Privacy

1Who we are

foreclosureX is operated by ForeclosureX LLC. For anything about your data, write to adam@foreclosurex.io, or use Contact us in the app.

2What we keep, and for how long

Your sign-in account

Your email address, your name, whether your address is verified, when the account was made and last signed in, and whether you are an administrator. Your password is held by Google’s Firebase Authentication; we never see it.

Why: to sign you in. Kept: until your account is deleted. Read by: our administrators.

Your profile

Your company and phone number, and when you accepted the terms.

Why: to know who our customers are and how to reach them. Kept: until your account is deleted. Read by: our administrators.

What you save

Your notes, watchlist and saved searches; what the dashboard opens with, including the address you measure distances from; and the name you sign emails with.

Why: they are yours, and you asked us to keep them. Kept: until you delete them, or your account is deleted. Read by: you, and our administrators when they help you.

The usage log

One line for each request you make: when, which page or call, which property or document, a summary of the filters, how many rows came back and how long it took, your IP address and your browser’s description of itself. Signing in and out are lines too. What you type into the address box is never kept, only its length.

Why: security, answering your support questions, and learning what is used. Kept: 90 days. Read by: our administrators. You can see your own recent sign-ins on your account page.

Support requests

What you send through Contact us: its category, your message, and the page you were on. The email that tells us a request arrived carries its number, never your message.

Why: to answer you. Kept: until the request is closed, then one year. Read by: our administrators.

Requests for access

What you send with Request access on the sign-in page, before you have an account: your name, email address, company and note, and when you sent it.

Why: to decide whether to invite you. Kept: 90 days while it waits for a decision, then 30 days after it is approved or declined. Read by: our administrators.

Sign-in attempt counts

Your email address or your network’s address, and the time, each time someone signs in, asks for a password email, sends an invitation or requests access.

Why: to limit how many of each can happen in an hour, so nobody can guess passwords or send email in our name. Kept: one day. Read by: our administrators, only when looking into a problem.

3Where it is kept, and who else sees it

Everything above is kept with Google Cloud: your sign-in account in Firebase Authentication, the rest in our database in Google Cloud’s us-east1 region, in the United States. Google processes it on our behalf and under our instructions.

When you open our pages, your browser also loads fonts from Google Fonts, and the sign-in page loads Google’s Firebase code. Those requests reach Google directly, with your IP address, under Google’s own privacy policy.

We set one cookie, which holds your session and nothing else. Your browser remembers a few display settings for itself, such as your light or dark theme. There are no advertising or analytics cookies.

4Deleting your account

Open your account page, choose Legal, and press Delete my account.

It takes effect immediately: you are signed out everywhere, in your browser and in Excel, and the account can no longer sign in. Your data is permanently removed within 30 days: your account, your profile, everything you saved, your usage log, your support requests, your request for access and your attempt counts. Until then, if you change your mind, contact us and an administrator can restore it.

After that we keep one line saying that an account was deleted and when, with a one-way fingerprint of the email address so that the deletion can be shown, never the address itself. Where another person’s record mentions you — an administrator’s record that they invited you — your address is removed from it.

Data we keep for less time than that goes sooner: the usage log after 90 days, a closed support request after a year, a request for access 30 days after it is decided, attempt counts after a day.

Our backups are kept for up to 14 days and then deleted; until then a backup may still hold a copy of what was removed.

5Questions

Use Contact us in the app (your avatar, top right), or write to the address in Who we are. You can ask what we hold about you, ask us to correct it, or ask us to delete it.

Last updated 26 October 2026.