Privacy Policy

1. Introduction

MuniSpot ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, and services (collectively, the "Service").

By accessing or using the Service, you consent to the practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We may collect information you voluntarily provide when using the Service, including:

• Account Information: Name, email address, password, and other information you provide when creating an account
• Payment Information: Billing address and payment method details when you make a purchase (payment card information is processed securely by our payment processor, Stripe, and is not stored on our servers)
• Communication Data: Information you provide when contacting us, such as email correspondence and feedback
• Profile Information: Professional information, organization name, and preferences you choose to share

2.2 Information Collected Automatically

When you access the Service, we automatically collect certain information, including:

• Device Information: Browser type, operating system, device type, and unique device identifiers
• Usage Information: Pages visited, features used, search queries, municipalities viewed, data exported, and time spent on the Service
• Log Data: IP address, access times, referring URLs, and other standard log information
• Cookies and Similar Technologies: Information collected through cookies, pixel tags, and similar technologies (see Section 7)

2.3 Information from Third Parties

We may receive information from third-party services, such as analytics providers and payment processors, to enhance our understanding of Service usage and improve our offerings.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain the Service: To operate, maintain, and improve the Service, including processing transactions and managing your account
• Personalization: To personalize your experience and deliver content and features relevant to your interests
• Communication: To send you service-related notices, updates, security alerts, and support messages
• Marketing: With your consent, to send promotional communications about products, services, and features (you may opt out at any time)
• Analytics: To understand how users interact with the Service and to improve functionality and user experience
• Security: To detect, prevent, and address technical issues, fraud, and security vulnerabilities
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf, such as payment processing (Stripe), hosting, analytics, and customer support
• Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of all or a portion of our assets
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Protection of Rights: To protect our rights, privacy, safety, or property, or that of our users or the public
• With Your Consent: When you have given us explicit consent to share your information

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining retention periods, we consider:

• The nature and sensitivity of the information
• The purposes for which we process the information
• Applicable legal, regulatory, and contractual requirements
• Whether you have an active account with us

After the applicable retention period, we will securely delete or anonymize your personal information.

6. Data Security

We implement appropriate technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Secure data storage with access controls
• Regular security assessments and monitoring
• Employee training on data protection practices

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. Cookies are small data files stored on your device.

Types of Cookies We Use

• Essential Cookies: Required for the Service to function properly, including authentication and security
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how users interact with the Service to improve functionality
• Marketing Cookies: Used to deliver relevant advertisements (with your consent where required)

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of the Service.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Portability: Request a copy of your data in a structured, machine-readable format
• Opt-Out: Opt out of marketing communications by following unsubscribe instructions or contacting us
• Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise these rights, please contact us using the information provided in Section 13. We will respond to your request within the timeframe required by applicable law.

9. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to know what personal information is collected, used, and shared
• Right to delete personal information (with certain exceptions)
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To make a CCPA request, please contact us at privacy@munispot.com or use our contact page.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

11. Children's Privacy

The Service is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Third-Party Services

The Service may integrate with or contain links to third-party websites and services. This Privacy Policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party services you access.

Key third-party services we use include:

• Stripe: Payment processing (stripe.com/privacy)
• Supabase: Database and authentication services
• Vercel: Website hosting and deployment