Privacy Policy

1. Who we are

Flagler Property Watch is a property photography service based in Palm Coast, Flagler County, Florida. We are the controller of the personal information described here. Everything this policy lets you do is done from your account.

2. What we collect

We collect the following, and nothing we do not need to run the service:

Account details: your name, email address, phone number if you give one, and a password (stored only as a hash by our sign-in provider).
Property details: the address you enter, its map location, the jurisdiction it falls in, which we determine from public boundary data, and your answers about it (what kind of property it is and any gate code).
Your authorization: the confirmation you give that you are entitled to have the property photographed, with its date and the policy version.
Bookings and payments: your orders, arrival windows, amounts, refunds, and service credits. Card details are entered directly with our payment processor (Stripe); we receive only a payment confirmation and a masked reference.
Visit records, photographs and videos: the photographs and, where a visit includes one, the video, their timestamps, and the times a visit began and ended. We never record audio: a video is silent.
Communications: requests to be notified when service opens in an area, and the notifications we send you (email and in-app), including whether an email was delivered or bounced.
Technical data: a session cookie that keeps you signed in, and standard server logs (IP address, browser, pages requested) kept for security and troubleshooting.

3. Why we use it

To provide the service: locate the property, schedule and perform the visit, review and deliver the photographs and any video, and keep them in your account.
To take payment, issue refunds and credits, and keep the financial records the law requires.
To communicate with you about your visits and your account.
To keep the service secure, prevent abuse, and answer payment disputes with the visit record.
To understand how the business is performing, using aggregated figures that do not identify you.

4. Who we share it with

We do not sell personal information. We share it only with the providers needed to run the service, each under its own privacy terms:

Google Cloud (Firebase): hosting, sign-in, database, file storage, and analytics infrastructure, in the United States.
Google Maps Platform: address suggestions, geocoding, and maps. When you type an address, that text is sent to Google to find matches.
Stripe: payment processing. Stripe receives your card details directly and shares with us a confirmation and a masked reference.
Google (Gmail): delivery of transactional email (order confirmations, reminders, photo-ready notices).
Professional advisers (accountant, attorney) and authorities when the law requires it or to protect our rights or someone's safety.

5. How long we keep it

Account details: while your account is open, plus the 14-day grace period after a deletion request.
Photographs, videos and visit records: at least 24 months after delivery while your account is open, and 120 days after your account is disabled following a deletion request, after which photographs and videos are deleted.
Financial records (orders, payments, refunds, credits): for as long as tax and accounting law requires, with your name and contact details removed once your account is deleted.
Communications and notification records: up to two years, then deleted.
Server logs: up to 30 days.

6. Your choices and rights

Access and correction: view and update your name, phone, and email from your account settings; view every visit, photograph and video in your account.
Download: download your photographs and videos at any time while your account is open.
Deletion: request account deletion from your settings. Login is disabled after the 14-day grace period, personal details are removed, and photographs and videos are deleted after the 120-day retention period described above. Records we must keep by law are kept without your personal details.
Notifications: in-app notifications are always available in your account; email notifications concern only your visits and account, and you choose which ones you receive in your account settings.

7. Security

All traffic to the site is encrypted. Sign-in is handled by Google Identity Platform; passwords are never stored by us. Access to customer data inside the business is limited to what a role needs, every access to financial and customer records is logged, and photographs and videos are stored in private storage that is not publicly listable. No system is perfectly secure; if we learn of a breach affecting your information we will tell you as the law requires.

8. Cookies

We use one strictly necessary cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

9. Children

The service is for adults. We do not knowingly collect information from anyone under 18.

10. Where data is processed

We operate in Florida and store data with providers in the United States. If you use the service from elsewhere, your information is transferred to and processed in the United States.

11. Changes to this policy

When we change this policy we update the version date at the top and, for material changes, tell you in your account. Continued use after a change means you accept the updated policy.