Privacy Policy

This policy explains what EasySitePlan collects, why we use it, which services process it, and the choices you have. It applies to easysiteplan.com and the EasySitePlan plan generator and editor.

Effective August 11, 2026

Information we collect

Plan and property information

When you start a plan, we collect the address you enter, the address and jurisdiction matched by our sources, the project type, and any dimensions you provide. We combine that information with parcel records, aerial imagery, flood and easement layers, building footprints, and other public map data for the property area.

We store the generated plan, preview and PDF files, saved edits, plan status, and the secret plan identifier and access key. If you upload a recorded plat, we store that PDF or image with the plan. Uploaded plats are limited to 20 MB.

Information you choose to provide

If an address is not supported and you join the waitlist, we store the email, address, and refusal reason you submit. The separate optional demand question stores only the region, fence, shed, or pool project type, and a broad reason. It does not store the address, email, or free text from that question.

If you answer the optional preview question, we store whether you answered and up to 280 characters of feedback. We try to remove the plan's known address, access key, and token-like values before storing or sending the comment. That filter may not recognize every private detail, so do not include sensitive information. We also store permit-outcome answers and notes you choose to send.

Payment information

Polar Software, Inc. handles checkout as merchant of record. After a purchase, we store the customer email, checkout or order reference, amount, payment status, purchase time, and customer and transaction fields Polar returns to confirm payment and unlock the clean PDF. Card details do not pass through EasySitePlan's servers.

Usage and technical information

Our servers record request IP addresses, timestamps, rate-limit counters, plan-stage events, approved entry-page paths, errors, and approximate city or region information supplied by Cloudflare. PostHog may also receive browser, device, session, and request information with the limited analytics described below.

How we use information

We use information to:

• check whether an address and project are supported;
• generate, save, edit, preview, and deliver a site plan;
• restore access through the secret plan link;
• create checkout, confirm payment, and unlock purchased downloads;
• operate the waitlist and understand unsupported demand;
• prevent abuse, secure the service, diagnose failures, and maintain backups;
• measure whether visitors reach generation, preview, checkout, purchase, and delivery; and
• respond to support, privacy, permit-outcome, and refund requests.

We do not sell personal information. We do not use third-party advertising trackers or use plan data for cross-site advertising.

Product analytics

We use PostHog for limited product analytics. Its browser script receives page paths without URL fragments, a temporary session identifier, technical browser and device details, and signals for rage clicks or dead clicks. Ordinary click events are discarded. We do not intentionally create named person profiles in PostHog.

Our server also sends PostHog coarse events for intake attempts, plan generation, preview, checkout, confirmed purchase, PDF delivery, errors, empty results, structured unsupported-demand answers, and optional preview feedback. These events can include the project type, an approved public entry page, a broad result or failure reason, and whether a deliberate feedback answer was submitted. They exclude the plan address, email, secret link, plan access key, uploaded plat, generated plan, payment payload, and private plan-page URL.

Session recording is currently off, so PostHog does not receive session replays. The browser integration is also configured to mask page text, input values, and sensitive element attributes; strip URL fragments; and exclude canvas content and network headers and bodies if recording is enabled later. Heatmaps and performance capture are off.

Browser storage, cookies, and plan links

EasySitePlan's application does not set tracking cookies. It uses browser local storage for plan access keys, unsaved editor drafts, and guided-checker progress. It uses session storage for temporary analytics and entry-page attribution. Polar's checkout runs as a separate service and may use its own browser storage or cookies under Polar's policy.

Clearing browser data removes those local copies and may remove your convenient access to a plan, but it does not delete server records. The full plan URL contains a secret access key after the # symbol. Anyone with that full link can view and edit the plan, so treat it like a password and share it only with people you trust.

When we share information

We share information only as needed to operate the service, complete a request, comply with law, or protect EasySitePlan and others. The main services and data sources are:

• Cloudflare delivers and protects the site and supplies network information such as IP address and approximate location.
• PostHog Inc. processes the limited product analytics described above.
• Polar Software, Inc. operates checkout, payment, receipts, discounts, and refunds as merchant of record.
• Our hosting and backup providers store the application, database, logs, generated plan files, and operational backups.
• U.S. Census Bureau and local government GIS and assessor services receive address, parcel, or map queries needed to locate the property and jurisdiction.
• USGS, Texas Geographic Information Office, FEMA, Microsoft, and other public map services supply imagery, flood, road, parcel, and building-footprint data for the property area.
• fal.ai processes cropped aerial imagery for the property area to help trace visible structures when that automated step is available.

We may disclose information if reasonably necessary to comply with law or a valid legal request, investigate abuse or fraud, protect rights or safety, or complete a financing, acquisition, reorganization, or sale involving the service. A successor would take over the obligations described in this policy.

Retention

Plan records and files remain on EasySitePlan's server so the secret link can reopen the editor and a purchased plan can be edited or downloaded again. Waitlist entries, first-party events, payment records, and PostHog analytics are also retained for operational, support, security, measurement, and legal needs. We do not currently publish a fixed retention period for those primary records.

Operational backups expire after 14 days. After we delete a primary record, a copy may remain in a backup until that backup expires. Polar, PostHog, Cloudflare, and public data providers maintain information under their own retention practices.

Your choices and deletion requests

EasySitePlan does not currently offer a self-service analytics opt-out. A browser privacy tool that blocks PostHog can stop browser-side pageviews and click-friction signals, but it does not stop the coarse plan-stage events sent by our server. You can skip the waitlist, preview feedback, unsupported-demand question, and permit-outcome questions without losing the core free plan flow.

You may request access to or deletion of a plan, upload, waitlist entry, feedback, or related records we can identify by emailing [email protected]. Include the full plan link or the email used at checkout or on the waitlist so we can locate the right record. We may ask for information needed to verify that you control the plan or email. We may retain records when required for payment, fraud prevention, security, legal compliance, or a dispute.

Security

We use HTTPS, restricted server access, rate limits, signed payment webhooks, backups, and secret plan keys to protect the service. No method of storage or transmission is completely secure. Keep your full plan link private. If you believe a plan link or your information has been exposed, contact us so we can investigate.

Children

EasySitePlan is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. A parent or guardian can contact us to request deletion if they believe a child provided information.

Changes to this policy

We may update this policy when the product, providers, or legal requirements change. We will post the revised policy here and change the effective date. Your continued use after an update is subject to the revised policy.

Contact

For a privacy question or request, email [email protected]. For the product's plan, payment, and refund boundaries, read the Terms of Service.