← Back to Home

Privacy Policy

Last updated: April 16, 2026

1. Information We Collect

Property Data: When you search for a property, we query NYC Open Data (PLUTO dataset) using your address or BBL. We do not store your search queries permanently.

Purchase Data: When you buy an Evidence Packet or Insurance Review, Stripe processes your payment. We store your email address, Stripe session ID, purchase amount, and a link to your generated reports. We do not store credit card numbers — Stripe handles all payment data under PCI-DSS compliance.

Generated Reports: PDF reports are stored in encrypted cloud storage for 30 days to allow re-download access. After 30 days, reports are automatically deleted.

2. How We Use Your Information

  • Generate your property tax evidence packet and/or insurance review letter
  • Deliver your purchased reports via download link and email
  • Process payments through Stripe
  • Improve our service and fix bugs

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Sources

All property data comes from publicly available NYC Open Data datasets, including PLUTO (Primary Land Use Tax Lot Output), NYC Department of Finance Rolling Sales, and the NYC Geosearch API. This data is public record.

4. Third-Party Services

  • Stripe: Payment processing. See Stripe's Privacy Policy.
  • Google AI (Gemini): Generates personalized appeal strategy text within your report. Your property data is sent to Google's API for this purpose only. No personal information beyond property address and assessment data is shared.

5. Data Retention

Purchase records are retained for accounting and legal compliance. Generated PDF reports are stored for 30 days. You may request deletion of your data by contacting us at the email below.

6. Security

We use industry-standard encryption (TLS/SSL), secure cloud storage with row-level security policies, and signed URLs for report delivery. Payment data is handled entirely by Stripe under PCI-DSS standards.

7. Your Rights

You may request access to, correction of, or deletion of your personal data. Contact us at privacy@overassessed.io.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

9. Contact

Questions about this policy? Email privacy@overassessed.io.