Privacy Policy

Effective date: May 3, 2026

Introduction

Macam Labs, LLC ("we", "us", or "our") operates the Corbel platform (the "Service"), a data analytics platform for the construction and real estate industry. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

Information We Collect

Account information

When you create an account, we collect your name, email address, and password. Authentication is handled by Supabase Auth. We do not store your password directly — it is managed by Supabase using industry-standard hashing.

Uploaded contacts

You may upload contact lists (CSV files) containing names, email addresses, phone numbers, and company names. This data is used solely to match your contacts against public permit records and is stored in our database.

Usage data

We collect basic usage analytics to understand how the Service is used and to improve it. This may include pages visited, features used, and general interaction patterns. We use Vercel Analytics for this purpose.

Billing data

When you subscribe to a paid plan, our payment processor, Stripe, Inc., collects and processes your payment method and billing information on our behalf. We receive a Stripe customer identifier and subscription metadata (plan, status, billing dates) but do not store your full card details. Stripe is PCI-DSS compliant; their handling of your payment data is governed by Stripe's privacy policy.

Public Data

The Service displays permit and entity data sourced from public data sources. This is public data — not user data. It includes permit filings, project details, and the names of organizations and individuals listed on public permit records. We aggregate and index this data to make it searchable.

How We Use Your Information

  • To provide and maintain the Service
  • To authenticate your identity and secure your account
  • To match your uploaded contacts against public permit records
  • To send you important service-related communications (e.g., account verification, security alerts)
  • To improve the Service based on usage patterns

We do not sell your personal information to third parties.

Third-Party Services

We use third-party service providers for hosting, database storage, authentication, payment processing, and analytics. Our payment processor, Stripe, processes your card and billing details to charge your subscription and manage refunds, disputes, and tax compliance. Other providers process your data solely to operate the Service on our behalf. We do not share your personal information with any other third parties, except as required by law.

Your Rights

You have the right to:

  • Access your data — View the personal information associated with your account through the Service
  • Delete your contacts — Remove any uploaded contact data at any time through the Service
  • Delete your account — Request complete account deletion through your account settings or by contacting us, which will remove your personal data from our systems
  • Update your information — Modify your profile information through your account settings

Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data from our systems within a reasonable timeframe. Uploaded contact data is deleted immediately when you remove it through the Service. Aggregated, anonymized usage data may be retained indefinitely.

Security

We take reasonable measures to protect your personal information, including using encrypted connections (HTTPS), secure authentication (Supabase Auth with hashed passwords), and access controls on our database. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect. The "Effective date" at the top of this page indicates when the policy was last updated.

Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at support@corbeldata.io.