Privacy Policy

In connection with the User's access to and use of the Service, the Company collects the following categories of personal information: (i) the electronic mail address provided by the User for the purpose of magic-link authentication, which serves as the unique identifier for the User's account; (ii) the User's Internet Protocol address, which is collected and processed transiently for the purposes of rate limiting, fraud prevention, and security logging; (iii) account activity records, including identifiers of leads that the User has unlocked, the User's subscription tier, and the timestamps of such activity, which are retained for the purpose of enforcing the free-tier unlock cap and providing billing transparency; (iv) payment information, which is collected and processed exclusively by Stripe, Inc., such that the Company does not store complete payment card numbers and receives only truncated identifiers (such as the last four digits of the payment card and the card brand) for the purpose of issuing receipts; and (v) a single session cookie issued by Auth.js for the purpose of maintaining the User's authenticated session, which is marked HttpOnly, Secure, and SameSite=Lax.

The Company does not track Users across third-party websites or applications. The Company does not employ advertising pixels, behavioral profiling cookies, third-party analytics software development kits, device fingerprinting, or precise geolocation technologies. The Company does not sell, rent, or otherwise commercialize personal information to advertisers, data brokers, or any other third party for marketing or profiling purposes.

Personal information collected pursuant to this Policy is used solely for the following purposes: to authenticate the User and to validate the User's identity in connection with sign-in requests; to process subscription payments and issue receipts through the Company's payment processor; to enforce rate limits and the free-tier unlock cap and to detect and prevent abuse of the Service; to deliver and personalize the Service's functionality, including rendering the map dashboard and lead detail views; to provide transactional electronic mail communications relating to the User's account, including magic-link authentication messages and billing notifications; and to compile aggregated, de-identified usage statistics for the purpose of improving the Service.

In order to operate and deliver the Service, the Company engages a limited number of third-party service providers to perform discrete operational functions on the Company's behalf. Such providers fall within the following categories: hosting and content-delivery providers, which receive request metadata and Internet Protocol addresses for the purpose of serving Service content; managed database service providers, which store application data on encrypted infrastructure; transactional electronic mail providers, which receive the User's electronic mail address and authentication uniform resource locators for the purpose of dispatching magic-link messages; rate-limiting and abuse-prevention providers, which receive hashed User identifiers and request counters for the purpose of enforcing usage limits; and mapping-service providers, which receive Internet Protocol addresses and browser metadata for the purpose of delivering map tiles. Subscription payments are processed exclusively by Stripe, Inc., which receives the User's payment method and billing electronic mail address solely for the purpose of completing transactions; the Company does not store complete payment card information. Each service provider engaged by the Company is bound by its own published privacy policy and by contractual data-processing obligations requiring the provider to maintain appropriate technical and organizational safeguards and to process personal information solely in accordance with the Company's instructions. A current list of the Company's specific subprocessors is available upon written request to hello@motivatedfinder.com.

The property owner names, mailing addresses, parcel characteristics, and related attributes displayed within the Service are sourced from public records published by the Harris County Appraisal District and other governmental authorities and do not constitute personal information collected from Users for purposes of this Policy. In the event that an individual whose information appears in the Company's database from such public sources wishes to discuss the correction, suppression, or removal of such information, the individual may submit a written request to hello@motivatedfinder.com and the Company will respond within a reasonable time frame.

The Company uses a single essential cookie, issued by Auth.js for the sole purpose of maintaining the User's authenticated session. This cookie is marked HttpOnly (rendering it inaccessible to client-side scripts), Secure (transmitted exclusively over HTTPS), and SameSite=Lax (protecting against cross-site request forgery). The Company does not utilize third-party tracking cookies, advertising cookies, or analytics cookies. Because the Company employs only strictly necessary cookies, no cookie consent banner is required under applicable European Union or California regulations.

Personal information collected pursuant to this Policy is retained only for so long as is necessary to fulfill the purposes set forth herein. Account data is retained for the duration of the User's active account and is deleted within thirty (30) days following termination of the account. Subscription and billing records are retained for a period of up to seven (7) years, as required by United States federal and state tax recordkeeping obligations. Server-side logs containing Internet Protocol addresses and request metadata are retained for a period of thirty (30) days for the purpose of debugging and security investigation, after which such logs are automatically purged. Electronic mail delivery logs maintained by Resend are retained in accordance with Resend's default retention period, which is typically thirty (30) days.

The User has the right to (a) request access to the personal information that the Company holds about the User; (b) request the deletion of the User's personal information, subject to the retention periods set forth in Section 7 above and any legal obligations to retain certain records; (c) request that the User's personal information be exported in a structured, machine-readable format; and (d) request the correction of inaccurate personal information. All such requests shall be submitted by electronic mail to hello@motivatedfinder.com, and the Company shall endeavor to respond within thirty (30) days of receipt. The Company adheres to the principles of the European Union General Data Protection Regulation and the California Consumer Privacy Act; residents of the European Economic Area, the United Kingdom, or the State of California may possess additional rights under applicable local law, which the Company will honor to the extent required.

The Service is not directed to, nor intended for use by, individuals under the age of eighteen (18) years. The Company does not knowingly collect, use, or disclose personal information from any individual under the age of eighteen. In the event that the Company becomes aware that personal information has been collected from a minor, the Company shall promptly delete such information from its systems.

The Company implements and maintains commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. Such measures include, without limitation, the enforcement of HTTPS encryption for all data in transit, a strict HTTP Strict Transport Security policy with subdomain inclusion, a Content Security Policy restricting permissible script and resource origins, per-User rate limiting on sensitive endpoints, signed JSON Web Token sessions, encrypted database connections, and the exclusion of personal information from application logs. The Company conducts periodic blue-team security reviews of its authentication, payment, and tier-gating surfaces. Notwithstanding such measures, no method of electronic transmission or storage is entirely secure, and the Company cannot guarantee the absolute security of personal information. Suspected security vulnerabilities may be reported to hello@motivatedfinder.com.

The Service is hosted in the United States, specifically within the US-East geographic region of the Company's service providers. By accessing or using the Service from a location outside the United States, the User consents to the transfer of personal information to, and the processing of such information in, the United States, where data protection laws may differ materially from those of the User's jurisdiction of residence.

The Company reserves the right to modify, amend, or replace this Policy at any time. Material modifications shall be communicated to Users by electronic mail to the address associated with the User's account or by conspicuous notice within the Service. The “Last updated” date appearing at the top of this Policy shall always reflect the date of the most recent revision. The User's continued access to or use of the Service following the effective date of any such modification shall constitute the User's acceptance of the modified Policy.

All inquiries, access requests, deletion requests, security reports, and other communications relating to this Policy or the Company's privacy practices shall be transmitted in writing by electronic mail to hello@motivatedfinder.com.