StreetLens Privacy Policy

The Service involves several different groups of people, and we treat their information differently:

• Customers — the management companies and municipal departments that subscribe to StreetLens. The Customer is the account holder and the party we contract with.
• Users — the individuals who log in and use the Service on a Customer's behalf, such as CAMs, administrators, and reviewers.
• Website visitors — anyone who browses our marketing website.
• Individuals appearing in captured footage — homeowners, residents, and members of the public whose property, vehicles, or persons may incidentally appear in video captured from public roadways. These individuals are not our customers or Users, but their information may be present in the data we process. Section 10 addresses them specifically.

Throughout this policy, "you" generally refers to Customers, Users, and visitors. Where a section concerns individuals in captured footage, we say so explicitly.

2.1 Information You Provide

• Account and contact information: first and last name, work email address, management company or department name, and password (stored only as a secure hash — we never store plaintext passwords).
• Billing information: when you subscribe, payment details are collected and processed by our payment provider, Stripe. StreetLens does not store or process your full card or bank account numbers. We retain only limited information such as card brand, the last four digits, and billing status. See Section 6.
• Communities and properties: community and association names, addresses, and contact details you enter to set up inspections.
• Homeowner and resident records: names, addresses, lot or unit identifiers, governing-document (CC&R) or municipal-code references, and violation or cure history that you enter or that is generated through your use of the Service.
• Support and communications: information you provide when you contact us, request support, or respond to surveys.

2.2 Information Captured Through the Service

• Video footage: dual-camera video recorded by a User driving a community or municipal zone, captured from public roadways using a mounted mobile device.
• GPS and location data: geographic coordinates and route tracks recorded during an inspection drive, used to match conditions to property addresses and to produce coverage and route maps.
• Extracted images: still frames extracted from the video that may depict a property condition.
• Inspection outputs: Conditions Reports, Property Condition Records, Community Health Scores, route maps, and violation-letter drafts generated from the above.

2.3 Information Collected Automatically

• Usage and device data: log data, IP address, browser and device type, app version, timestamps, and information about how you interact with the Service.
• Cookies and similar technologies: our website uses cookies and similar technologies for authentication, preferences, security, and analytics. You can control cookies through your browser settings; disabling some cookies may limit functionality. See Section 11.

We do not knowingly collect information from children, and the Service is not directed to children under 18. See Section 12.

We use information to:

• Provide, operate, and maintain the Service, including capturing inspections, generating reports and Property Condition Records, and producing violation-letter drafts for Customer review.
• Perform our AI plus human-in-the-loop review process — see Section 4.
• Authenticate Users and protect account security, including enforcing strict isolation between Customers' data.
• Process subscriptions, trials, billing, invoices, refunds, and related notifications.
• Communicate with you about your account, service updates, security notices, and (where permitted) relevant product information.
• Provide customer support and respond to your requests.
• Monitor, troubleshoot, and improve the Service, including the accuracy of our condition-detection and GPS-matching systems.
• Comply with legal obligations and enforce our agreements.

We do not sell your information, and we do not use captured video, images, or GPS data for advertising or for any purpose other than providing the Service to the Customer that generated it. Captured footage is never shared, sold, or repurposed beyond producing that Customer's reports.

Inspection data is processed in two stages:

1. Automated pre-filtering. Our software extracts frames from uploaded video and scores them for the likelihood of containing a property condition. This reduces the volume of imagery a human reviews.
2. Human review. A trained member of our review team verifies each potential condition, writes a neutral factual description, and matches GPS coordinates to property addresses. A condition is never automatically treated as a violation. Only the Customer's CAM or official decides whether a condition warrants action.

We share information only as described below:

• Within the Customer's organization. Users authorized by a customer can access that Customer's data according to their role and permissions. We enforce strict tenant isolation so that one Customer can never access another Customer's data.
• With service providers (sub-processors) who perform functions on our behalf, under contractual confidentiality and security obligations. These include:
• Amazon Web Services (AWS) — cloud hosting, video and image storage, processing, and database services.
• Stripe — payment processing, subscription billing, and payout services.
• Email delivery providers (such as Amazon SES or SendGrid) — transactional and notification emails, including violation-letter delivery where the Customer uses that feature.

