Privacy Policy

This Privacy Policy explains how Metro Analytics Inc. and the MetroAnalytics platform collect, use, disclose, and protect information when you visit our website, create an account, use market intelligence tools, request demos, subscribe to paid services, or interact with our APIs and customer support.

This policy applies to personal information that identifies, relates to, describes, or can reasonably be associated with an individual or household. It does not apply to aggregated, de-identified, or public real estate, economic, demographic, and market data that cannot reasonably identify you.

Account information: name, email address, password credentials handled through our authentication provider, company name, role, plan level, and profile settings.

Billing information: subscription status, Stripe customer IDs, checkout and billing portal events, payment method metadata, invoices, and transaction records. We do not store full card numbers.

Usage information: pages viewed, searches, saved markets, watchlists, alerts, exports, API usage, product interactions, device/browser information, approximate location from IP address, logs, timestamps, and diagnostics.

Communications: demo requests, enterprise contact forms, support messages, feedback, survey responses, and preferences for email updates or alerts.

Market inputs: addresses, cities, ZIP codes, neighborhoods, states, property characteristics, portfolio inputs, and comparable-market criteria that you choose to submit.

We collect information directly from you, automatically through the service, from integrated providers such as Supabase and Stripe, and from public or licensed data sources such as FRED, Freddie Mac, NAR, MBA, MLS aggregations, U.S. Census Bureau data, USPS migration data, HUD, and similar housing or economic datasets.

Some public datasets may include location, property, demographic, or economic attributes. We use those datasets to generate market intelligence and do not treat them as account-holder personal information unless they can reasonably be linked to you as a user.

We use information to create and secure accounts, authenticate users, provide dashboards, alerts, reports, exports, subscriptions, enterprise demos, billing, customer support, and product communications.

We use usage and market-input information to operate, debug, personalize, improve, and measure the service; develop models and analytics; detect misuse; enforce terms; and comply with legal, tax, accounting, and security obligations.

We may use aggregated or de-identified information to improve scoring models, publish market research, benchmark usage, and develop new features. We do not attempt to re-identify de-identified information except to test whether our de-identification processes work.

Where laws such as the GDPR require a legal basis, we process personal information to perform our contract with you, pursue legitimate interests such as security and product improvement, comply with legal obligations, protect vital interests, and rely on consent where required, such as for certain optional communications.

We use essential cookies and local storage for authentication, session management, security, preferences, and core product functionality. We may use limited analytics technologies to understand product performance and reliability.

We do not use third-party advertising cookies in the current product. If that changes, we will update this policy and provide required notices and choices.

Some browsers send “Do Not Track” signals. Because there is no uniform industry standard for responding to those signals, we do not currently respond to them. We honor legally required opt-out mechanisms where applicable.

Service providers: we share information with vendors that host, secure, bill, analyze, support, or operate the service, including Supabase for authentication/database services and Stripe for payments.

Data providers and integrations: we may send limited technical requests to public data APIs or licensed data partners to retrieve market, demographic, or economic data relevant to your query.

Business and enterprise users: if your account is provided by an organization, administrators may access account, usage, plan, billing, and workspace information associated with that organization.

Legal and safety: we may disclose information when required by law, subpoena, court order, government request, to protect rights and safety, to prevent fraud or abuse, or to enforce our Terms.

Business transfers: if we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction.

We do not sell personal information for money. We also do not currently share personal information for cross-context behavioral advertising. If our practices change, we will update this policy and provide required opt-out links or preference controls.

We keep personal information for as long as needed to provide the service, maintain your account, comply with legal and tax obligations, resolve disputes, enforce agreements, maintain backups, and protect security.

Account data is generally retained while your account is active. After account deletion, some information may remain in backups or records for a limited period where necessary for security, legal, audit, billing, or fraud-prevention purposes.

We use administrative, technical, and organizational safeguards designed to protect personal information, including encrypted transport, access controls, provider security controls, logging, and least-privilege practices.

No online service is completely secure. You are responsible for keeping account credentials confidential and promptly notifying us about suspected unauthorized access.

Depending on where you live, you may have rights to access, correct, delete, port, restrict, object to, or opt out of certain processing of your personal information. You may also have the right not to be discriminated against for exercising privacy rights.

California residents may request to know categories and specific pieces of personal information collected, sources, purposes, categories of recipients, deletion, correction, and information about sale or sharing. We do not currently sell or share personal information as those terms are used for cross-context behavioral advertising.

To exercise rights, contact us at privacy@metro-analytics.com. We may need to verify your identity and authority before fulfilling a request. Authorized agents may submit requests where permitted by law.

The service is intended for business and professional users and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child provided personal information, contact us and we will take appropriate steps to delete it.

We are operated from the United States. If you access the service from outside the United States, your information may be processed and stored in the United States and other jurisdictions where our providers operate. Those jurisdictions may have data protection laws different from your location.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and provide additional notice when required by law.

Questions or privacy requests: privacy@metro-analytics.com. Legal notices: legal@metro-analytics.com. If your organization has a separate written agreement with us, that agreement may provide additional contact or notice procedures.