Privacy policy.
This is a v1 privacy policy that will be replaced with attorney-reviewed copy before sustained marketing campaigns. The substance - what we collect and why - is accurate.
What we collect
- Anonymous analytics via Vercel Analytics and Google Analytics 4 (page views, referrers, country, device class). No personally identifying information.
- Email + name when you submit a prep-center claim form, listing-suggestion email, or contact form.
- DNS-TXT verification tokens when you go through our DNS-based listing claim flow. These tokens are random strings stored against your claim and discarded after verification completes.
- Cookies for session continuity if you sign in to manage a claimed listing (Supabase Auth + magic-link email).
What we don't collect
- Behavioral tracking for advertising. We don't run ads.
- Cross-site cookies, device fingerprints, or third-party trackers beyond GA4.
- Payment information. We don't process payments yet.
- Phone numbers (unless you voluntarily provide one in a claim or contact form).
Third parties we share with
- Vercel - hosts the site; sees request metadata.
- Supabase - database + auth; stores claim records.
- Resend - delivers transactional emails (magic-link sign-in, claim verifications).
- Google Analytics 4 - aggregated traffic analytics.
We do not sell, rent, or trade your data. We share only what's necessary to operate these specific services.
How long we keep things
- Approved claims and live operator accounts: kept indefinitely so operators can continue to manage their listing. You can request removal at any time via the operator dashboard or by emailing us.
- Rejected or duplicate applications, and rejected or revoked claims: contact fields (email, phone, name) are anonymized 24 months after the rejection. The row itself stays so we can answer "did you ever consider X?" honestly, but the personal data is removed.
- Match requests (the "get matched" form): contact fields are anonymized once the match is closed or after 24 months, whichever comes first.
- Operator audit log: kept for the life of the listing as a record of who changed what. Removal of the listing also removes the audit rows.
We anonymize older records periodically as we scale. Write to hello@fbaprepfinder.com any time to request earlier deletion of your own data.
Contact
Questions or requests (deletion, access, correction): hello@fbaprepfinder.com. We respond within 7 days.