Privacy

What this service is

Zoning Watchdog reads public city planning agendas and notices, extracts each rezoning, variance or special-use filing, and alerts subscribers by email (and by text where available) when a filing matches their keywords.

What we collect about you

• Account: your email address, and the date you confirmed it.
• Alert settings: your name (optional), keywords, chosen markets, channels, and a mobile number if you turn on text alerts. Phone numbers are stored encrypted.
• Alert history: which filings we sent you, on which channel, and whether delivery succeeded.
• Billing: your plan, subscription status and renewal date. We never see or store your card number; payments are handled by our payment processor.
• Sign-in records: a hashed, single-use sign-in token, and a session cookie that keeps you signed in.
• Product analytics: unless your browser sends Do Not Track or Global Privacy Control, we use Mixpanel (EU data centre) to see how the product is used. It sets a first-party cookie on kentehq.com and records page views (the address without tokens or search terms, other than utm and ref campaign tags), the events you trigger (signing up, signing in, choosing a market, plan changes, creating an API key, requesting a city) and how many alerts we emailed you. It is tied to an internal account id, never your email address, phone number, name or the addresses of filings, and it does not record keystrokes, form contents or screen sessions. We do not use advertising cookies.
• Team and API: on the Desk plan, the emails of people you invite, and a hash of your API key.

Filings themselves come from public records. They are not personal data about you.

Who processes data for us

• Mixpanel (EU data residency) provides product analytics, as described above. We do not sell this data and Mixpanel may not use it for advertising.
• Resend sends our email (sign-in links, alerts, digests).
• Dodo Payments is our merchant of record. It takes payment, handles tax and invoices, and holds your billing details.
• Anthropic (Claude) reads the public agenda documents to extract filings. We send it public documents, not your personal data.
• Twilio delivers text messages, only if text alerts are switched on for you.
• US Census Bureau Geocoder turns filing addresses into map coordinates. Only public filing addresses are sent.
• Sentry receives error reports if error monitoring is enabled. We configure it not to send personal data.
• Our hosting provider runs the servers and databases (a virtual server managed with Coolify).

We do not sell your data and we do not share it for advertising.

How long we keep it

• Account, settings and alert history: until you delete your account.
• Expired sign-in tokens: deleted about 7 days after they expire. Payment webhook ids: 90 days.
• Server logs are structured and contain no email addresses and at most the last four digits of a phone number. They are kept for a limited time by our host.
• Billing records may be kept by Dodo Payments for as long as tax law requires.

Your choices

• Turn off analytics by enabling Do Not Track or Global Privacy Control in your browser. We honour both and then load no analytics at all.
• Unsubscribe with the link in any email, or reply STOP to a text.
• Change your email or settings in your account.
• Sign out of every device from the Security tab.
• Delete your account from the Security tab. This cancels your subscription and erases your profile, keywords, phone number, delivery history and sign-in records.

For a copy of your data or any other request, email support@kentehq.com.

Security

Connections use HTTPS. Sign-in links are single-use and expire in 30 minutes. API keys are stored only as hashes. Phone numbers are encrypted at rest. No system is perfectly secure; if we learn of a breach affecting you we will tell you.

Contact

support@kentehq.com