Privacy Policy

Last updated: November 2, 2025

This Privacy Notice for AppealArc ("AppealArc," "we," "us," or "our") explains how we collect, use, disclose, and protect personal information when you use our websites and services (the "Services"), including when you:

  • Visit https://appealarc.com or any site that links to this Privacy Notice;
  • Use AppealArc to analyze property information and prepare property‑tax appeal materials; and
  • Engage with us in related ways (e.g., support, sales, or events).

Questions? Email [email protected].

We act as the "business" (also called "controller") for the personal information we process through the Services.

1. What information do we collect?

a) Information you provide to us

The information we collect depends on how you interact with the Services.

  • Account & contact information. Name, email address, password hash (we do not store plain‑text passwords).
  • Property information you submit. Street address, parcel/APN, assessor details, and any documents or photos you upload (e.g., assessment notices, comps, supporting materials).
  • Support & communications. Messages you send us and any files you attach.
  • Payment information. We use Stripe to process payments. We do not collect or store full credit/debit card numbers or CVV; the processor collects that information directly and gives us limited billing details (e.g., last four digits, card brand, expiration month/year, payment status).

All personal information you provide must be accurate and current.

b) Information collected automatically

When you use the Services, we automatically collect device and usage information such as IP address, browser/OS, pages viewed, timestamps, referral URLs, and event and error logs. We use cookies and similar technologies for functionality, security, and (if you consent) analytics and advertising.

c) Information from other sources

To power the Services, we may obtain property and comparable‑sales data from public records (e.g., county assessor/tax rolls, open GIS datasets) and trusted data vendors. We may also receive limited information from service providers (e.g., analytics, anti‑fraud) to maintain and improve the Services.

2. How do we process your information?

We process personal information to:

  • Provide and improve the Services, including retrieving assessor and comp data relevant to your property and generating appeal outputs for your use;
  • Operate, maintain, and secure our infrastructure, troubleshoot and fix issues, and monitor performance;
  • Communicate with you about the Services (e.g., transactional emails, support, changes);
  • Process payments and manage subscriptions;
  • Comply with legal obligations and enforce terms; and
  • Develop and improve features using aggregated or de‑identified data. We do not publicly disclose any single user's submissions without consent.

If you opt in to marketing communications, we will send you updates you can unsubscribe from at any time.

3. When and with whom do we share personal information?

We share information with service providers that help us run the Services, under contracts that restrict their use of your data for their own purposes. These may include:

  • Hosting & infrastructure/CDN
  • Payments: Stripe
  • Analytics
  • Error/performance monitoring
  • Email & communications
  • (Optional) Advertising/retargeting (only if you enable advertising cookies)

Business transfers. If we sell or transfer all or part of our assets or transition the Service to a new owner, your information may transfer as part of that transaction, consistent with applicable law.

4. Cookies and other tracking technologies

We use strictly necessary cookies to operate the site. With your consent, we also use analytics cookies and, if enabled, advertising/retargeting cookies and pixels. You can manage your preferences through your browser settings.

Where required by U.S. state law, we treat certain uses of advertising cookies as a "sale" or "sharing" of personal information. You can opt out by enabling GPC in your browser.

5. How long do we keep your information?

We retain personal information only as long as necessary for the purposes described here (or as required by law). Unless stated otherwise:

  • Account/profile data: life of the account + 24 months
  • Property queries & generated outputs: 24 months
  • Server and security logs: 90–180 days
  • Support messages/attachments: 24 months
  • Billing/transaction records (from our processor): up to 7 years for tax/accounting

Backups may persist for limited periods after deletion.

6. How do we keep your information safe?

We implement reasonable technical and organizational safeguards, including encryption in transit and at rest, MFA for administrative access, least‑privilege access controls, regular patching, and monitoring. No method is 100% secure; transmission is at your own risk.

7. Do we collect information from minors?

No. We do not knowingly collect data from or market to individuals under 18. If you believe a minor provided us personal information, contact [email protected] and we will delete it. We do not knowingly sell or share minors' personal information.

