Privacy Policy

1. What We Collect

When you use GridHazard, we may collect the following information:

• Property addresses submitted when requesting hazard reports
• Email address for report delivery and account creation
• Payment information — processed by [Payment Processor]. GridHazard never sees, stores, or transmits full card numbers. [Payment Processor] handles all card data under PCI-DSS compliance.
• Basic usage analytics — pages visited, report requests made, browser type, and device type
• IP address for security purposes and fraud prevention

2. Why We Collect It

We collect this information for the following purposes:

• To generate and deliver property hazard reports to you
• To process payments for reports and subscriptions
• To improve the platform and fix bugs based on usage patterns
• To communicate with you about your report, account, or service updates

GridHazard does not sell, rent, or share your personal information with third parties for marketing or advertising purposes.

3. Third-Party Services

GridHazard uses the following third-party services that may process personal information:

• [Payment Processor] — payment processing. Your card and payment data are handled directly by [Payment Processor] and subject to [Payment Processor]'s Privacy Policy.
• Analytics tools — [TODO: specify analytics provider when implemented] — used to understand aggregate usage patterns. Data is anonymized and aggregated.
• Microsoft Azure — cloud hosting, data storage, and processing infrastructure for the GridHazard platform.

4. Data Retention

• Report data: retained for 12 months after generation, then permanently deleted
• Account data: retained while your account is active; deleted within 30 days of a verified account deletion request
• Payment records: retained for as long as required by applicable tax and financial regulations

5. Your Rights

You have the following rights with respect to your personal data:

• Right to access: request a copy of the personal data GridHazard holds about you
• Right to deletion: request deletion of your personal data, subject to legal retention requirements
• Right to correction: request correction of inaccurate personal data
• Right to portability: request your data in a commonly used, machine-readable format

To exercise any of these rights, contact us at privacy@gridhazard.com. We will respond within 30 days.

6. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• Right to know what personal information is collected, used, disclosed, and sold
• Right to delete personal information we have collected about you, subject to certain exceptions
• Right to opt out of the sale of personal information — GridHazard does not sell personal information
• Right to non-discrimination for exercising your CCPA rights — you will not receive different prices or levels of service

To submit a CCPA request, contact us at privacy@gridhazard.com with the subject line "CCPA Request."

7. Cookies

GridHazard uses cookies and similar tracking technologies:

• Essential cookies — required for the site to function. These cannot be disabled without affecting core features.
• Analytics cookies — used to understand how visitors use the site, which pages are most visited, and how to improve the experience. This data is aggregated and does not identify individual users.

We do not use advertising cookies, retargeting cookies, or third-party social media tracking pixels.

You can disable cookies in your browser settings. Disabling essential cookies may prevent some features from working. For more detail, see our Cookie Policy.

8. Children's Privacy

GridHazard is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@gridhazard.com and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time as the service evolves or legal requirements change. Material changes will be communicated via email to registered users or via a prominent notice on the site. The "Last updated" date at the top of this page reflects when the policy was last revised.

Your continued use of GridHazard after changes are posted constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or requests:

• Email: privacy@gridhazard.com
• GridHazard, [TODO: business address]