Privacy Policy

Effective Date: February 22, 2026 · Version: 2026-02-22

YourSpace LLC ("YourSpace," "we," "us," or "our") operates PacketPilot (the "Service"). This Privacy Policy describes how we collect, use, store, and share information in connection with your use of the Service. By using the Service, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

Account information: Name, email address, password (hashed by Firebase Auth), role, brokerage name.
Template files: PDF templates uploaded by Broker Admins.
Transaction data: Information entered by Agents to generate packets (e.g., buyer names, addresses, purchase prices).
Billing information: Collected directly by Stripe, Inc. YourSpace does not store payment card numbers. We receive and store subscription status, customer ID, and plan details from Stripe.

1.2 Information Collected Automatically

Usage data: Log data, page views, feature usage, timestamps.
Device information: Browser type, operating system, IP address (collected by Firebase/Google infrastructure).
Analytics: We use Firebase Analytics (Google) to understand usage patterns. Analytics data is subject to Google's privacy policies.

2. How We Use Your Information

To provide, operate, and maintain the Service;
To process subscriptions and payments via Stripe;
To send transactional emails (invite emails, packet-ready notifications) via Resend;
To enforce subscription entitlements and seat limits;
To detect and prevent fraud, abuse, or security incidents;
To comply with legal obligations;
To improve and develop the Service.

We do not sell your personal information to third parties.

3. Data Retention

3.1 Generated Output Files

Generated packet ZIP files are permanently and automatically deleted 36 hours after generation. There are no backups, no archives, and no recovery mechanism. This deletion is irreversible.

3.2 Template Files

PDF templates uploaded by Broker Admins are retained until the Broker Admin explicitly deletes them from the Service.

3.3 Account Data

Account data (user profile, brokerage data, subscription records) is retained for the life of the account and for a reasonable period after termination as required by law or legitimate business purposes.

3.4 Invite Tokens

Invite tokens are stored until they are used, expired (after 7 days), or revoked. Metadata about sent invites is retained for audit purposes.

4. Data Sharing

We share data with the following categories of service providers who process it on our behalf:

Google LLC (Firebase / Google Cloud): Authentication, database, file storage, analytics, hosting infrastructure. Located in the United States.
Stripe, Inc.: Payment processing and billing management.
Resend, Inc.: Transactional email delivery (invite emails, notifications).

We may also disclose information as required by law, regulation, legal process, or governmental request; to protect the rights, property, or safety of YourSpace, our users, or the public; or in connection with a merger, acquisition, or sale of all or substantially all of our assets.

5. Data Security

We implement commercially reasonable technical and organizational security measures to protect your information. Access to sensitive data (API keys, secrets) is restricted to server-side systems via Google Secret Manager. Client-side code does not have access to secret keys. However, no system is completely secure, and we cannot guarantee absolute security.

6. Cookies and Tracking

Firebase Authentication uses browser local storage and session mechanisms to maintain authentication state. Firebase Analytics may use cookies. We do not use third-party advertising cookies. You may disable cookies in your browser settings, though this may affect Service functionality.

7. Children's Privacy

The Service is not directed to persons under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

8. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data, including the right to access, correct, delete, or restrict processing of your data. To exercise these rights, contact us via the information below. We will respond within applicable legal timeframes.

9. International Transfers

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date. Your continued use of the Service after changes are posted constitutes acceptance of the updated Policy. You will be prompted to re-accept updated policies upon next login.

11. Contact

For privacy-related questions or to exercise your data rights, please contact YourSpace LLC through the contact information available at packetpilot.app.