Privacy

A magic-link sign-in stores your email, an organization name, and a membership role. The link token and the session token are stored as hashes, not as the raw secret. The session cookie is named ab_session, is httpOnly, and lasts about 30 days. Resend sends the sign-in email. An invite stores the teammate's email and a hashed link, and Resend sends that one message. These emails are not used for marketing.

Stripe processes paid Checkout and the Customer Portal. AssessorBrief stores the Stripe customer id, subscription id, plan, status, and period end on the organization. Card numbers stay with Stripe. See pricing for what a plan includes.

A signed-in place brief stores the organization, the user, the place id, and the time. That row is the meter for the seat. It is not a copy of the owner or the mailing address.

An API call stores a request id, key id, organization, a short form of the query, the matched place id, the state, how long it took, the HTTP status, and whether it was billable. The log does not store an owner list or a mailing dump. API key secrets are stored only as a hash.

The anonymous demo sets a cookie, ab_demo, with the UTC day and a count of briefs opened that day. It is used to show an upgrade note. It is not an account.

Downloading a brief PDF sets a signed cookie, ab_pdf, with a random id. The 10 free PDF downloads are counted against that id and a one-way hash of the requesting IP address. A signed-in account is counted against the account instead. A paid seat is not counted.

A brief can show owner of record and tax-roll mailing when the public assessor or GIS source publishes them for that one parcel. Those fields describe the roll, not a private profile AssessorBrief built. They are not proof of residency. A brief may be used for ownership research, title preparation, and investigation. Mailing fields from assessor rolls are not for marketing lists, skip-tracing, or driver-privacy misuse. See the terms for the credit and tenant-screening ban and the other uses that are not allowed.

The session cookie keeps you signed in. The demo cookie counts anonymous briefs for the day. The PDF cookie counts free PDF downloads. The click-id cookie and Google's cookies are covered above. Stripe may set its own cookies on the Checkout and Customer Portal pages it hosts.

We may use Google Analytics 4 to count visits and Google Ads to see which of our ads led to a signup or a purchase. When either is switched on, Google's tag (gtag.js) loads on our pages and sets Google cookies such as _ga and _gcl_au. Google receives the page address, your browser's details and your IP address, under Google's own privacy policy.

If you arrive from one of our Google ads, the link carries a click id (gclid, gbraid or wbraid). We keep it in our own cookie, ab_click, for 90 days, and with your visit record. If you then create an account or buy a plan, we store the click id with your organization and purchase, so the ad still gets credit when you finish signing in on another device. We may send the click id, the event and the purchase amount back to Google Ads. We do not send your email or your lookups.

To opt out, turn on Global Privacy Control in your browser (we then skip Google's tag), block googletagmanager.com with a content blocker, or install Google's Analytics opt-out add-on. You can also turn off personalized ads at myadcenter.google.com. Search and briefs work the same either way.

Account, subscription, and metering rows stay while the organization exists and as long as needed to show usage, resolve a billing dispute, or enforce the terms. Magic links expire in minutes and are single use. You can ask support@assessorbrief.com to close an organization. Billing records that Stripe or tax rules require are kept for that period, then deleted or reduced to what the invoice still needs.

AssessorBrief does not sell personal data and does not build a consumer report. A paid county parcel data download or Parcel data API response can include owner and tax-roll mailing fields when the public roll published them. That extract is the roll, not a skip-trace file. Questions: support@assessorbrief.com.