Privacy Policy

Last updated: May 2, 2026.

This Privacy Policy describes how Pearland AI ("we") collects, uses, and shares information when you use protest.pearlandai.com (the "Service"). It is part of the Terms of Service. We've tried to keep it short and plain. If anything is unclear, email support@pearlandai.com.

1. What we collect

Account info. Your email address. We use magic-link sign-in, so we do not store passwords.
Authentication and session data. A session cookie, sign-in tokens, and the IP address and approximate time of each sign-in. Used to keep you signed in and to detect abuse.
Property activity. The BCAD property identifiers, owner names, addresses, and search terms you enter; the previews you view; the Packets you unlock; and the variant (subdivision/neighborhood, base/land-aware) and tax year you choose for each unlock.
Purchase data. The fact and amount of your purchases, the Stripe checkout session ID, and the Stripe customer email associated with the charge. We never see or store your card number, CVV, expiration date, or full bank details — those go directly to Stripe under their own privacy and PCI-DSS controls.
Generated documents. The PDF Packet for each property you unlock, stored on our server until your account is closed or you request deletion.
Diagnostic logs. Standard server logs (IP, user-agent, request path, response code, timestamp) for security, error tracing, and capacity planning. Retained for up to 90 days.

2. What we do with it

To provide the Service: authenticate you, render and deliver Packets, look up the right BCAD records, calculate previews, and process payments.
To improve and maintain the Service: monitor performance, fix bugs, audit for fraud or abuse, and develop new features.
To communicate with you about your account, your purchases, and material updates to the Service or these policies. We do not send marketing email unless you affirmatively opt in.
To comply with legal obligations and enforce our agreements.

3. What we do not do

We do not sell your personal data.
We do not rent or share your contact information with third-party advertisers or data brokers.
We do not use third-party advertising or tracking pixels on this Service.
We do not run analytics products that fingerprint or cross-site track you. (If we ever add lightweight self-hosted analytics, we'll update this page first.)

4. Subprocessors and third parties we share with

The Service runs on these vendors. They each have their own privacy practices:

Stripe — payment processing. Receives your email, payment amount, and card data you submit at checkout. stripe.com/privacy.
Microsoft 365 — email delivery (sign-in links, transactional notices). Receives your email address and the message body. privacy.microsoft.com.
DigitalOcean — server hosting and storage. Holds the database and the rendered PDFs at rest. digitalocean.com/legal/privacy-policy.
Sentry (if and when enabled) — error monitoring. May receive stack traces, user IDs, and request metadata when an error occurs.

We will share your information with these subprocessors only as needed to operate the Service. We do not authorize any of them to use your information for their own marketing purposes.

We may also disclose information when required by valid legal process (subpoena, court order, search warrant), to enforce our Terms, to protect the rights or safety of any person, or in connection with a merger, acquisition, or sale of substantially all of Pearland AI's assets (in which case we will provide notice of the change).

5. Cookies

We use a small number of strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. We do not use advertising cookies, social-media tracking pixels, or third-party analytics cookies.

6. Data retention

Account info and purchase history: retained for the life of the account, plus seven years after closure (for tax, fraud, and dispute records).
Generated Packets: retained for the life of the account so you can re-download them. On account closure or deletion request, Packets are deleted within 30 days.
Server logs: up to 90 days, then aggregated or deleted.
Stripe-side records (charges, refunds, chargebacks): retained according to Stripe's policies, typically multiple years for compliance and dispute purposes.

7. Your choices and rights

You can request export, correction, or deletion of your account data by emailing support@pearlandai.com. We will respond within 30 days. Some records (Stripe-side payment records, fraud-prevention logs, audit logs required by law) may be retained beyond a deletion request to the extent legally required.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect about you, the right to request deletion, and the right not to be discriminated against for exercising these rights. We do not "sell" personal information as that term is defined under CCPA. To exercise these rights, email the address above and identify yourself as a California resident.

8. Security

We host the Service on managed infrastructure with encrypted disk storage, TLS for all data in transit, application-level access controls, magic-link sign-in (no password reuse risk), and short-lived session cookies. No system is perfectly secure. If we ever experience a breach affecting your data, we will notify you by email and through the Service in accordance with applicable law.

9. Children

The Service is not directed to anyone under 18 and is not intended for their use. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.

10. Changes

We may update this Privacy Policy. The "Last updated" date at the top will reflect the change, and material changes will be communicated by email to your account address.

11. Contact

Privacy questions: support@pearlandai.com. Postal mail: Pearland AI, Pearland, Texas, USA.