Privacy

A magic-link sign-in stores your email, an organization name, and a membership role. The link token and the session token are stored as hashes, not as the raw secret. The session cookie is named ab_session, is httpOnly, and lasts about 30 days. Resend sends the sign-in email. The message contains the link and is not used for marketing.

Stripe processes paid Checkout and the Customer Portal. AssessorBrief stores the Stripe customer id, subscription id, plan, status, and period end on the organization. Card numbers stay with Stripe. See pricing for what a plan includes.

A signed-in place brief stores the organization, the user, the place id, and the time. That row is the meter for the seat. It is not a copy of the owner or the mailing address.

An API call stores a request id, key id, organization, a short form of the query, the matched place id, the state, how long it took, the HTTP status, and whether it was billable. The log does not store an owner list or a mailing dump. API key secrets are stored only as a hash.

The anonymous demo sets a cookie, ab_demo, with the UTC day and a count of briefs opened that day. It is used to show an upgrade note. It is not an account.

A brief can show owner of record and tax-roll mailing when the public assessor or GIS source publishes them for that one parcel. Those fields describe the roll, not a private profile AssessorBrief built. They are not proof of residency. See the terms for uses that are not allowed.

The session cookie keeps you signed in. The demo cookie counts anonymous briefs for the day. Stripe may set its own cookies on the Checkout and Customer Portal pages it hosts.

Account, subscription, and metering rows stay while the organization exists and as long as needed to show usage, resolve a billing dispute, or enforce the terms. Magic links expire in minutes and are single use. You can ask whirrett@pm.me to close an organization. Billing records that Stripe or tax rules require are kept for that period, then deleted or reduced to what the invoice still needs.

AssessorBrief does not sell personal data, does not build a consumer report, and does not offer a bulk download of owners or mailing addresses. Questions: whirrett@pm.me.