LandMatch ("we", "us", "our") operates the LandMatch web application. This policy describes how we collect, use, and protect your information.
Information We Collect
When you create an account, we collect:
- Account information: your name, email address, and a securely hashed password.
- Search activity: your search queries, saved properties, and chat conversations to provide and improve our service.
- Usage data: pages viewed, features used, and property detail views to manage your account and service access.
- Payment information: if you subscribe, payment is processed by Stripe. We store your Stripe customer ID and subscription status but never see or store your credit card number.
How We Use Your Information
- To provide property search results and personalized recommendations.
- To manage your account, saved properties, and subscription.
- To send transactional emails (account verification, password resets, subscription confirmations).
- To improve our service and understand how users interact with our data layers.
We do not sell your personal information. We do not send marketing emails unless you opt in.
Third-Party Services
- Stripe processes payments. Their privacy policy is at stripe.com/privacy.
- Resend delivers transactional emails (verification, password reset).
- Plausible Analytics collects anonymous, cookie-free website analytics. No personal data is collected. See plausible.io/data-policy.
- DigitalOcean hosts our servers and database infrastructure.
Cookies
We use essential cookies only:
- Session cookie: keeps you logged in.
- CSRF token: protects against cross-site request forgery.
We do not use tracking cookies or third-party advertising cookies. Plausible Analytics is cookie-free.
Data Security
Your password is hashed using PBKDF2-SHA256 and never stored in plain text. All connections to our servers use HTTPS encryption. Our database is hosted on DigitalOcean's managed PostgreSQL service with encrypted storage.
Data Retention
We retain your account data and search history for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymized, aggregated usage statistics may be retained indefinitely.
Your Rights
You may:
- Access, update, or delete your account information at any time through your account settings.
- Request a copy of your data by emailing us.
- Delete your account by contacting us.
California Residents (CCPA)
If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.
Changes to This Policy
We may update this policy from time to time. We will notify registered users of material changes via email.
Contact
Questions about this policy? Email us at [email protected].