Privacy Policy
Effective date: May 9, 2026
What We Collect
SubSurface Intel (“we,” “us”) collects:
- Email address and hashed password (Supabase Auth)
- Account profile (name, company, phone — all optional)
- Search queries, watchlist entries, and saved filters
- API usage logs for rate-limit enforcement and billing
We do NOT collect government IDs, biometric data, or payment card numbers (handled by Stripe).
The water-right, basin, and gauge data shown in the application is sourced from public government APIs and is not personal data about you.
How We Use It
- Authentication and account management
- Sending watchlist alerts and transactional emails you opted into
- Enforcing API rate limits and tier entitlements
- Aggregate, anonymized usage analytics to improve the product
Third-Party Services
| Service | Purpose |
|---|---|
| Supabase | Authentication & database |
| Stripe | Subscription billing |
| Mapbox | Map tile rendering |
| Vercel | Application hosting |
Your Rights
You have the right to:
- Access — request a copy of your personal data
- Correction — update inaccurate data from Settings
- Deletion — remove your account and data via privacy@subsurfaceintel.ai or from Settings → Delete account
GDPR
EU users can request data export or deletion via privacy@subsurfaceintel.ai and we will respond within 30 days.
CCPA
California residents can request data disclosure. We do not sell user data.
Data Retention
- Account data is retained while the account is active
- API usage logs are retained for 90 days for billing reconciliation
- All personal data is deleted within 30 days of account closure
Security
- TLS encryption in transit
- Encryption at rest (Supabase / Vercel managed)
- Row-level security on every database table
- API keys with per-tier rate limiting and revocation
Contact
AI Venture Holdings LLC
Email: privacy@subsurfaceintel.ai