8. Your privacy rights (general)

Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information, and to withdraw consent where we rely on consent. Submit requests at [email protected]. We will verify and respond consistent with applicable law.

You can opt out of marketing emails using the unsubscribe links in those emails; we may still send transactional messages (e.g., receipts, service notices).

9. Do‑Not‑Track & Global Privacy Control

Because no uniform industry standard for Do‑Not‑Track (DNT) exists, we do not respond to DNT signals. We do honor Global Privacy Control (GPC) where required.

10. U.S. state privacy rights (including California)

If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have the rights listed below (subject to legal exceptions and verification):

  • Know/access what personal information we process and how we use it;
  • Correct inaccuracies;
  • Delete your personal information;
  • Obtain a portable copy of your information;
  • Opt out of (i) the sale of personal information, (ii) sharing for cross‑context behavioral advertising, and (iii) certain profiling;
  • Appeal our decision on your request (we'll tell you how to appeal if we decline a request);
  • Limit the use/disclosure of sensitive personal information (SPI) where applicable.

Exercise these rights via [email protected]. You may use an authorized agent; we may require proof of authorization and identity. We honor GPC signals for opt‑outs.

Categories of personal information we collect (past 12 months)

The table below reflects what AppealArc typically collects through the Services. "Examples" are illustrative; see Sections 1–4 for details.

CategoryExamplesCollected
A. IdentifiersName, email, IP address, account IDYES
B. Customer Records (Cal. Civ. Code §1798.80(e))Name, contact/billing detailsYES
C. Protected Classification CharacteristicsAge, race, ethnicity, etc.NO
D. Commercial InformationPurchases/subscriptions, transaction historyYES
E. Biometric InformationFingerprints, voiceprintsNO
F. Internet/Network ActivityBrowsing history, usage logs, interactions with our site/appsYES
G. Geolocation DataCoarse location derived from IPYES
H. Audio/Visual/ElectronicCall recordings, imagesNO (unless we notify you and obtain consent)
I. Professional/EmploymentBusiness contact/job applicant dataNO (except applicants)
J. Education InformationStudent recordsNO
K. InferencesProfiles drawn from the above for marketingNO (we use only limited analytics)
L. Sensitive Personal InformationAccount log‑in with password; precise geolocation; SSN; card + CVVYES (account log‑in only) — we do not collect precise geolocation, SSN, or full card numbers/CVV

Sale/sharing. We do not sell personal information. If you enable advertising cookies, certain data (mainly F. Internet/Network Activity) may be shared for cross‑context behavioral advertising; opt out via GPC. We do not sell or share the personal information of consumers we know are under 16.

Sensitive personal information. We use SPI only for permitted purposes (e.g., to provide the service, secure accounts) and not to infer characteristics. Because we do not use SPI for additional purposes, the CPRA "Right to Limit" typically does not apply; if you believe it should, contact us to request limitation.

Verification & appeals. We will verify your request using information we already hold or by asking for additional information. If we deny your request, you may appeal by replying to our decision email with "Appeal" in the subject line; we will explain the outcome and your options to contact your state Attorney General if you remain unsatisfied.

11. International users & data transfers

We are based in the United States, and we process information in the U.S. If you access the Services from outside the U.S., you understand your information may be transferred to, stored in, and processed in the U.S., where privacy laws may be different from those in your jurisdiction.

12. Changes to this notice

We may update this Privacy Notice from time to time. When we do, we will revise the "Last updated" date and, if changes are material, provide an additional notice (e.g., by email or prominent posting). Please review this Notice periodically.

13. How to contact us

Email: [email protected]

Mail:
AppealArc
303 Portofino Dr
San Carlos, CA 94070
United States

14. How to review, update, or delete your data

You can request access, corrections, deletion, or a copy of your data at [email protected]. We will verify and respond consistent with applicable law and will not discriminate against you for exercising your rights.