LotRights
DRAFT — pending counsel review. This policy describes how the service is built to behave. It has not yet been reviewed by counsel and may change before launch.

Privacy policy

Effective Sep 8, 2026

LotRights produces plain-English reports about what can be built on a single Fairfax County parcel, assembled from public records. This policy explains what personal information we collect when you use the site, why we collect it, how long we keep it, and how to ask us to delete it.

It also explains how we treat public-record information about property owners, and how an owner can ask us to stop showing their name.

1. What we collect

When you request a free Snapshot we collect your name, email address, an optional phone number, the property address you are asking about, and the project goals you tick (for example “addition” or “pool”). We also record the time you accepted our disclaimer and which version of its text you saw.

When you order a paid report we additionally keep the report itself, the records it was built from, and, for the Verified tier, any deeds, plats or other documents you upload for a licensed reviewer.

When you submit a privacy request we collect the email address and any address or details you provide so we can act on it and reply.

Automatically our servers see your IP address and browser details in the ordinary course of serving pages. We use the IP address in memory to limit abusive request rates; we do not build profiles from it and we do not use third-party advertising or analytics trackers.

Phone number is optional. We do not use it for automated calling or texting.

2. Why we collect it (purpose limitation)

Your contact details and property of interest are collected to deliver the Snapshot and to follow up about paid tiers for that property. They are not sold. They are not shared with third parties except processors (hosting, email, payments) under contract.

We do not use your information for any other purpose without asking you first, and we do not combine it with data from other sources to learn more about you.

4. How long we keep it

  • Snapshot requests with no purchase: personal fields (name, email, phone) are deleted or anonymised after 24 months of inactivity. The anonymised record keeps only the property and the date so that our report counts remain auditable.
  • Purchased reports: the report and the inputs it was built from are kept for 7 years, which covers the period in which a contract claim about the report could be brought in Virginia.
  • Copies of public records retrieved to build a report are kept for as long as that report exists, because every finding cites the record it came from.
  • Privacy requests are kept as a log of what we did and when.

5. Your choices: access and deletion

You can ask us for a copy of the personal information we hold about you, or ask us to delete it, at any time. Use the privacy request form or email support@lotrights.com. We honour these requests within 45 days whether or not a privacy statute requires us to, and we will reply to the address you give us to confirm what was done.

Deletion anonymises every lead record that carries your email address: name and email are replaced with placeholders, phone number is removed, and marketing consent is withdrawn. If you bought a report we keep the report and its records for the period above, but disconnect them from your identity.

We may ask you to confirm the request from the email address on file before acting on it, so that nobody can delete your data by pretending to be you.

6. Information about property owners

Our reports republish information that Fairfax County already publishes about each parcel, which can include the owner’s name and the last sale price. We take that information from the county record as it stands; we do not add to it, do not look owners up elsewhere, and do not build profiles of owners.

If you own a property and would rather your name not appear on report pages for it, use the privacy request form (choose “Remove an owner name from a report”) and give us the address. We will stop showing the owner-name field for that parcel. The county record itself is outside our control and remains the source of truth.

The fact that a particular person asked about a particular address can be sensitive (for example, a buyer under contract). We show that pairing only to you and to our staff. Report pages are reachable only by a private link; anyone you share the link with can see the report but not who requested it.

7. AI processing

The plain-English explanations in each report are written by an AI model (Anthropic’s Claude, accessed through Anthropic’s API) from the structured findings shown alongside them. In the Verified tier, uploaded recorded documents are also sent to the model so that it can extract easements and restrictions for a licensed reviewer to confirm.

We do not send your name, email address or phone number to the model. Narratives are generated from the findings about the property only. Extractions from scanned documents are marked “AI-extracted, pending human review” until a reviewer confirms them.

8. Who else sees the data

We use a small number of service providers to run the site, each under a contract that limits them to processing data on our instructions:

  • Hosting and database (including private file storage for reports and uploaded documents).
  • Email delivery for report links, replies to privacy requests, and opt-in marketing.
  • Payment processing for paid tiers; we do not see or store card numbers.
  • Anthropic, for the AI processing described above.

Licensed professionals who review Verified reports see the report, the uploaded documents, and the property address, but not your contact details unless you choose to share them.

We will disclose information if required by law, and we will tell you when we are allowed to.

9. Security

Every database table is protected by row-level security so that the public site can read nothing directly; the application reads and writes on your behalf server-side. Lead records and reviewer notes are readable only by staff. Report PDFs and uploaded documents live in private storage and are served through short-lived signed links.

No system is perfectly secure. If we learn of a breach affecting your information we will notify you as the law requires.

10. Children

The service is for adults dealing with real property. We do not knowingly collect information from anyone under 18; if you believe a child has given us information, email support@lotrights.com and we will delete it.

11. Changes and how to reach us

When we change this policy we will update the effective date above; if a change reduces your rights we will tell you by email before it takes effect.

Questions and requests: support@lotrights.com, or the privacy request form. This policy is published by LotRights.