Privacy Policy

Effective date: March 11, 2026 · Last updated: June 2, 2026

1. Who We Are

New England Provenance LLC ("NE Provenance," "we," "us," or "our") operates the property intelligence platform at neprovenance.com. We are a New Hampshire limited liability company. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Important Distinction: Property Data vs. User Data

NE Provenance handles two fundamentally different categories of information, and it is important to understand the distinction:

Property intelligence (not personal data)

The property data and intelligence we provide is derived from publicly available sources — municipal assessor records, environmental databases, permit records, deed records, aerial imagery, and regulatory databases. This information pertains to properties, not individuals. We do not collect personal information about property occupants beyond what is available in public ownership records (which are themselves public documents maintained by government agencies).

User account data (personal data)

When you create an account or purchase a report, we collect personal information about you as a user of our platform. This Privacy Policy primarily governs how we handle this user account data.

3. Information We Collect

3.1 Information You Provide

  • Name, business email address, and company name (required for subscription accounts)
  • Payment information (processed by our third-party payment processor; we do not store full credit card numbers)
  • Job title, role, and industry vertical (optional)
  • Communications you send to our support team

3.2 Information Collected Automatically

Usage data:

  • Properties viewed, searches performed, reports generated, and features used
  • Session duration, pages visited, and interaction patterns
  • API calls, rate limit consumption, and lookup counts

Technical data:

  • IP address, browser type and version, device type, operating system
  • Referring website or source
  • Date and time stamps

Performance data:

  • Error logs and diagnostic information
  • Response times and service availability metrics

4. How We Use Your Information

  • To provide and maintain our property intelligence services
  • To process transactions, manage subscriptions, and send billing communications
  • To authenticate your identity and enforce plan limits
  • To send administrative messages, security alerts, and service updates
  • To respond to your comments, questions, and support requests
  • To monitor and analyze usage patterns for service improvement
  • To detect, investigate, and prevent unauthorized access, bulk extraction, and other prohibited use
  • To protect our intellectual property and enforce our Terms of Service
  • To comply with legal obligations

What we do NOT do

  • We do not sell your personal data to third parties for marketing purposes
  • We do not share your individual usage data publicly or with competitors
  • We do not use your account information to market third-party products

5. Information Sharing

We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

5.1 Service Providers

We share information with third-party service providers who assist in operating our platform — including payment processing, hosting, analytics (Google Analytics), error monitoring (Sentry), and email delivery (Resend) — but only to the extent necessary for them to perform their services. These providers are bound by their own privacy policies and data processing terms.

5.2 Legal Requirements

We may disclose information if required by law, regulation, legal process, or government request. We will notify you of legal requests unless prohibited by law, and will challenge overbroad requests where possible.

5.3 Business Transfers

If NE Provenance is involved in a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice before your information becomes subject to a different privacy policy.

5.4 Aggregated Data

We may share aggregated, anonymized data that cannot identify you individually — such as usage statistics, market trends, and platform performance metrics.

6. Data Security

We implement commercially reasonable security measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL) and sensitive data at rest
  • Secure authentication and password hashing (passwords are never stored in plain text)
  • Role-based access controls limiting employee access to user data
  • Regular security reviews and infrastructure monitoring
  • API key encryption and secure storage

However, no method of electronic transmission or storage is 100% secure. You acknowledge that you provide information at your own risk and are responsible for maintaining the security of your account credentials.

7. Data Breach Notification

In the event of a data breach affecting your personal information, we will:

  • Notify you within 72 hours of discovering the breach
  • Describe the nature of the breach and data affected
  • Outline steps we are taking to address the breach
  • Advise on steps you can take to protect yourself
  • Notify relevant regulatory authorities as required by law

8. Data Retention

8.1 Active Accounts

We retain your account information, usage data, and transaction history for as long as your account is active or as needed to provide services.

8.2 Deleted Accounts

  • Personal information deleted within 30 days of account deletion
  • Backup systems may retain data for up to 90 days for disaster recovery
  • Payment transaction records retained for 7 years (tax and legal requirements)
  • Anonymized, aggregated data may be retained indefinitely
  • Data required for fraud prevention or active investigations may be retained longer

8.3 Data Export

You may export your data before terminating your account. Contact [email protected] for assistance.

9. Your Privacy Rights

Depending on your jurisdiction, you may have rights to:

  • Access your personal data and receive a copy in a portable format
  • Correct inaccurate data
  • Delete your personal data (right to be forgotten)
  • Restrict or object to certain processing
  • Opt out of non-essential communications
  • Withdraw consent for consent-based processing

To exercise these rights, contact [email protected]. We will respond within 30 days (may extend to 60 days for complex requests). We will verify your identity before fulfilling requests.

10. State Privacy Law Compliance

10.1 New Hampshire

We comply with applicable New Hampshire privacy and data protection laws, including data breach notification requirements under RSA 359-C:20.

10.2 Massachusetts

We comply with Massachusetts data privacy regulations (201 CMR 17.00) including requirements for safeguarding personal information of Massachusetts residents.

10.3 California (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act. We do not sell or share your personal information for cross-context behavioral advertising as defined by the CCPA/CPRA. Google Analytics operates with Restricted Data Processing enabled, which limits Google's use of your data. To exercise your right to know, delete, or opt out, contact [email protected].

10.4 Other Jurisdictions

Residents of Connecticut, Virginia, Colorado, and other states with comprehensive privacy laws may have additional rights. Contact us to exercise any applicable rights.

11. Cookies and Tracking

11.1 Essential Cookies

We use essential cookies to operate the platform — authentication, session management, security (CSRF protection), and load balancing. These are necessary for the Service to function and cannot be disabled.

11.2 Analytics

We use Google Analytics 4 to understand usage patterns and improve the platform. Google Analytics collects information such as pages visited, session duration, and referring sources. We have enabled Restricted Data Processing, which prevents Google from using your data for ad personalization or cross-site tracking. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

11.3 Managing Cookies

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using NE Provenance. You can opt out of Google Analytics using the browser add-on linked above or by configuring your browser to block third-party cookies.

12. Children's Privacy

NE Provenance is a professional business service not intended for children under 18 years old. We do not knowingly collect personal information from children. If we discover we have collected information from a child, we will delete it promptly.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated to registered users with at least 30 days' notice via email or platform notification. Continued use of the platform after changes constitutes acceptance. Previous versions will be available at neprovenance.com/privacy.

14. Contact

For questions about this privacy policy or to exercise your privacy rights: