may remain where required or permitted by law.

Deletion may not be immediate in encrypted backups, and we may retain information where required by law, needed to resolve disputes or enforce agreements, or otherwise permitted by law. Deidentified data may be retained without a time limit.

8. Security and data-protection practices

We use risk-based technical and organizational safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure. Safeguards implemented in the Service include:

• Credential protection: passwords are processed with an industry-standard, salted, adaptive one-way password-hashing function and are not stored in readable form.
• Transport protection: production traffic is redirected to HTTPS, and HTTP Strict Transport Security is enabled to support encrypted transmission in transit.
• Session security: authentication uses signed, short-lived session tokens in cookies configured as Secure, HttpOnly, and SameSite Strict. Sessions expire after approximately two hours and can be revoked individually or all at once.
• Account protection: email verification, cryptographically generated verification and password-reset tokens, limited token validity, failed-login lockouts, and password-reset session revocation help prevent unauthorized access.
• Abuse prevention: rate limits restrict repeated login, password-reset, verification, contact, and session-validation requests. Security-related session records include IP address and user-agent information.
• Access and input controls: account, payment, search, and history endpoints require authentication where appropriate, scope records to the signed-in user, and validate submitted values and transaction identifiers.
• Payment separation: Stripe collects and processes complete payment-card details; Safe Living Search stores only the identifiers and transaction records needed to confirm purchases and manage credits.
• Data minimization and disposal: we limit requested information, restrict contact-message length, use short-lived rate-limit and session data, and apply the retention and deletion practices described above.
• Operational protection: production errors are returned without internal exception details, request tracing supports investigation, service health is monitored, and browser security headers restrict framing, content-type interpretation, referrer information, and access to device capabilities.

No security measure, Internet transmission, or storage system is completely secure, so we cannot guarantee absolute security. We review safeguards in light of the nature of the information and reasonably available protections and may update them as risks and the Service change.

If we discover a data-security incident, we will investigate, take reasonable containment and remediation steps, and notify affected people or authorities when required by applicable law. You are responsible for using a unique password, protecting your account and email, signing out of devices you do not control, and promptly reporting suspected unauthorized access to [email protected].

9. Your choices and privacy rights

You may review or update profile information and settings, remove searches from your visible history, and manage active sessions using available account controls. To delete your account or request access to, correction of, or deletion of personal information, follow the process on our Privacy Choices & Data Rights page.

Depending on where you live and subject to legal exceptions, you may also have rights to obtain a portable copy, learn the categories or specific pieces we process and disclose, restrict or opt out of certain processing, withdraw consent, or appeal our decision on a request. We will not discriminate against you for exercising an applicable privacy right.

Send a request to [email protected] with “Privacy Request” in the subject line. We may need to verify your identity and authority before responding. An authorized agent may make a request where permitted by law, but we may require proof of authority and direct identity verification. To appeal a denied request, reply to our decision and write “Privacy Appeal” in the subject line.

10. Additional U.S. state privacy disclosures

This section supplements the disclosures above for residents of states with comprehensive consumer privacy laws, to the extent those laws apply to Safe Living Search. During the preceding 12 months, we collected the categories described in Section 1, which may correspond to statutory categories such as identifiers and customer records, commercial information, Internet or other electronic-network activity, geolocation data, communication contents, professional information, and inferences arising from search activity. We collected these categories from the sources in Section 2, used them for the purposes in Sections 3 and 4, and disclosed them to the recipient categories in Section 5.

• Sensitive information: account login credentials and precise geolocation may be legally classified as sensitive. Search context may also reveal sensitive circumstances. We use this information only for the requested Service features, authentication, security, support, recordkeeping, and other purposes permitted by law—not to infer characteristics for advertising.
• Sale, sharing, and targeted advertising: we have not sold personal information for money or used or disclosed it for cross-context behavioral or targeted advertising. We do not knowingly sell or share the personal information of anyone under 16 for those purposes.
• Profiling and significant decisions: the Service calculates distances, organizes search results, and applies user-selected filters, but we do not use personal information to profile you in furtherance of decisions producing legal or similarly significant effects, such as decisions about housing, employment, credit, or insurance eligibility.
• Complimentary credits: search credits provided when a user creates an account or through daily balance replenishment are intended to make Service features available without a purchase. They are not conditioned on consent to sell or share personal information, targeted advertising, or waiver of a privacy right.
• Privacy signals: because we do not sell or share personal information or process it for targeted advertising, no opt-out is presently required for those activities. If our practices change, we will provide required controls and recognize legally required browser-based opt-out signals.

Your applicable state rights and the request and appeal process are described in Section 9.

11. Children’s privacy

Safe Living Search is intended only for people age 18 or older and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it as appropriate.

12. U.S. operation and external links

The Service is operated in the United States. If you access it from another country, your information may be processed in the United States, where privacy laws may differ. The Service may link to websites or services we do not control; their privacy practices are governed by their own notices.

13. Changes to this policy

We may update this Privacy Policy to reflect changes to the Service, our practices, or the law. We will post the revised policy and update the date above. If a change materially affects how we use previously collected information, we will provide additional notice or obtain consent when required by law.