Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, use our Services, or contact us for support. This may include your name, email address, company name, and any other information you choose to provide.

We also automatically collect certain information when you use our Services, including your IP address, browser type, operating system, referring URLs, and information about how you interact with our Services.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process transactions and send related information
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activities in connection with our Services
• Detect, investigate, and prevent fraudulent transactions and other illegal activities

3. Information Sharing

We do not share, sell, or rent your personal information to third parties for their marketing purposes. We may share information in the following circumstances:

• With service providers who perform services on our behalf
• In response to legal process or government requests
• To protect the rights, privacy, safety, or property of Unearth AI, our users, or the public
• In connection with a merger, acquisition, or sale of assets

4. Data Security

We take reasonable measures to help protect information about you from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. We use industry-standard encryption and security practices to protect your data in transit and at rest.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you Services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

6. Your Rights

You may access, update, or delete your account information at any time by logging into your account. You may also contact us to request access to, correction of, or deletion of personal information that you have provided to us. We may not be able to delete your information without also deleting your account.

7. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our Services and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Services.

8. Third-Party Services

Our Services may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing them with any information.

We rely on the following third parties to deliver the Services. Each is named here so you can review their own privacy practices:

• Stripe, Inc. — payments + subscription billing for the Site Selector. Card data is collected by Stripe directly; we never see or store full card numbers.
• Cloudflare, Inc. — CDN, DDoS protection, edge caching, and the Workers/KV runtime that backs api.unearth-ai.com. Cloudflare may log IP addresses and request metadata as part of operating the network.
• OpenStreetMap Foundation, Open Charge Map, and similar open-data communities — sources for the public datasets we publish. See LICENSES.md for the licensing posture.
• Mapbox, Inc. (when configured) — geocoding service for the Site Selector address-search box.
• Auth0 (Okta, Inc.) — identity/login for the Unearth Insights and Unearth Lite platforms.

8a. API Keys, Usage Records, and Webhooks

If you subscribe to the Site Selector or use the v1 API:

• API keys. When you complete checkout, we generate an API key tied to your subscription and store it (and a per-month request counter) in Cloudflare KV. The key is shown to you once on the post-checkout welcome page; we do not display it again.
• Usage telemetry. Each authenticated API request increments a counter we use to enforce monthly rate limits. We retain rolling 12-month per-key request counts. We do not retain query parameters (latitude, longitude, datasets) beyond what's necessary to serve the request.
• Stripe webhooks. Stripe sends us subscription lifecycle events (checkout completed, subscription updated, payment failed). We persist the Stripe customer ID and the subscription's plan tier alongside your API key so the billing portal works.
• localStorage. The Site Selector stores your saved locations, plan selection, and (if you sign in) your API key in your browser's localStorage. This data never leaves your device unless you explicitly call our API.

You can delete your account and all associated data by emailing support@unearth-ai.com or via the Stripe-hosted billing portal accessible from your account dashboard.

9. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the effective date. Your continued use of the Services after any changes indicates your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at support@unearth-ai.com.