Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and profile avatar. If you sign in with Google or Microsoft, we only receive the basic profile information (name, email, avatar) permitted by your OAuth provider. Authentication is handled by Better Auth on our infrastructure; we do not receive or store your OAuth password.

Payment Information

Payments, including Professional subscriptions and one-time Decision Pass purchases, are processed by Stripe. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. Stripe retains payment information in accordance with their privacy policy.

Reports & Conversation Data

We store the property and community reports you generate, your conversation history with the AI advisor, and any profile preferences you provide (such as household composition, target city, or search priorities). This data is used to deliver personalized analysis, maintain your report history, and route your queries to the right region.

Ask Memory

Ask can keep a short summary of your preferences between chats: budget, preferred neighbourhoods, commute destinations, school needs, and lifestyle priorities. Memory is off unless you turn it on, in Ask or under Account, Chat memory. Only then does Ask save this summary and use it in later answers. From that page you can see and edit the summary, turn memory off (Ask stops saving and using it), or delete it. Before September 23, 2026, Ask saved this summary without asking first. It was never used in answers unless memory was on, and you can keep or delete anything saved then from the same page.

Saved Destinations

If you save commute destinations (for example, a workplace or school address), we store them with your account and use them to personalize your own commute results and reports. When anyone other than you views one of your reports, your saved destinations are removed from what they see. You can edit or delete saved destinations at any time.

Anonymous Use

If you use features such as the Companion without an account, we set a first-party cookie (pyp_anon) that links your anonymous session to the search information you enter, such as your priorities and the places you save or rule out. The cookie is not readable by scripts on the page and expires 30 days after it is set. If you sign in from the Companion to keep your search, the information from that anonymous session is moved into your account. Otherwise, anonymous search information is deleted once it has gone 30 days without activity. Conversations from the anonymous homepage chat are deleted after 30 days without activity, and the homepage chat log (a hashed network address and the anonymous session identifier) is deleted after 30 days.

AI Processing

Our AI advisor and reports send the information needed for your request through our AI gateway to the configured model provider. This can include Anthropic or OpenAI when a fallback model is used.

Optional AI Connections

When you connect another AI client, you review its requested account permissions. A continuation shares only the decision categories you approve for that connection. It does not copy your Ask transcript or household memory. Temporary decisions expire after 24 hours, handoffs after 15 minutes, and superseded revisions after 24 hours. Saving a decision to your journey is a separate action. You can revoke a handoff, delete a context, or disconnect a client. Information already received by another provider is governed by that provider's terms and privacy policy.

For each connected client we store its name, the web addresses it registered, the permissions you approved, when it was last used, and a one-way hash of each access and refresh token (never the tokens themselves). Access tokens expire after one hour and refresh tokens after 30 days; expired token records are deleted 30 days after they expire. Disconnecting a client from your account settings revokes its tokens immediately. Within the permissions you approved, the AI tool you choose to connect (for example, ChatGPT by OpenAI or Claude by Anthropic) receives the results it asks for, such as place lookups, analyses, comparisons, and your plan and usage status, and handles them under that provider's own privacy terms. Analyses requested through a connection count toward your Decision Pass or plan in the same way as analyses you run on the website. We keep a record of each such request, including the place and the usage it consumed, for up to 90 days, and clear the stored result after 24 hours. Our connector endpoint that works without an account stores only a salted hash of the requesting network address, for rate limiting.

Usage Data

We track usage counts to enforce access limits, including the places analyzed under a Decision Pass. We use Simple Analytics and PostHog to understand product usage. Signed-in product events can be associated with your internal account identifier. Continuity outcome events exclude questions, prompts, credentials, addresses, precise map bounds and budgets; their raw records are retained for up to 90 days. Usage records that support access and billing are retained separately.

