Privacy Policy

Effective Date: June 21, 2026  |  Last Updated: June 21, 2026

1. Who We Are

Lot Sketch ("Company," "we," "us," or "our") operates the website and web application available at lotsketch.com (the "Service"). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

Information You Provide Directly

• Account Information: When you create an account, we collect your name and email address.
• Project Data: When you save site plans, we store the name and geometric element data (parcels, buildings, roads, parking, etc.) associated with each project.
• Payment Information: If you subscribe to a paid plan, payment is processed through Stripe. We do not receive or store your full credit card number, CVV, or banking details — those are handled entirely by Stripe.
• Communications: If you contact us for support, we may retain those messages to assist you and improve the Service.

Information Collected Automatically

• Usage Data: We may collect information about how you interact with the Service, such as pages visited, features used, and timestamps.
• Log Data: Our servers may automatically record information including your IP address, browser type, operating system, referring URL, and access times.
• Browser Storage: The Service uses browser localStorage to maintain your session and preserve application state (such as your current tool selection and canvas view).

Information We Do Not Collect

We do not collect sensitive personal information such as government ID numbers, health information, biometric data, or precise geolocation. We do not use third-party advertising trackers.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and authenticate you.
• To provide, operate, and maintain the Service.
• To process subscription payments and manage billing credits.
• To save and restore your project data when you return to the Service.
• To respond to your support requests and communications.
• To send transactional emails (e.g., account confirmation, billing receipts). We do not send marketing emails without your consent.
• To monitor and analyze usage trends and improve the Service.
• To detect, prevent, and address technical issues or fraudulent activity.
• To comply with applicable legal obligations.

4. Information Sharing and Disclosure

We do not sell your personal information. We do not share your personal information with third parties for their own marketing purposes.

We may share your information in the following limited circumstances:

• Service Providers: We share information with trusted third-party vendors who assist us in operating the Service (see Section 5). These vendors are contractually obligated to use your information only as necessary to provide services to us.
• Legal Compliance: We may disclose your information if required to do so by law, regulation, legal process, or governmental request.
• Protection of Rights: We may disclose information where we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• Business Transfers: If Lot Sketch is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice via email and/or a prominent notice on the Service if such a transfer occurs.

5. Third-Party Services

The Service integrates with the following third-party services. Each operates under its own privacy policy:

Supabase

We use Supabase (supabase.com/privacy) to host our database and manage user authentication. Your account credentials and project data are stored on Supabase's infrastructure. Supabase implements Row Level Security (RLS) so that each user can only access their own data.

Stripe

We use Stripe (stripe.com/privacy) to process subscription payments. When you enter billing information, it is transmitted directly to Stripe. We receive only a non-sensitive token and subscription status. Stripe is PCI-DSS compliant.

Map Tile Providers

The map overlay feature may request satellite or street map tiles from a third-party mapping provider. These requests may include your IP address as part of standard web traffic. No personally identifiable account information is transmitted to the map tile provider.

6. Cookies and Local Storage

The Service uses browser localStorage (not traditional cookies) to store your session token and application preferences such as your last tool selection and canvas view state. This data remains on your device and is not transmitted to third parties.

We do not use third-party tracking cookies, advertising cookies, or cross-site tracking technologies. If you clear your browser's localStorage, you will be signed out and any unsaved Free-plan work will be lost.

Supabase Auth may set a session cookie for authentication purposes. This cookie is strictly necessary for the Service to function and is not used for tracking or advertising.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account:

• Your profile information and project data are deleted within 30 days of account closure.
• Residual copies may persist in encrypted backup snapshots for up to 90 days, after which they are purged.
• Payment records may be retained for up to 7 years as required by applicable tax and financial regulations.

You may request earlier deletion of your data by contacting us at support@lotsketch.com.

8. Security

We take reasonable measures to protect your information against unauthorized access, alteration, disclosure, or destruction, including:

• All data transmitted between your browser and our servers uses TLS encryption (HTTPS).
• Passwords are managed by Supabase Auth using industry-standard hashing (bcrypt). We never store plaintext passwords.
• Our database enforces Row Level Security (RLS) policies so that even at the database layer, users can only read and write their own records.
• Access to production systems is restricted to authorized personnel only.

No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, and we encourage you to use strong, unique passwords and to sign out of your account when using shared devices.

9. Your Rights

Depending on your location, you may have the following rights with respect to your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Update or correct inaccurate information in your profile.
• Deletion: Request that we delete your account and associated personal data.
• Portability: Request an export of your project data in a machine-readable format (JSON).
• Restriction: Request that we restrict processing of your personal information in certain circumstances.
• Objection: Object to our processing of your personal information for certain purposes.

To exercise any of these rights, contact us at support@lotsketch.com. We will respond to your request within 30 days. We may need to verify your identity before fulfilling the request.

10. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months, the categories of sources, the purposes for collection, and the categories of third parties with whom it was shared.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: Lot Sketch does not sell or share personal information for cross-context behavioral advertising. No opt-out is required, but you may contact us to confirm this.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a verifiable consumer request, email support@lotsketch.com with the subject line "CCPA Request."

11. Children's Privacy

The Service is designed for professional use and is intended for individuals who are at least 18 years of age. We do not knowingly collect personal information from children under the age of 13 in violation of the Children's Online Privacy Protection Act (COPPA).

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at support@lotsketch.com. We will take steps to delete such information from our records promptly.

12. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. If you click on a third-party link, you will be directed to that party's site. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Send an email notification to registered users at least 30 days before the changes take effect.

Your continued use of the Service after the effective date of any updated policy constitutes your acceptance of the changes. If you do not agree, you may close your account before the effective date.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@lotsketch.com
• Service: Lot Sketch — lotsketch.com

We will make every reasonable effort to address your inquiry promptly.