Legal
Privacy Policy
Civexa AI is a service operated by MINAC GROUP LLC, a Washington limited liability company ("Civexa," "we," or "us"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.
A plain-language summary. The full policy below governs; if anything conflicts, the full policy controls.
| What we collect | Your name and email, the addresses/reports you generate, basic billing records (via Stripe — we never see full card numbers), and standard technical logs. |
| Why | To run the Service, generate and save your reports, manage your account and billing, and keep the Service secure. |
| Do we sell your data? | No. We do not sell or rent your personal information, and we don't use third-party advertising or tracking cookies. |
| Who we share with | Only service providers that help us operate — payment (Stripe), maps/geocoding (Mapbox), AI text assembly (Anthropic), email delivery, and hosting — plus public government data sources we query for a report. |
| Data used with AI | The address/coordinates you search may be sent to AI to help assemble report text. We do not send your name, email, or account details to AI providers. |
| Your controls | Delete your account and data yourself in your profile at any time; view or correct your info; email us to request a copy. |
| Retention | Kept while your account is active; erased promptly on deletion, except de-identified billing records retained as tax/audit rules require. |
Information we collect
- Account information: your name and email address. Your password is stored only as a one-way hash, never in plain text. If you turn on two-factor authentication, we store the secret needed to verify your codes.
- Searches and reports: the property addresses and cities you look up, and the feasibility reports and dashboards you generate. We save your report history so you can revisit a past report without paying for it again.
- Billing information: our payment processor (Stripe) handles your card details. We never receive or store full card numbers. We keep a billing record of your plan, amounts, and dates, and a Stripe customer reference.
- Usage and technical data: basic run records (whether a report succeeded and how long it took), and standard log data such as browser type and access times. We use your IP address briefly, in memory, to rate-limit abuse; we do not keep a long-term log of it.
- In your browser: we store a sign-in token in your browser's local storage so you stay logged in. We do not use third-party advertising or tracking cookies.
How we use information
- To run the Service, generate your reports, and let you revisit past reports.
- To manage your account, runs, credits, and subscription.
- To send account, verification, and support emails.
- To keep the Service secure and prevent abuse.
Who we share it with
We do not sell your personal information. We share only what each provider needs to do its job:
- Stripe — payments and subscription billing.
- Mapbox — geocoding and maps. When you search an address, that address is sent to Mapbox to locate the parcel.
- Public government mapping services — to build a report we query public records from FEMA, King County, Washington State DNR, the U.S. Census Bureau, and USGS using the address or coordinates you searched. These are queries against public data sources.
- AI services (Anthropic) — we use AI to help assemble report text from zoning and cost references. We do not send your name, email, or account details to these services.
- Email delivery — a transactional email provider (such as Resend) or our mail server sends verification, password-reset, and account emails to your address.
- Hosting — our infrastructure provider hosts the Service.
- Legal — where required by law, or to protect our rights and users' safety.
Your rights and choices
- Delete your account and data yourself: sign in, open your profile, and use "Delete account." This permanently erases your profile, saved searches, and report history. We keep billing records in de-identified form (with your identity removed) only as long as tax and audit rules require.
- Access or correct your data: you can view and update your profile in the app, or email us for a copy of your data.
- Marketing: we only send account and service emails, not marketing blasts.
Depending on where you live, you may have additional rights (for example, under the California Consumer Privacy Act or the Washington My Health My Data Act) to access, correct, delete, or port your data, and to not be discriminated against for exercising them. We honor these requests regardless of where you live. To make a request, email contact@civexa.us.
Data retention
We keep your account and report data while your account is active. When you delete your account, we erase your personal data promptly. We retain de-identified billing records for the period tax and accounting rules require, and we may keep minimal records needed to resolve disputes or meet legal obligations.
Security
We hash passwords, encrypt traffic in transit (HTTPS), keep card data out of our systems entirely, and offer optional two-factor authentication. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.
Children
Civexa is a professional tool and is not directed to children. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
Changes
We may update this policy as the Service changes. We will post the new version here with an updated date, and for material changes we will make a reasonable effort to notify you.
Contact
Privacy questions or data requests: contact@civexa.us. Data controller: MINAC GROUP LLC, Washington, USA.
This policy is provided for convenience and is not legal advice. Have an attorney review it before launch, especially if you serve users outside Washington or process data from the EU/UK.