Privacy Policy

What we collect

Mortar collects only what it needs to run an analysis and manage your account:

• Your email address, used to sign you in and identify your account.
• Public listing data for the property you choose to analyze: address, listing URL, list price, beds, baths, square footage, and where shown, Zillow's Rent Zestimate and Zestimate, read from the listing page you have open.
• The analysis results we produce for those listings (rent, value, cap rate, cash flow, and verdict), retained to power your history and to cache repeat scans.
• Your IP address, used transiently for rate-limiting and abuse prevention, plus aggregate scrape/error diagnostics that help us keep the service working.

Where it is stored & who processes it

Your account data and analysis results are stored in Supabase, a managed PostgreSQL database hosted in the US East region. We rely on a small set of sub-processors to run Mortar: Supabase (database and authentication), Vercel (application hosting), Anthropic (AI rent/value estimation — receives the listing details for a property you analyze, not your account identity, and only when a Zillow estimate isn't available on the page), and LemonSqueezy (payments).

How long we keep it

Analyses and account data are retained until you delete your account. When you request deletion, your account and all associated data are scheduled for permanent removal after a 21-day grace period (during which you can cancel and keep your account); once that window passes they are deleted and cannot be recovered. Technical and diagnostic logs are retained for up to 12 months and then discarded.

Your rights

Depending on where you live (including under the CCPA/CPRA and GDPR), you may have the right to access, correct, or delete your personal data, and to ask us not to sell or share it — we don't. You can request deletion of your account and all associated records yourself, any time, from the in-app account page at /account while signed in; deletion is finalized after a 21-day grace period, which you can cancel from that same page. To exercise any other right, or if you need help, email us using the address below.

Third-party listing data

Listing details and Zillow's estimates belong to their respective owners. Mortar is not affiliated with, endorsed by, or sponsored by Zillow.

Payments

Billing is handled entirely by LemonSqueezy, our payment processor. All subscription payments are processed on LemonSqueezy's systems. No card or payment-method data ever touches Mortar's servers.

Authentication

Sign-in uses Supabase magic links or Google OAuth. Mortar does not create or store passwords.

What we do not do

Mortar contains no third-party tracking and no advertising. We do not sell your data to anyone.

Contact

Questions about this policy or your data? Contact us at haaris.africawala@gmail.com.