Privacy Policy

Who is responsible

HeritageDeed is operated by HeritageDeed, which is responsible for the personal information described here. Contact: support@heritagedeed.com.

What we collect

When you place an order

• your email address;
• the property address, state, county and parcel number you search, and the report type;
• payment status and identifiers from our payment provider (for example a checkout ID). We never receive your card number; Creem handles payment details.

When you visit the site

• technical data in server and security logs: IP address, browser user agent, pages requested and timestamps;
• Cloudflare, which protects and delivers the site, may set strictly necessary security cookies. We do not use analytics, advertising or tracking cookies.

When you contact us

the content of your email and the address you send it from.

Information about other people in reports

Reports are compiled from public records and therefore contain information about property owners and other parties, such as names, mailing addresses, recorded documents and court filings. We obtain it from government sources (for example county recorders, assessors, city agencies and courts) to provide title research about real property. If a record is wrong, the office that maintains it is the place to correct it. You can also contact us about information in a report; we will respond as required by applicable law.

How we use information

• to run your search, deliver your report and email you the link and receipt;
• to provide support, handle refunds and resolve disputes;
• to keep the service secure, prevent fraud and abuse, and fix problems;
• to meet legal, tax and accounting obligations.

We do not use your information for advertising and we do not sell or rent it.

Who we share it with

Only with service providers that help us run the service, for the purposes above:

• Creem (Armitage Labs OÜ, Estonia), our merchant of record, which processes payments, taxes and receipts under its own privacy policy;
• Hetzner Online, which hosts our servers in Helsinki, Finland;
• Cloudflare, which delivers and protects the website;
• DeepInfra, which runs the AI model that writes the report summary. It receives public-record data from the report, not your email or payment information;
• OpenStreetMap Nominatim and Komoot Photon, which suggest addresses as you type: the text you enter in the address field is sent from your browser to them;
• our email delivery provider, to send your report link and receipts.

We may also disclose information if required by law, to protect our rights or users, or in connection with a sale or reorganisation of the business.

How long we keep it

We keep order records and generated reports so you can download your report again and so we can meet tax and accounting obligations (records of sales are kept for up to seven years). Database backups are kept for 14 days. Server and security logs are kept only as long as needed for security and troubleshooting. You can ask us to delete your order data sooner; we will, except where we must keep it by law.

Your rights

Depending on where you live, you may have the right to know what personal information we hold about you, get a copy, correct it, delete it, or object to or limit certain uses. Residents of California and other US states with consumer privacy laws have these rights under those laws; we do not sell or share personal information for cross-context behavioural advertising, and we will not discriminate against you for exercising your rights. If you are in the EEA or UK, you also have rights under the GDPR, including the right to complain to your data protection authority; our legal bases are performance of a contract (your order), legitimate interests (security, fraud prevention, providing public-record research) and legal obligation (tax and accounting).

To make a request, email support@heritagedeed.com from the address you used to order. We may need to confirm your identity and will reply within the time the law requires (generally 30 to 45 days).

Security

All traffic is encrypted with HTTPS, payment details never touch our servers, and access to our systems is restricted. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects it, as the law requires.

International transfers

Our servers are in the European Union (Finland). Our providers may process data in the United States and other countries, with safeguards required by applicable law.

Children

The service is for adults and is not directed to children under 18.

Changes

We will post any changes to this policy here with a new date. Material changes will be highlighted on this page.