Privacy Notice
Last updated: October 17, 2026
What we collect
The address you search or buy a report for, and the report generated for it. When you buy, our payment provider Paddle collects your email address, payment details and billing country; we receive your email and a transaction reference so we can send you the report by email. If you create an account: your email address, the sign-in codes we send you (stored hashed) and session records with the IP address they were created from. Our server records standard logs (IP address, endpoint, time taken) for security and reliability.
Your location: if you let your browser share it, the home page map opens on your area. The location stays in your browser; it is not sent to our server or stored. Google’s map service receives the map area it draws, as for any map view. Declining changes nothing else.
LotLens Model
An order for a paper model keeps the pin you set on the house, its address, the house as we measured it and the kits made from it, the email address you send a kit to, and the payment reference once you have paid. The order’s link carries a key: anyone with the link can open the order, so keep it as you would a receipt.
Pictures of the house. Where a street sees the house, we fetch up to four Google Street View pictures of it. Claude, Anthropic’s AI model, marks the walls, windows and doors on them, and we measure from those marks; the pictures are deleted once the house is measured and are never shown or stored. If you add your own photos of the house (up to four), we store each one re-encoded, without its location, time and device data; we keep only the lens’s focal length, to measure from. Claude reads them in the same way. They are never shown or shared, no model is trained on them, and we delete them, with what was read from them, 30 days after your last kit is made; you can take one out at any time before that. Please photograph the house from the street and keep people and number plates out of the picture where you can.
Data about the place. The laser points and the aerial photograph come from public services of the US Geological Survey and the US Department of Agriculture, which receive the house’s location, not yours.
Beta research
While the apps are in early access, we ask each tester once, when they first open an app, with two separate choices, whether we may learn from their use. Nothing is recorded unless you say yes, and you can change both answers at any time on your account page.
Recording how you use the apps. If you allow it, a small script of our own in your browser records the pages you open and how long they are visible, which sections of a report you read and for how long, and what you do: start a report, download its PDF, use “Your numbers” (which mode and how many fields, never the figures you type), change a lot’s front side, set a pin or order a model. We also keep the questions you ask “Ask about this lot” (not the answers). It is stored in our own database, tied to your account, with the device type (phone, tablet or computer) but without your IP address or browser details. Only the LotLens team sees it; it is not sold, shared or used for advertising.
Surveys. If you allow it, we email you up to three short surveys about the beta, the first about two weeks after your first report. Each one has a link to stop them.
Feedback you send us. Your survey answers, and anything you tell us with “Was this right?” or the questions after your first report, are kept with your account, whether or not you allowed recording.
The legal basis for recording and for the surveys is your consent (GDPR Art. 6(1)(a); for the script in your browser, also § 25 of the German TDDDG and the rules like it). Feedback you send us yourself we keep on the basis of our legitimate interest in improving LotLens (GDPR Art. 6(1)(f)); you can object to that at any time. Turning recording off deletes what was recorded; “Delete my usage data” on the account page also deletes your feedback. We delete all of it 90 days after the early access ends, and keep none of it longer than 12 months. Our backups roll over within 56 days, so a deletion reaches them within that time.
Waitlist and beta access
When you join a waitlist or ask for access to the private beta, we keep your email address, the list you chose and the dates you signed up, confirmed and were approved. Nothing else: no name, no IP address with the entry. It counts only after you confirm it with the link we email you; an address that is not confirmed within 7 days is deleted. We use it to email you once when the app opens, or to invite you to the beta, and for nothing else: no newsletter, no advertising. Surveys come only if you allow them in the app (see “Beta research”). Every email we send about it has a link to remove your address, which deletes it at once. Otherwise we delete it when the app has opened and you have had our email, or when the beta ends.
What we do not do
We do not sell personal data or share it for targeted advertising, and we do not use it for profiling that has legal or similarly significant effects on you. We do not collect sensitive personal data as US state privacy laws define it. We do not use cookies for advertising. We do not contact property owners, and owner names and mailing addresses contained in licensed parcel data are never shown in the Service or included in a report.
