Privacy Policy

Effective Date: August 30, 2026

1. Information We Collect

• Account information: your email address, required to create an account and deliver your report.
• Location data: the commercial address and business type you submit for evaluation, stored so we can generate and let you retrieve your report. This information, along with any additional business details you provide, may be processed by a third-party AI service to generate the analysis and narrative content of your report.
• Payment information: processed by Stripe. OpenReady receives only a transaction confirmation and the last 4 digits of your card. We never see or store your full card number.
• Usage data: standard server logs and third-party website analytics, such as pages visited, the steps you complete in the report order flow, and report generation events. We do not use advertising networks and we do not run retargeting or cross-site tracking.

2. How We Use Your Information

• To generate and deliver your LocIQ Report.
• To send your report PDF via email.
• To maintain your account and report history.
• To improve the OpenReady service.

We do not sell your data to third parties. We do not use your data for advertising.

3. Data Storage and Security

Your data is stored in Supabase (PostgreSQL), hosted in the United States. Report PDFs are stored in Supabase Storage. We use industry-standard security practices, including encrypted connections (TLS) and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

4. Data Retention

Account data and reports are retained as long as your account is active. You may request deletion of your account and associated data by contacting us. Report PDFs stored in our system are accessible via time-limited signed URLs (7 days per link); links can be regenerated on request.

5. Third-Party Services

OpenReady uses the following third-party services:

• Stripe — payment processing. Your payment information is handled directly by Stripe — we never see or store your card details (stripe.com/privacy).
• Supabase — database and file storage for your account and report history (supabase.com/privacy).
• Resend — transactional email delivery of your report PDF (resend.com/privacy).
• Anthropic (Claude) — processes submitted location and business details to generate the analysis and narrative content of your report (anthropic.com/legal/privacy).
• Google Analytics — website analytics. Sets cookies and collects usage data, including the pages you visit, the steps you complete in the report order flow, the referring source, device and browser information, and an approximate location derived from your IP address. We use it only to understand how the site is used; we do not use it for advertising (policies.google.com/privacy).

Location analysis uses additional third-party APIs and public data sources. No personal information is shared with these services.

6. Cookies

OpenReady uses essential session cookies required for authentication and payment. These are necessary for the site to work and are always active.

Analytics cookies are off by default and require your consent. The first time you visit, a banner asks whether to allow them. Google Analytics is not loaded at all until you choose “Accept” — no analytics script runs, no request is made to Google, and no analytics cookie is set before then. If you choose “Reject”, or simply ignore the banner, Google Analytics stays off permanently. We use Google Consent Mode v2, with every consent signal (analytics, advertising, ad personalisation, and ad user data) defaulting to denied.

If you accept, Google Analytics sets first-party cookies (for example _ga and _ga_*) that persist for up to two years, and we receive the usage data described in section 5. We do not use advertising cookies and we do not sell the data these cookies collect. Your choice is remembered in your browser’s local storage, so the banner does not reappear on every page. To change your mind later, clear this site’s data in your browser settings and the banner will ask again. Declining does not affect your ability to purchase or read a report.

We also use Vercel Web Analytics, which measures aggregate page views without cookies and without collecting personal data. Because it stores nothing on your device and cannot identify you, it is not covered by the consent banner and runs for all visitors.

7. Legal Requests

We may disclose your information if required to do so by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to comply with a legal obligation, protect our rights, or protect the safety of others.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at support@getopenready.com.

Canadian residents: this service is governed by PIPEDA (Personal Information Protection and Electronic Documents Act). California residents: this service complies with the CCPA where applicable.

9. Children's Privacy

OpenReady is not directed at children under 13. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy periodically. The effective date at the top of this page will reflect the most recent version.

11. Contact

Privacy questions: support@getopenready.com.