Privacy Policy

What we collect

Only what the service needs to do its job:

• Account basics: your email address and login credentials.
• Your intake answers: county, acreage, ownership details as you enter them, target species, selected practices — everything the wizard asks.
• Property boundary data you provide or select (parcel selections, uploaded boundary files).
• Field activity logs and photos you capture, including the GPS location recorded at capture time.
• Every document the service generates for you.
• Service measurements: generation timings and outcomes, plus intake step visits, forward/back navigation, visible time on a step, and successful generation or account saves. These measurements do not include your answers, names, county, coordinates, photos, page URLs or account ID.
• If you join the waitlist: the email address you submit.
• When payments go live: payment records. Card details go directly to Stripe, our payment processor — we never see or store card numbers.

Where it lives

Your data is stored with Supabase (our database and file-storage provider): structured data in Postgres, photos and generated documents in private storage buckets tied to your account and served only through short-lived signed links. Access rules are enforced at the database layer so your rows and files are readable by your account only. The web application runs on Vercel.

When the service drafts the narrative sections of your plan, the relevant intake answers are sent to our AI provider (Anthropic) to generate that text. Under the provider’s commercial API terms, API data is not used to train its models. Your photos are not sent to the AI provider.

Public map data (aerial imagery, soils, topo) is fetched from government sources (USGS, NRCS, TxGIO) to build your map exhibits; those requests include your tract’s coordinates, because that is what a map is.

What we never do with your data

• We do not sell your data. Ever. To anyone.
• We do not run third-party advertising or hand your data to ad networks.
• We do not share your information with any appraisal district, TPWD, the Comptroller, or any government body — you file your own documents, and the sharing is yours to do. (Like anyone, we would have to comply with a valid legal order, and if that ever happened we would tell you unless the order forbade it.)
• We do not use your land data to build products for other people.

Getting your data out

Your dashboard has a one-click export: a zip with every generated document, your activity logs as a spreadsheet-friendly CSV, and your photos. No lock-in, no request form, no waiting on us.

Deleting your data

Email support@acresteward.com from your account address and ask. We will delete your account and its data — intake answers, documents, logs, photos — within 30 days, and confirm when it is done. Two honest carve-outs: records we are legally required to keep (for example, purchase and tax records once payments exist) are retained as required, and residual copies in encrypted backups age out on the backup schedule rather than instantly.

Export first if you want your documents — deletion is permanent.

Cookies and tracking

We use cookies to keep you signed in and to limit repeated expensive requests. There are no third-party analytics or advertising trackers on the site.

Our own intake measurements use a random visit ID held only in page memory. It resets when you reload or leave the intake and is not linked to your account or plan. We skip these measurements when your browser sends Do Not Track or Global Privacy Control.

We store measurements in our own Supabase database and remove observations older than 30 days in a weekly sweep (at most 37 days). Generation diagnostics may include an opaque job ID so we can investigate failures. For abuse limits, a daily-changing hash of the network address is held in a separate short-lived counter; it is never attached to intake events.

Security, honestly stated

Access to your rows and files is enforced by database-level row security and private, signed-URL-only storage — not just by application code. Traffic is encrypted in transit. No one can honestly promise a breach is impossible; if one ever affects your data, we will tell you promptly and plainly.

A few more things

• This service is for landowners and land managers — adults. It is not directed to children, and we do not knowingly collect data from anyone under 18.
• If we make a material change to this policy, we will post it here with a new effective date and email account holders.
• Questions: support@acresteward.com.