Who processes data for us
Hetzner (hosting, United States), Cloudflare (network security in front of the site, and storage for the company page’s videos), Paddle (payments and receipts), Anthropic (the written analysis is generated from the report data; in LotLens Model, Claude reads the street-level pictures and your photos to measure the house), Google (maps, imagery, address search, street-level pictures and image rendering), LOVELAND Technologies / Regrid (parcel and zoning data), Resend (email), and the public datasets of FEMA and Esri (flood maps), USDA, USGS, NCES and OpenStreetMap, which receive the lot’s or the house’s location, not yours. Home values by ZIP code come from Census and FHFA files kept on our server; no request leaves it for them. Each provider processes data under its own terms.
How long we keep it
Reports of account holders and their files are kept for at least 12 months. Without an account the online link works for 30 days; the report stays stored, so that you can still claim it by signing in with your purchase email. Look-ups nobody paid for are deleted after 7 to 30 days, with their files. The licensed parcel record behind a report is deleted after 30 days, as our data license requires; the report itself, with what it shows and its PDF, stays for the times above. LotLens Model orders, their models and kits are kept so that you can download a kit again and make other sizes; the photos you add to one are deleted 30 days after its last kit. Sessions expire after 30 days and audit logs after 180 days. Purchase records are kept as long as tax and accounting law requires. You can ask us to delete a report, a model order, your account or your email at any time.
Your rights
You may ask what personal data we hold about you and get a copy in a portable format, ask us to correct or delete it, and object to its processing. We give these rights to everyone who uses LotLens, wherever you live, whether or not your state’s law applies to a company of our size. They include the rights under the consumer privacy laws of California (the CCPA, as amended by the CPRA), Virginia, Colorado, Connecticut, Texas and the other US states that have one, and, for residents of the EU/EEA and the UK, the GDPR.
As we neither sell personal data nor use it for targeted advertising, there is nothing to opt out of; a Global Privacy Control signal is honored as an opt-out of any sale or sharing, of which there is none. We will not treat you differently for using any of these rights.
In the terms of California law, the personal data we collected in the last 12 months falls into these categories: identifiers (email and IP address), commercial information (your purchases), internet activity (server logs and, for testers who allowed it, the beta research described above) and, if you add them to a model order, photographs of a house. It comes from you and from Paddle, is used to provide the Service, and is disclosed only to the providers listed above.
To ask, write to us at info@lotlensai.com or via the About page, or have an authorized agent write for you (we may ask the agent for your signed permission). We confirm a request through the email address it concerns and answer within 30 days. If we decline, you may appeal by replying to our answer; we decide an appeal within 45 days, and if we turn it down you may contact your state attorney general.
Visitors in the EU, the EEA, the UK and Switzerland
The controller of your personal data is Lotlens LLC, 5900 Balcones Dr, Ste 100, Austin, TX 78731-4298, United States; you reach us at info@lotlensai.com.
Why we may process it: to provide the reports, the paper models, the account and the purchases you ask for, including reading the photos you add to a model order (contract, Art. 6(1)(b) GDPR); to keep you on a waitlist or the beta list, which you agree to by confirming your email, and to load Google Maps in your browser, which you allow or decline in our banner and can change under “Privacy settings” (consent, Art. 6(1)(a), and the rules on storing and reading information on your device); and to keep the service secure and working, which is what the server logs, the rate limits and the sign-in records are for (legitimate interests, Art. 6(1)(f)).
Where: our server is in the United States, and so are most of the providers listed above, so your data is processed in the United States, where data-protection law differs from yours.
Your rights under the GDPR and the UK GDPR: access to your data and a copy of it, correction, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. You can withdraw a consent at any time with the link in our emails or by writing to us; that does not affect what we did before. You may also complain to the data-protection authority where you live or work. We make no decision about you by automated means alone that has legal or similarly significant effects.
Children
LotLens is not directed to children. We do not knowingly collect personal data from anyone under 16.
Changes
We will update this notice when our processing changes; the date above shows the current version.