Privacy Policy

Last updated: July 25, 2026

What we collect

You can search addresses and read full zoning reports without an account. We do not run advertising trackers or third-party analytics. We do measure usage ourselves, described below, and it never includes the addresses you search.

If you create an account, we store:

• Your email address, and your name and profile photo if you sign in with LinkedIn.
• Reports you save, along with any edits and notes you add to them.
• Data corrections you submit, so we can review and act on them.
• Standard authentication records, such as when you last signed in.

Usage measurement

We measure how the product is used so we can fix what is broken and drop what nobody opens. It is built in-house and deliberately narrow. There is no third-party analytics script, no advertising tracker, and no cookie or stored identifier of any kind.

What is recorded:

• Whether a lookup succeeded, failed or timed out, and how long it took.
• Which report tabs are opened, and whether a report was copied, printed, shared or saved.
• How often a request is turned away for want of an account or a rate limit.

We do not record the addresses you search. When a lookup fails we keep only its shape, such as whether it had a street number or a unit designator, because that is what tells us why searches fail. The search itself is not stored.

Events are grouped by a random identifier that exists in your browser tab’s memory for as long as the page is open. It is not a cookie, it is never written to disk, it disappears when you reload, and it cannot be linked to you or to another visit.

If your browser sends Do Not Track or Global Privacy Control, we record nothing at all.

How we use it

To operate the service: authenticating you, showing your saved reports across devices, reviewing corrections, and diagnosing errors. We do not sell your personal information, and we do not share it for advertising.

Service providers

Running the service means sending some data to infrastructure providers who process it on our behalf:

• Supabase: accounts, authentication, and your saved reports.
• Vercel and Railway: application and API hosting. They process request logs.
• Cloudflare R2: map tile storage.
• Esri: map imagery and address lookups from parcel clicks.
• Anthropic: powers the chat assistant. Your questions are sent there to generate an answer.

Some of these providers process data outside Canada, including in the United States.

Your choices

You may request access to, correction of, or deletion of your account data at any time by contacting us. Deleting your account removes your profile and saved reports.

Contact

Questions about this policy: privacy@torontozoning.com.