privacy
policy.

We collect what we need to run the Service, nothing more. We do not sell your data, and we are explicit about every third party that touches it.

This document explains exactly what data we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over it. If anything here is unclear, email privacy@plaincomp.com and we will answer plainly.

PlainComp ("we," "us," or "our") is a property valuation tool operated by Matt Rybicki. This Privacy Policy explains how we collect, use, disclose, and protect information when you use the PlainComp website and valuation service (the "Service"). We are committed to protecting your privacy and being transparent about our data practices.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of the Service.

We collect a limited set of data, organized into the following categories:

• ▮Account information — when you create an account, we collect your email address and authentication credentials. If you sign up using a third-party provider (e.g. Google), we receive your name and email from that provider.
• ▮Property addresses — when you use the Service, you submit property addresses to receive valuation estimates. For registered users, we store valuation history (addresses searched, valuation results, and timestamps) to support saved reports and value tracking.
• ▮Payment information — if you subscribe to a paid plan, payment is processed by Stripe. We do not directly collect, store, or process credit card numbers or bank account details. Stripe handles all payment data in accordance with PCI DSS standards. We receive only a transaction confirmation, subscription status, and the last four digits of your card for display purposes.
• ▮Usage data — we collect usage data including pages visited, features used, valuation count, and interaction patterns to improve the Service. This data is collected through PostHog, our analytics provider.
• ▮Automatic technical data — our hosting provider (Vercel) may automatically collect limited technical information such as IP addresses, browser type, device information, and access timestamps as part of standard server operations.

We use the information we collect to operate the Service, process payments, communicate with you, and improve the product over time.

• ▮Provide, operate, and maintain the Service, including generating valuation estimates.
• ▮Process payments and manage your subscription.
• ▮Send transactional emails (account confirmation, password resets, valuation reports).
• ▮Send marketing emails and drip campaigns with your consent. You may unsubscribe at any time.
• ▮Analyze usage patterns to improve the Service.
• ▮Enforce our Terms of Service and protect against fraud or misuse.
• ▮Comply with legal obligations.

The Service relies on the following third-party providers. Each has its own privacy policy governing how it handles data.

• ▮Rentcast API — property addresses you search are sent to retrieve comparable property sales data from public records. Rentcast data is sourced from public records and is not MLS data.
• ▮Anthropic / Claude API — property addresses and comparable sales data are sent to generate AI narrative summaries of valuation analyses. Anthropic’s data handling is governed by its usage policies.
• ▮Stripe — email address and payment information are processed for paid subscriptions, securely under PCI DSS compliance.
• ▮Resend — email addresses are used to send transactional and marketing emails.
• ▮PostHog — anonymous usage data, page views, and interaction events for product analytics. PostHog may set cookies to track sessions.
• ▮Mapbox — property coordinates are used to render comparable sales on interactive maps.
• ▮Supabase / Vercel — account data, authentication, and valuation history. Supabase provides our database and authentication infrastructure. Vercel hosts the application.

PlainComp uses cookies sparingly. We display a consent banner on first visit, and you may accept or decline non-essential cookies. We do not use advertising trackers, retargeting pixels, or social media tracking scripts.

• ▮Essential cookies — authentication session management and consent preferences.
• ▮Analytics cookies — PostHog uses cookies to track anonymous usage data and session information.

We do not sell, rent, trade, or otherwise transfer any personal information to third parties for monetary or other valuable consideration. As defined under the California Consumer Privacy Act (CCPA), we do not "sell" or "share" your personal information.

The only data transmissions that occur are those necessary to provide the Service, as described in section 04.

We retain data only as long as needed to operate the Service or comply with legal obligations.

• ▮Account data — retained for as long as your account is active. Deleted within 30 days of an account deletion request.
• ▮Valuation history — retained for as long as your account is active to support saved reports and value tracking features.
• ▮Payment records — retained as required by tax and financial regulations (typically 7 years).
• ▮Email and lead data — retained until you unsubscribe or request deletion.
• ▮Anonymous analytics data — retained by PostHog per their retention policy.

You have the following rights regarding your personal data. To exercise any of these rights, contact us at privacy@plaincomp.com.

• ▮Right to access — request a copy of the personal data we hold about you.
• ▮Right to deletion — request that we delete your account and all associated personal data. We will comply within 30 days, except where retention is required by law.
• ▮Right to data export — request an export of your valuation history and account data in a machine-readable format.
• ▮Right to opt out — unsubscribe from marketing emails at any time using the link in any email, or by contacting us directly.

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information.

• ▮Right to know — you may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
• ▮Right to delete — you may request deletion of your personal information, subject to certain exceptions.
• ▮Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights.
• ▮Sale of personal information — we do not sell personal information as defined by the CCPA, and have not sold personal information in the preceding 12 months.

The Service is not directed at individuals under the age of 18. We do not knowingly collect any information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. Any changes will be posted on this page with an updated effective date. For material changes, we will notify registered users via email. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

If you have questions or concerns about this Privacy Policy or our data practices, write to us at the address below.