Privacy

The promise

No trackers, no data sales, no lists. The record holds what you put in it and what the public record says about the parcel. Nothing is sold, shared or scored for anybody else. There is no analytics, no advertising and no third-party script on any page, and the public pages set no cookie at all. It is hosted in the United States, and every form is rate-limited. A property’s record is its owner’s, not ours: it is exportable on request and deleted on request, and asking is a sentence to a person, below.

With one exception, and it is below in full: the address boxes. When you type an address into any box on this site, what you have typed so far is sent to a public map service so that it can offer you the real address instead of your having to type it out and type it wrong. It is the only thing anywhere in this product that leaves it while you are still typing, and the paragraph headed the address boxes says exactly what goes, what does not, and what is kept.

Who uses it

Anyone may sign in with an email address, and that address is the whole of the account: there is no password and nothing else to give. A signed-in person sees nothing until somebody adds them to an organization. Fireveyor LLC’s own people work its records; the people of a business’s organization see the introductions sent to that business and nothing else; the people of a property owner’s organization see the owner’s own properties, and only what their own standing on each grants.

What Fireveyor holds

Signing in. The email address you sign in with, when you first signed in, and which of our addresses you signed in at. The six-digit code and the sign-in link are kept only as hashes and expire after ten minutes; whichever is used first retires the other. A signed-in browser carries one cookie, good for thirty days. Sign-in attempts are counted against a hash of the address and a hash of the network they came from — neither is stored as itself — and those counters are thrown away about an hour later.

Organizations. Fireveyor LLC’s own profile — its region, its contact details, which modules it runs and how it has customized them, and the businesses it names in its reports with what it has recorded about their licenses — and, for every organization on the platform, its name, its kind, who its members are and what roles each holds.

Properties and their owners. What Fireveyor enters or imports about a property lot: the parcel number, the address, the acreage and land use, what public records and maps say about its fire hazard, and the owner’s name and mailing address as the county assessor lists them, with a phone number or email address where Fireveyor has one. Then what Fireveyor finds when it assesses the lot, what it recommends, and the report it produces.

Photos and documents. The files Fireveyor attaches, and the ones an owner adds from their own phone — photographs of a property, an inspection document, a contractor’s agreement. Each is hashed when it is attached and kept with what the file says about itself. Nothing is ever deleted: a file that is replaced or removed is kept, with a record of when and by whom.

Introductions. When an owner asks to be introduced to a business, that request, who it went to and what came of it. No business pays to be named or put in front of an owner; where an owner asks us to do the work, they contract with us and pay us, and we engage and pay the business that does it.

If you asked us to look at a property. The form on our own front door is open to anyone, and what you type into it is kept so that a person can answer you: your name, your email address, a phone number if you gave one, the property’s address and parcel number, which county you said it is in, what you are to the property, and anything you wrote in the last box. With it we keep the day, which of our addresses you arrived at, and the version of the words you agreed to. Nothing is emailed to you automatically — a person reads it and writes back. It is not passed to any contractor: an introduction happens later, only if you ask for one, and only to the business you ask for. It is nobody’s case record until somebody here has read it and opened a case. We keep it until you ask us not to, because a request from outside the areas we serve is exactly the list we would write to when we reach you; ask us to delete it and we will.

Logs. The operational record of requests, kept for thirty days and then deleted. It never holds a sign-in code, a property record or a file.

Reports for property owners

A report Fireveyor publishes for a property owner is reachable only by its link, which carries a long random token. It is listed nowhere, it asks not to be indexed, Fireveyor gives it to the owner, and the owner decides who else is given it. The report’s response form — asking to be introduced, asking to be called, or asking not to be contacted — records the answer on the property’s record. An owner who asks not to be contacted is not contacted.

Cookies

Two, both necessary, and only once you sign in: one that says a sign-in is under way, and one that says you are signed in. Both are signed, sent only over HTTPS, and unreadable by script. There is no analytics, no advertising and no third-party script of any kind — the Content-Security-Policy every page is served under admits nothing but this site. The public pages set no cookie at all: you can read every one of them and send the request form without one.

The address boxes

Every box on this site that asks for an address — on the front door, on the form a stranger sends, and on every record inside — offers you addresses as you type, so that you can pick the real one rather than typing it out and typing it wrong. This is how that works, because it is the one place where something leaves this product before you have pressed anything.

What goes, and where. The characters you have typed into that box, once there are at least four of them, and nothing else. They go to Fireveyor LLC’s own server, and that server asks a free public map service published by Esri — the same kind of keyless public map server this product already asks about a parcel’s fire hazard. The service answers with addresses in California and nothing else.

What does not go. Your browser never talks to the map service, so the service does not see your network address, your browser, your screen, a cookie, which page you were on, or anything that would tie one address being typed to the next. It sees a request from our server with some characters in it. Nothing identifies you, and nothing can, because nothing about you is sent.

What is kept. Nothing. The answer is drawn on the page and forgotten; no row is written, and the operational log records that the box was used and never what was in it. What you finally SEND — by pressing the button on a form — is kept exactly as the rest of this page describes, and nothing you only typed is.

If you would rather not. Type the address and ignore the suggestions: every box works without them, and the form stores what you typed. Blocking JavaScript for this site switches them off altogether, and nothing else on the site stops working if you do.

Where it lives

On Amazon Web Services in the United States, in an account run for Fireveyor LLC by the technology vendor that builds and operates Fireveyor: the records in a database table, the files in a private bucket with no public address of its own. A file is shown through a link that expires in an hour. Email is sent by Amazon SES from an address of ours.

Who else sees it

Nothing is sold, rented or handed to an advertiser, and nothing here trains anybody’s model. The companies above host it and see what hosting it requires, and the technology vendor that builds and operates Fireveyor for Fireveyor LLC sees what running it requires. The public map services this product asks about a parcel — the county’s, the state fire marshal’s, and the one behind the address boxes above — see a parcel number, a point on a map or the characters somebody has typed into an address box, each asked by our server and never by your browser. Fireveyor LLC’s own people see the records they work; the people of a business’s organization see only the introductions sent to that business; the people of an owner’s organization see only what their own standing on a property grants. A business is given a property owner’s name and contact details only after the owner has asked to be introduced, and only the business the owner asked for. Beyond that, Fireveyor discloses what it holds to nobody, or where the law leaves no choice.

How long

Sign-in codes and links last ten minutes; a session lasts thirty days; the counters behind the rate limits last about an hour; logs are deleted after thirty days. An address suggestion is kept for no time at all: it is drawn and forgotten. Property, assessment and introduction records are Fireveyor LLC’s books and are kept for as long as the property’s record stands, or until the person they are about asks for them to be removed. A request somebody sent from our front door is kept until they ask us to delete it.

Asking

To see what Fireveyor holds about you, to have a copy of it, to correct it, or to have it deleted, write to hi@fireveyor.com. If you are a property owner, the contact printed on your report holds the record, and they will answer too. Say enough to find it — an address, a parcel number — and it will be answered by a person.

Fireveyor LLC, 2309 Noriega St. #54, San Francisco, CA 94122. +1 (212) 960-8811