1) Information We Collect

A. Information You Provide

• Account & Licensing: Name, organization, email, billing details when you register or request API keys.
• Support & Communications: Email, name, and message content when you contact us.

B. Automatically Collected

• Usage & Logs: IP address, request timestamps, endpoints accessed, response codes, and diagnostic error logs for reliability and security.
• Cookies & Analytics: Our website may use cookies and analytics (e.g., Google Analytics) to improve performance and user experience.

C. Address Validation & Geolocation Inputs

When you use our Address Validation Tool or related APIs, the addresses (and optional metadata) you submit are processed in real time via our infrastructure and trusted third‑party location providers to validate, normalize, and/or geocode. Unless you explicitly enable caching in your account settings or contract, we do not persist the raw address inputs beyond transient processing necessary to fulfill the request.

2) How We Use Information

• Provide, maintain, and improve the Services.
• Authenticate users and manage API access keys / rate limits.
• Monitor availability, performance, abuse, and security incidents.
• Communicate service notices, billing, and product updates.
• Comply with applicable laws and enforce our terms.

3) Data Retention

• API Logs (metadata only): Retained up to 30 days for operations, troubleshooting, and security.
• Cached Address Data (optional): If enabled by you, typically retained up to 30 days for performance; configurable by contract.
• Account/Billing Records: Retained while your account is active and as required by law.

4) Data Sharing & Disclosure

We do not sell or rent personal information. We may share limited information with:

• Service Providers: USPS, Google Maps Platform, AWS Location Service (HERE/Esri data), and other vendors strictly to deliver results.
• Legal & Safety: Where required by law or to protect rights, safety, or integrity of the Services.
• Business Transfers: In a merger, acquisition, or asset sale, data may transfer under this Policy’s protections.

5) Third‑Party APIs & Providers

Our Services may call third‑party APIs to process your requests. Your use of those APIs is subject to their terms and privacy notices:

• Google Privacy Policy
• USPS Privacy Policy
• AWS Privacy Notice

We require our providers to use data only as necessary to deliver the requested functionality and to protect it with appropriate safeguards.

6) Data Security

• HTTPS/TLS encryption in transit.
• Token‑based authentication for API access; role‑based access control.
• Key rotation and audit logging; periodic security reviews.

No system can be guaranteed 100% secure, but we strive to protect your data using industry‑standard practices.

7) Your Choices & Controls

• Request access, correction, or deletion of your account data.
• Request deletion of API logs or optional cached datasets linked to your account.
• Opt out of non‑essential communications via unsubscribe links in emails.

8) Children’s Privacy

Our Services are not directed to children under 13, and we do not knowingly collect data from them.

9) International Transfers

We primarily process data in the United States. By using the Services, you consent to processing and transfer in accordance with applicable law.

10) Updates to This Policy

We may modify this Policy from time to time. Changes will be posted here with a new effective date. Your continued use of the Services after updates constitutes acceptance of the revised Policy.

11) Contact Us

12) Google Compliance Disclosures

Google Maps Platform Data

• Address inputs you provide may be transmitted to Google Maps Platform solely to return validation/geocoding or time‑distance results.
• We do not sell Google‑derived data and do not use it for targeted advertising.
• We retain only minimal, aggregated, or de‑identified metrics as needed for operations and billing; raw inputs are not persisted unless you enable caching.

Limited Use (If OAuth/Restricted Scopes Are Used)

If any Google OAuth scopes are requested for your account, they will be used only to provide user‑requested features, will not be transferred to third parties except as necessary to provide or improve the features, and will not be used to serve ads.