Analytics and Attribution Storage

The following are set in your browser when a page loads, without a separate consent prompt:

• Campaign attribution (pyp_attr): a first-party cookie that expires after 30 days, with matching local storage entries (pyp_attr_first and pyp_attr_last). When you arrive from another website or through a link carrying campaign tags (utm parameters), we record those tags, the referring web address, the page you landed on, and the time. Your first such visit is kept in local storage until you clear it; your most recent one replaces the previous one; and both are copied into the cookie so our servers can read them. We use this to understand which campaigns and websites bring people to PickYourPlace: it is attached to our product analytics events and to your analytics profile when you sign in, and the campaign tags are attached to Stripe checkout records. Nothing is written on visits with no campaign tags and no outside referrer, or if your browser sends a Do Not Track signal.
• PostHog: a first-party cookie and a local storage entry, each named ph_ followed by our project key and _posthog, set by the PostHog analytics library on our domain. They hold a random identifier for your browser, your current session, and properties we attach to analytics events. The cookie expires after 365 days. PostHog also keeps identifiers for the current browser tab in session storage, and we keep the page you landed on and the name of the referring website there for the length of the tab session. Analytics requests are sent through our own domain to PostHog. If your browser sends a Do Not Track signal, PostHog does not record events.
• Mapbox: local storage entries named mapbox.eventData, mapbox.eventData.uuid and mapbox.eventData.uuidTimestamp (each followed by an identifier for our Mapbox account), set by the Mapbox map library on pages that show a map. They hold a random identifier that the library replaces after 24 hours, and the dates of recent events. We have turned off the library's optional performance telemetry and the address search box's optional usage logging. The map-load events Mapbox needs for billing cannot be turned off and are still sent, with that identifier, to Mapbox, a third party. The address search box sends what you type to Mapbox only to look up matching places. The entries have no expiry date; they stay until you clear your browser's storage.

You can block or clear these cookies and storage entries at any time in your browser's settings. If you turn on your browser's Do Not Track setting, we do not write the campaign attribution record and PostHog does not record events; it does not affect the Mapbox map-load events.

2. Information We Do Not Collect

• We do not collect advertising identifiers or serve targeted ads.
• We do not sell, rent, or trade your personal information to third parties.
• We do not use tracking cookies for advertising purposes.
• We do not access your contacts, photos, or other device data.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Generate personalized property and community reports.
• Process payments and manage billing.
• Enforce usage limits and prevent abuse.
• Communicate with you about your account and service updates.

4. Third-Party Services

We use the following third-party services to operate PickYourPlace:

5. Data Security

All communication between your browser and our servers is encrypted using HTTPS. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Account credentials are stored using industry-standard hashing.

6. Data Retention

• Account data: Retained while your account is active. You can delete your account at any time from your account page (see Your Rights below).
• Reports and comparisons: Retained while your account is active, including after a Decision Pass expires. You can delete individual reports and comparisons; deleted reports are permanently removed.
• Conversation history: Retained while your account is active. Individual conversations can be deleted from your account.
• Ask memory: Retained while your account is active, until you delete it under Account, Chat memory. Turning memory off keeps it but stops Ask from using it.
• Saved destinations: Retained while your account is active, until you edit or delete them.
• Anonymous sessions: The pyp_anon cookie expires 30 days after it is set and is not renewed. Anonymous Companion search information is deleted once it has gone 30 days without activity, unless you claim it first by signing in from the Companion. Anonymous homepage chat conversations are deleted after 30 days without activity, and homepage chat log entries after 30 days. These deletions run daily.
• AI connections: Temporary decisions expire after 24 hours, handoffs after 15 minutes, and superseded decision revisions after 24 hours. Token records are deleted 30 days after they expire, and request records after 90 days.
• Payment records: Retained as required for billing, tax, and legal compliance.

7. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and associated data.
• Export your report data.
• Withdraw consent for data processing at any time.

You can delete your account yourself from your account page. Deleting it removes your reports, comparisons, conversations, Ask memory, journeys, saved destinations, preferences, and share links; disconnects any AI tools you connected; cancels a Professional subscription immediately; and asks PostHog to delete your analytics profile, events, and recordings. Payment records stay with Stripe for tax purposes, emails already sent remain in our email provider's logs under its own retention, and we keep a record that an account was deleted with no personal details. Some accounts, such as those set up for our professional pilot, cannot be deleted from the account page; email us and we will delete them.

To exercise any of the other rights, contact us at hello@pickyourplace.app.

8. Geographic Coverage

PickYourPlace currently serves Calgary, Vancouver, Edmonton, Toronto, Montréal, and Québec City. Data shown for these regions is sourced from the corresponding municipal, provincial, and federal data providers (see Our Data for the full list). Account data is hosted in the United States.

9. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page. Your continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact

If you have any questions about this Privacy Policy, please contact us at hello@pickyourplace.app.