1. Information we collect

We collect the following categories of information:

• Account information: your email address. Authentication is handled by our identity provider (AWS Cognito); we do not store your password.
• Property and eligibility information you provide: property addresses, parcel identifiers, acreage, land use, and answers to eligibility questions.
• Payment information: if you purchase a subscription, our payment processor (Stripe) collects your payment details. We do not store card numbers; we keep your Stripe customer and subscription identifiers and your plan status.
• Documents: documents you generate through the Service.
• AI advisor conversations: the messages you send to the AI advisor and the related property context used to answer them.
• Email addresses you volunteer for follow-up: for example, when you request renewal reminders without creating an account.
• Technical log information: standard service logs generated when you use the Service (such as requests to our servers), used to operate, secure, and debug the Service.

2. How we use your information

We use your information to:

• provide the Service, including generating eligibility estimates, program information, lease-income estimates, and documents;
• operate the AI advisor;
• create and secure your account and communicate with you about the Service;
• maintain, improve, and analyze the Service; and
• comply with legal obligations and enforce our Terms.

3. AI and automated processing

To power the AI advisor, the messages you send and relevant property information are transmitted to our AI model provider (Anthropic) to generate a response. We do not use the Service to make legally significant decisions about you without the opportunity for human review, and all outputs are informational. We do not sell your information or use it for third-party advertising.

4. Third-party data sources we query for you

To produce estimates, we look up information from public and third-party sources using the address or parcel you provide, including county GIS and parcel records, state revenue-department valuation and tax-rate publications, USDA NRCS program data, and satellite and aerial imagery providers. These lookups reflect your inputs and the requested feature.

5. How we share information

We share information only as needed to run the Service:

• Service providers (subprocessors): such as our cloud host (Amazon Web Services), our payment processor (Stripe), our AI model provider (Anthropic), our error-monitoring provider (Sentry), and imagery and data providers, who process information on our behalf under contract;
• Advertising measurement: when you complete a purchase, the Google tag tells Google that a purchase happened, as described under Cookies and similar technologies below;
• Legal and safety: when required by law or to protect rights, safety, and the integrity of the Service;
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy; and
• With your direction: when you ask us to share or export your information.

We do not sell your personal information.

6. Data retention

We retain your information for as long as your account is active and as needed to provide the Service, and afterward as required to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated personal information as described below.

7. Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit and at rest, managed authentication, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your choices and rights

In the app, you can verify your sign-in email, manage or cancel your subscription through the billing portal on your Account page, and delete your AI advisor conversations. You can also request that we delete your account and associated personal information by contacting us at privacy@smallforestry.com. We will not discriminate against you for exercising your rights.

9. Cookies and similar technologies

We use a limited set of browser storage and similar technologies that are necessary to operate the Service, such as keeping you signed in on your device.

For your convenience, the Service also saves in-progress document form entries (which may include a name, email, phone number, and mailing address) in your browser’s local storage on your device, so your work is not lost between visits. This information stays on your device and is not transmitted to us until you generate a document or preview. It is deleted when you sign out and when the related document is generated.

To understand how the Service is used, we use Umami, a privacy-focused analytics tool. It is cookieless, does not identify or track you across websites, and collects only anonymized, aggregated usage data (such as which pages are visited). Identifiers such as document-sharing links are removed before anything is recorded.

We advertise on Google. To measure which of our ads lead to purchases, the Service loads the Google tag, Google’s advertising measurement tool, which sets cookies in your browser. When you complete a purchase, the Google tag tells Google that a purchase happened. We do not send Google your name, your email address, what you bought, or anything about your properties, and identifiers such as document-sharing links are removed from any web address before it is sent. The Google tag is not loaded on document-sharing links. Google also receives standard information from your browser, such as your IP address, and handles it under its own privacy policy.

When something goes wrong in the Service in your browser, it sends an error report to Sentry, our error-monitoring provider, so we can find and fix the problem. A report describes the error, the page it happened on, and basic browser details (such as the browser and operating system). Addresses you searched for and document-sharing links are removed from any web address before the report is sent, and reports do not include your name, your email address, cookies, or anything you type into a form.

10. Children's privacy

The Service is intended for landowners aged 18 and older and is not directed to children. We do not knowingly collect personal information from children under 18.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice.

12. Contact

Questions about this Privacy Policy or your information? Contact us at privacy@smallforestry.com.