Privacy Policy

1. Introduction

DrillerDB LLC ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the ProPaving website and software application (the "Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using the Service:

• Account Information: Name, email address, password, and company name when you register
• Billing Information: Payment card details and billing address (processed securely by Stripe)
• Project Data: Project names, addresses, notes, measurements, and geospatial data you create
• Communications: Information you provide when contacting support or submitting feedback

2.2 Information Collected Automatically

When you use the Service, we automatically collect certain information:

• Device Information: Browser type, operating system, device type, and screen resolution
• Usage Information: Pages visited, features used, time spent, and interaction patterns
• Log Data: IP address, access times, and referring URLs
• Location Data: General geographic location based on IP address; precise location only if you use the "Locate Me" feature and grant permission

2.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and authentication status
• Remember your preferences and settings
• Analyze usage patterns to improve the Service
• Ensure security and prevent fraud

You can control cookies through your browser settings, but disabling cookies may affect Service functionality.

3. How We Use Your Information

We use your information for the following purposes:

• Provide the Service: Create and manage your account, process measurements, generate reports, and enable collaboration
• Process Payments: Handle subscription billing and payment processing through Stripe
• Communicate: Send transactional emails, respond to inquiries, and provide customer support
• Improve the Service: Analyze usage patterns, identify issues, and develop new features
• Ensure Security: Detect and prevent fraud, abuse, and unauthorized access
• Legal Compliance: Comply with applicable laws and respond to legal requests

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who assist in operating the Service:

• Stripe: Payment processing and subscription management
• Google: Maps and satellite imagery services
• Vercel: Website hosting and content delivery
• Database Providers: Secure data storage and management
• Email Services: Transactional email delivery

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

4.2 Within Your Organization

If you are part of a company account, your name, email, and project data may be visible to other members of your organization as part of the collaboration features.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. After account termination:

• Account Data: Deleted within 30 days of termination request
• Project Data: Deleted within 30 days unless you export it first
• Billing Records: Retained for 7 years as required for tax and legal purposes
• Anonymized Analytics: May be retained indefinitely in aggregated form

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption: All data is encrypted in transit (TLS/HTTPS) and at rest
• Access Controls: Strict access controls and authentication requirements
• Infrastructure: Hosted on secure, SOC 2 compliant infrastructure
• Monitoring: Continuous security monitoring and incident response procedures
• Password Security: Passwords are hashed using industry-standard algorithms

While we strive to protect your information, no method of transmission or storage is 100% secure. You are responsible for maintaining the security of your account credentials.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information through your account settings
• Deletion: Request deletion of your account and associated data
• Export: Export your project data in standard formats
• Opt-Out: Unsubscribe from marketing communications (transactional emails cannot be opted out)

To exercise these rights, contact us at support@drillerdb.com. We will respond within 30 days.

8. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To make a request, contact us at support@drillerdb.com.

9. International Data Transfers

The Service is operated in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

10. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will delete the information.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: