Privacy Policy

Effective September 12, 2026

Plain-language summary: We store the property/owner lists you upload, the contact information our data provider returns, and your account/billing details. We use a small number of named vendors to run the Service (hosting, database, data lookups, email, payments) and don't sell your data. See Section 5 for how to delete everything.

1. Who this applies to

This Privacy Policy describes how SkipTraceToday (operated by Charles Collantes — see the Terms of Service for the full description of who you're contracting with) collects, uses, stores, and discloses information in connection with the SkipTraceToday website and application (the "Service").

2. What we collect

Account information: your name and email address (via Google sign-in), organization name, and role within your organization.
Data you upload: property/owner CSVs you import for skip tracing — names, addresses, and any owner information already in your file.
Lookup results: contact information (names, phone numbers, email addresses) our data provider returns for the addresses/names you submit, plus the input, timestamp, and permissible-purpose version you certified for every lookup.
Billing information: plan tier, credit balance, transaction history, and PayPal-side identifiers (subscription/order IDs) — we do not receive or store your full payment card or bank details; those are handled entirely by PayPal.
Usage data: which features you use, when, and basic technical data (IP address, browser) needed to operate and secure the Service.

3. How we use it

To run the Service: clean your uploads, run the traces you confirm, and deliver results.
To bill you and maintain your credit balance.
To send transactional email (invites, scheduled-trace delivery, billing receipts, security/error notices).
To maintain the permissible-purpose audit trail described in the Terms of Service, which is also how we respond if a lookup is ever disputed.
To secure and improve the Service (fraud/abuse prevention, debugging).

We do not use your uploaded lists or lookup results to train any model, and we do not sell your data or your customers'/subjects' data to third parties.

4. Who we share it with

We use the following vendors ("subprocessors") to run the Service. Each only receives the data it needs to do its job:

Supabase — database and file storage for your uploaded CSVs, results, and account data. Hosted on Supabase's infrastructure.
Tracerfy — the skip-trace data provider. Receives the addresses/names you submit for tracing and returns matched contact information.
Resend — sends transactional email on our behalf (invites, delivery/failure notices, receipts).
PayPal — processes subscription and top-up payments. We never see your full payment details.
Railway — hosts the background automation (n8n) that cleans files and runs traces.
Vercel — hosts the web application itself.

We do not otherwise share your data with third parties, except: to comply with a legal obligation (subpoena, court order), to protect the rights/safety of SkipTraceToday or others, or if the business itself is sold or transferred (you'd be notified first).

5. Data retention and deletion

We keep your data for as long as your organization exists. You (any organization owner) can request deletion at any time from Settings → Danger Zone. This starts a 30-day grace period — long enough to cancel if requested in error — after which your organization record, uploaded files, cleaned/results CSVs, and Scheduled Trace deliveries are permanently deleted from Storage and the database. Audit-log records of the deletion itself (that it happened, and when) are retained as our own compliance record, but no longer reference any recoverable personal data.

6. Your choices

You can review and export your data (contacts, results) at any time from the app.
You can request organization deletion at any time, per Section 5.
You can unsubscribe from non-transactional email where offered; transactional email tied to actions you take (invites, delivery notices, billing) can't be turned off while your account is active, since it's how the Service delivers what you asked for.

7. Security

We rely on our vendors' infrastructure security (Supabase, Vercel, Railway) and use row-level security policies so an organization's data is only ever readable by its own members. No method of transmission or storage is 100% secure; we can't guarantee absolute security, but we don't treat that as an excuse not to try.

8. International use

SkipTraceToday is operated from the Philippines and primarily serves U.S.-based real estate customers. By using the Service, you understand your data may be processed and stored outside your home country, including in the United States (by our U.S.-based vendors) and the Philippines.

9. Children

The Service is not directed to, and we do not knowingly collect data from, anyone under 18.

10. Changes to this policy

We may update this policy from time to time; the effective date above will change when we do. Material changes will be communicated the same way as Terms of Service updates.

11. Contact

Questions about this policy, or to exercise any privacy right described here: personal.charlescollantes@gmail.com

Not legal advice. This document is a good-faith starting point, not a substitute for review by a licensed attorney — particularly around state-specific privacy regimes (e.g. California's CCPA/CPRA) if your usage grows. See the Terms of Service for the same caveat on that document.