Privacy Policy

Kazdren Aerial is run by Kazdren Systems ("we", "us"), a California business. For anything about this policy or your information, email kazdrentech@gmail.com.

• Account: your email address and password (stored only as a one-way hash by our sign-in provider; nobody can read it), your company name, and when you accepted the Terms and which version. Our sign-in provider also keeps sign-in records, such as the time, IP address and browser, for security.
• Report branding, if you add it in Settings: phone number, the email address printed on reports, website, license number and logo image.
• Projects: the job address you search and pick, its map coordinates, the project name and notes, the shapes you trace (roof planes and pitches, fence runs and gates, landscape areas and markers), waste factor and options, when you first downloaded its report, and a fingerprint of the traced shapes that report was built from.
• Usage records: a dated entry each time you search for an address, download a new report or load a Street View photo. We use them to apply the monthly allowances in our Terms and to see how much the service is used.
• Billing: your Stripe customer ID, membership status, renewal or end date, and how many trial reports you have used. You enter your card, name and billing details on Stripe's own pages; we never see or store your full card number.
• Server logs: our hosting provider records each request (IP address, browser, page address and time). Address searches travel in the request address, so what you type in the search box appears in these logs.
• Messages you send us, such as support emails.

• To run the service: sign you in, save your projects and build reports with your branding.
• To run your trial and membership: count trial reports, take payments and lock or unlock access.
• To answer you and send account emails, such as sign-up confirmation and password reset.
• To keep the service secure and working, investigate abuse, and enforce our Terms.
• To meet legal, tax and accounting duties.

We do not send marketing email and do not use your information for advertising.

Projects hold the addresses and measurements of properties that usually belong to your customers or prospects. We process that information on your behalf and only to provide the service to you. We do not contact homeowners or use their addresses for anything else. You are responsible for having a legitimate business reason to measure each property and to give us its address (see our Terms).

These companies process information for us to run the service. Each handles it under its own privacy policy.

• Supabase: sign-in, our database and logo storage, and sending account emails (privacy policy).
• Vercel: hosts the site and runs our server code, and keeps the server logs described above (privacy policy).
• Stripe: payments, subscriptions and invoices. We create your Stripe customer record with your account email and our internal account ID (privacy policy).
• Esri: aerial imagery and map labels. Your browser loads map tiles straight from Esri's servers, so Esri receives your IP address, browser details and which tiles you view, which shows the area you are looking at. Our servers also fetch imagery around a property from Esri for its report, and send what you type in address search to Esri's geocoding service (privacy policy).
• U.S. Census Bureau: when our Esri address search is not available, our servers send the address you type to the Census Bureau's public geocoder instead (privacy policy).
• Google: when you open a project's site and access screen, our servers send the property's coordinates to Google Street View to find and fetch a photo facing the house. That combines the location from our Esri or Census address search with Google's data. We do not store the photo.

Google's use of that information is covered by the Google Privacy Policy.

We use only the first-party cookies and browser storage below, all needed for sign-in, to remember a setting or to keep unsaved work. There are no analytics, advertising or third-party tracking cookies.

• sb-…-auth-tokenCookie; may be split into .0, .1

  Keeps you signed in. Set by our sign-in provider, Supabase, on our own domain.

  Lasts: Up to 400 days, or until you sign out

• sb-…-code-verifierCookie; one or more

  Completes an email confirmation or password-reset link securely.

  Lasts: Until the link is used

• tradeCookie

  Remembers whether you last opened Roofs, Fences or Landscaping. Sent only to pages under /app.

  Lasts: 1 year

• kz.map.labelskz.fence.labelskz.landscape.labelsLocal storage

  Remembers which labels you turned on in each map. Stays in your browser and is never sent to us.

  Lasts: Until you sign out or clear site data

• kazdren:draft:…Local storage; one per project

  A copy of a project's edits that have not saved yet, so a dropped connection does not lose your work. Stays in your browser until it saves or you restore it.

  Lasts: Until the edits save or you sign out; an unsaved copy is dropped after 30 days

Stripe sets its own cookies on its checkout and billing pages, which are on Stripe's domains. If you block cookies for our site, you will not be able to sign in.

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as California law defines those terms. We disclose it only to the service providers above, to run the service, and otherwise only when the law requires it (for example, a valid subpoena), to protect someone's rights or safety, or as part of a merger or sale of our business, in which case this policy keeps applying to it.

We do not disclose personal information to third parties for their own direct marketing (California Civil Code section 1798.83).

We do not track visitors across other sites and use no analytics or advertising tools, so we treat every visitor the same whether or not their browser sends a Do Not Track or Global Privacy Control signal.

• Your account, branding, projects and usage records: while your account is open. Canceling a membership does not delete them, so you can come back; delete the account to remove them.
• After you delete your account, it is removed from our live database and storage right away. Copies in our database provider's backups expire on its backup schedule, typically within 30 days.
• Invoices and payment records stay with Stripe after your account is deleted, for as long as tax and accounting law requires.
• Server logs: kept by our hosting provider for a limited time, typically no more than 30 days.
• Support emails: as long as we need them to help you and to keep a record of requests, such as a deletion request.

• See and correct: your branding is in Settings and your projects are in the app; edit them there. Email us for a copy of everything we hold about your account.
• Delete: use Delete account in Settings. It ends any membership and permanently deletes your account, projects, logo and usage records. Or email kazdrentech@gmail.com from the address on your account, and we will delete it within 30 days.
• Homeowners who want a property's information removed can email us; because we hold it for the contractor who measured it, we will pass the request to that member and help them act on it.

If you are a California resident, the California Consumer Privacy Act gives you the right to know what personal information we collect, use and disclose and to get a copy; to correct it; to delete it; to opt out of its sale or sharing (we do neither); to limit the use of sensitive personal information (the only sensitive information we hold is your sign-in details, used only to sign you in); and not to be treated differently for using these rights. We honor these requests for every member, wherever they live.

In the last 12 months we collected the categories described in What we collect: identifiers (such as your email address and IP address), customer records (company details), commercial information (membership and billing status), internet activity (server logs) and the property locations you enter. They came from you, your browser and Stripe, were used for the purposes in How we use it, and were disclosed only to the service providers listed above.

To make a request, email kazdrentech@gmail.com from the address on your account. We confirm it is you by matching that address and may ask for more if needed. Someone you authorize in writing may make a request for you. We answer within 45 days.

Connections to the site use HTTPS, and our database provider encrypts stored data. Database rules let each member reach only their own account and projects, and logos are kept in private storage. Card details stay with Stripe. No system is perfectly secure; if a breach affects your personal information, we will tell you as the law requires.

We are in California and the service is meant for businesses in the United States. Our providers store and process information in the United States and may process it in other countries where they operate.

Kazdren Aerial is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16; if you believe we have, email us and we will delete it.

We post any update here with a new effective date. If a change materially affects how we use information we already hold, we will tell members by email or in the app before it takes effect.

Questions, requests or complaints about privacy: Kazdren Systems, kazdrentech@gmail.com.