Subscriptions and payments are handled by Stripe. When you subscribe, you provide payment details directly to Stripe through its secure checkout. StreetLens never receives or stores your full payment card or bank account numbers. PCI compliance for card handling is delegated to Stripe. Stripe's handling of your payment data is governed by Stripe's own privacy policy. We retain only limited, non-sensitive billing metadata needed to manage your subscription.

StreetLens is based in the United States and our review operations are based in different global remote locations. If you are located outside these jurisdictions, your information will be transferred to and processed in countries that may not provide the same level of data protection as your home jurisdiction. By using the Service, you understand and consent to this transfer and processing. We take steps to ensure that recipients of your information are bound by appropriate confidentiality and security obligations.

We retain information for as long as needed to provide the Service and for legitimate business and legal purposes. Our standard retention periods include:

• Video footage and extracted frames: retained for approximately six (6) months, then moved to cold archival storage, and deleted at approximately twelve (12) months unless the Customer has purchased extended retention.
• Free-trial data: if you complete a free trial and choose not to subscribe, you may request deletion of your data, and we will delete it on request consistent with our practices.
• Post-cancellation inspection reports: historical reports generally remain viewable for ninety (90) days after a trial expires or a subscription is canceled, after which they are archived to cold storage and can be restored on request.
• Removed-community data: inspection data for a community removed from an active subscription is generally retained for ninety (90) days, then archived.
• Account and configuration data: retained while your account exists, and afterward as needed so that a Customer can restore its account by re-subscribing, unless deletion is requested.

We may retain certain information longer where required by law, to resolve disputes, or to enforce our agreements. When we delete information, we do so in a manner designed to prevent its further recovery or use.

We use administrative, technical, and organizational safeguards designed to protect information, including:

• Tenant isolation enforced at the application and database level so Customers' data cannot cross between accounts.
• Encryption in transit (TLS) and encryption of sensitive stored credentials.
• Hashed passwords (we never store plaintext passwords).
• Access controls and role-based permissions limiting who can view or act on data.
• Audit logging of sensitive operations.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your information, we will notify you and any relevant authorities as required by applicable law.

Because inspections are recorded while driving public roadways, captured footage may incidentally include images of homes, yards, vehicles, license plates, and people. We want to be clear about how we treat this:

• Footage is captured from public roadways for the purpose of documenting property conditions on behalf of the association or municipality responsible for them.
• We use this footage only to generate the Customer's condition records and reports. We do not use it for surveillance of individuals, for advertising, or for any unrelated purpose.
• Footage is subject to the retention and deletion practices in Section 8.
• Where available, configurable measures (such as blurring of faces or plates on longer-retained footage) may be applied.

Our website uses cookies and similar technologies to keep you signed in, remember preferences, secure the Service, and understand how the website is used. You can set your browser to refuse some or all cookies, though parts of the website may not function properly as a result. Because there is no consistent industry standard for "Do Not Track" signals, our website does not currently respond to them.

The Service is intended for business use by adults. We do not knowingly collect personal information from anyone under the age of 18. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

Depending on where you live, you may have rights regarding your personal information, such as the right to access, correct, delete, or obtain a copy of it, or to limit certain processing. Florida residents and residents of other states with applicable privacy laws may have specific rights under those laws. We do not sell personal information.

To exercise a right, contact us. We will verify your request and respond as required by applicable law. If you are a User acting on behalf of a Customer, some requests may be directed to that Customer as the controller of the relevant data, and we will assist as appropriate.

You may also opt out of non-essential marketing emails at any time using the unsubscribe link in those messages; we will still send you transactional and account-related messages.

The Service may link to third-party websites or services that we do not control. This policy does not apply to those third parties, and we are not responsible for their privacy practices. Review their policies before providing information.

We may update this Privacy Policy from time to time. Your continued use of the Service after an update means you accept the revised policy.

If you have questions about this Privacy Policy or our data practices, contact us.