Privacy Policy

Effective August 1, 2026

Controller: ERROW LLC (“Errow”), 301 S McDowell Street, Suite 125 - 1497, Charlotte, NC 28204, United States, privacy@errow.io.

1. Scope

This policy covers (a) information about you, our user, and (b) the business information Errow compiles and analyzes. These are handled differently, so we address both.

2. Information about you (our users)

• Account: name, email, password (hashed), and the location and business type you provide at signup.
• Billing: handled by Stripe; we store a customer/subscription reference and plan status, not full card numbers.
• Usage: searches, unlocks, exports, and product interactions, used to run and improve the Service and enforce limits.
• Technical and access data: your IP address, browser user agent, and timestamps for account and product events (signup, terms acceptance, sign-ins, searches, unlocks, exports, scans). We keep these access records to secure accounts, prevent abuse, meet our legal and accounting obligations, and evidence legitimate account activity in payment disputes.
• Communications: emails we send (verification, account, opportunity alerts) and your preferences.

How we use it: to provide and secure the Service, process payments, send transactional and (with consent) alert emails, enforce plan limits, prevent abuse, and comply with law. We do not sell your personal information.

3. Business information we process

Errow compiles publicly available information about local businesses (e.g., business name, address, phone, website, public social profiles) and generates analysis of their public web presence. Some of this may relate to sole proprietors and thus constitute personal data under some laws. We process it for the legitimate business purpose of providing business-development intelligence to our users. Business owners can request removal by contacting privacy@errow.io.

4. Service providers (processors)

We share data as needed with providers who act on our behalf, under contract, including: Stripe (payments), SendGrid (email), Supabase (database/auth/hosting), Mapbox (geocoding/mapping), and our data-collection provider. They may only use the data to provide services to us.

5. Cookies and analytics

We use necessary cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking.

6. Data retention

We keep user account data while your account is active and as needed for legal, tax, and security purposes. Compiled business information is retained as part of the Service and updated or removed per our processes and valid removal requests.

7. Your rights

Depending on where you live (e.g., California/CCPA, EU-UK/GDPR), you may have rights to access, correct, delete, or restrict processing of personal information, and to opt out of certain processing. To exercise them, contact privacy@errow.io. Business owners seeking removal of a listing can request it by emailing privacy@errow.io. We don’t discriminate against you for exercising your rights.

8. Email choices

Transactional emails (verification, account, billing) are necessary to the Service. Marketing and opportunity-alert emails include an unsubscribe link and honor opt-outs; you can also manage alerts in your Account settings.

9. Security

We use reasonable technical and organizational measures (encryption in transit, hashed credentials, access controls, server-side gating of sensitive data). No system is perfectly secure.

10. Children

The Service is not directed to anyone under 18, and we don’t knowingly collect their information.

11. International

We operate in the United States; if you use the Service from elsewhere, you consent to processing in the U.S.

12. Changes

We may update this policy; material changes will be posted with a new effective date.

13. Contact

privacy@errow.io · 301 S McDowell Street, Suite 125 - 1497, Charlotte, NC 28204, United States