Privacy Policy

Santa Cruz Room Finder is operated by Gregory Rose, based in Santa Cruz, California, USA. This policy describes information handled when you browse rooms, create an account, or use your private room organizer.

For privacy questions, access or correction requests, or an account-deletion request, email greg.c.rose@gmail.com. Please do not include passwords, government identification documents, or financial account details in your request.

• Account information: our authentication provider, Clerk, handles your account identifier, email address, authentication information, and any name or profile picture supplied by your chosen sign-in provider. Our saved-room records use your authentication identifier to associate data with your account.
• Your organizer: listings you save, saved listing snapshots, statuses, private notes, optional contact names, email addresses, phone numbers, Messenger links, and the content and dates of contact-history entries you add. Please only enter information you are entitled to use.
• Search and map information: search inputs submitted to the service, public listing information obtained from third-party sources, and listing addresses used to position map markers. Map lookups may be cached in your browser.
• Technical and usage information: hosting, authentication, map, font, and analytics providers may receive your IP address, browser/device information, request timing, and the pages or resources requested. Our API logs include request methods, URL paths, response statuses, and request identifiers.
• Agent connections: if you create a read-only connection, we store its name, your account identifier, a hash and identifying prefix of the access key, its creation, expiration and revocation dates, last-use time, request count, and rate-limit counters. The full key is shown only when created.
• Communications with us: if you email us, we receive your email address and anything you choose to include. If you submit an email-results request through the site, the server receives the submitted email address and selected listings; that feature currently does not send email.

Browsing public listings does not require an account. We do not ask you to provide payment-card details, identity documents, or bank information to use the current service. Do not put sensitive documents or financial credentials in your notes.

If you choose Google sign-in, Google and Clerk handle authentication, and the basic account/profile information you authorize is used to create or access your Room Finder account. The current service does not request access to your Gmail messages, Google Drive files, contacts, or calendar.

Room Finder does not connect to or import your personal Facebook Messenger inbox. Contact history is a manual record you enter; adding an entry does not send a message. Opening a saved Messenger link takes you to an external service, where that service's policies apply.

We use Google sign-in information for authentication, account operation, security, and support, not for advertising. We do not sell your private saved-room notes or contact history or use those notes or entries to target advertisements.

We use information to:

• Provide public listing search, maps, and shared listing-cache updates.
• Authenticate you and keep your saved rooms and notes associated with your account.
• Store and display the statuses and manual contact history you request.
• Understand service usage, diagnose problems, and improve reliability.
• Respond to support or privacy requests and help prevent abuse or unauthorized access.
• Meet legal obligations and protect the rights and safety of users and the service.

Saving a contact's information does not notify that contact or give them access to your organizer. We do not provide a public profile or public feed of your notes.

Providers process information needed to perform their functions, under their own applicable terms and privacy practices:

• Replit: website/API hosting, database storage, operational diagnostics, and any enabled publishing analytics. Replit privacy policy.
• Clerk: account management, sign-in, authentication cookies, and security. Clerk privacy policy.
• Google: optional Google sign-in, Google Analytics, and Google Fonts. Google privacy policy.
• Firecrawl: public listing discovery and retrieval. Requests may include public-source URLs and search queries; we do not intentionally include private room notes or contact history in those requests. Firecrawl privacy policy.
• OpenStreetMap services: map tiles and Nominatim address lookups. When the map is used, these services receive network information and requested map areas or public listing addresses. OpenStreetMap Foundation privacy policy.

Original listings and Messenger links lead to third-party websites. Those websites may collect information independently. We may also disclose information when reasonably necessary to comply with law, address abuse or security incidents, or protect rights and safety. Access by the operator or service providers may be necessary for those purposes; “private” does not mean end-to-end encrypted.

If you give an agent a Room Finder access key, anyone holding that key can retrieve the shared listing metadata covered by it until it expires or is revoked. This version does not grant access to your identity, saved rooms, private notes, contact history, Google account data, or Messenger inbox. No data is automatically sent to an agent when you create a key. An agent you connect may store retrieved listings in its own database under its own terms; revoking a key cannot recall copies already retrieved. Only share keys with tools you trust.

Authentication uses cookies and related browser storage. Blocking necessary cookies may prevent sign-in or access to your saved rooms. Map lookup results may be stored locally in your browser.

The published site uses Google Analytics when configured. Our page-view tracking sends page titles and page addresses without URL query strings. Advertising personalization signals and Google Signals are disabled in our configuration. We do not intentionally send the text of your notes, contact-history entries, or contact details as analytics events. Google and other service providers may still process technical information under their own policies.

You can use your browser's cookie controls, privacy settings, or content-blocking tools. Google also offers a Google Analytics opt-out browser add-on. The current site does not provide a dedicated cookie-consent preference center; this policy is not a substitute for any consent required by applicable law.

Account records are managed through Clerk; saved rooms and contact history are stored in the service's database. We use authenticated, owner-scoped access controls for private organizer records. No internet service can guarantee absolute security. Protect your sign-in account and sign out on shared devices.

Agent connection records and usage metadata may be retained for account controls, security, and support after expiry or revocation. Store agent keys securely; we cannot recover the full key for you. Revoke a lost or exposed key in Agent access and create a replacement if needed.

We retain account and organizer information while needed to provide the service, until you remove it or request deletion, subject to legitimate security and legal needs. Saved snapshots can remain even after the original listing expires or is removed from public search.

Deleting a saved room removes its associated notes and contact-history entries from the active database. Limited information may remain in logs or backups for operational or legal purposes. We do not promise immediate removal from every backup or third-party system.

Service providers may process information in the United States or other countries. Their storage locations and practices may differ from those in your jurisdiction.

You can edit or delete saved rooms, notes, contact fields, and contact-history entries in your organizer. To request access, a copy, correction, or deletion of your account information, email greg.c.rose@gmail.com. Full account deletion is currently handled by request, not by a self-service account-deletion button.

We may need to verify that the request relates to your account before disclosing or deleting information. We will consider requests under applicable law and explain any applicable limitation. Depending on where you live and which laws apply, you may have additional privacy rights, including rights under California law, without unlawful discrimination for exercising those rights.

Revoking Room Finder's access in your Google account does not automatically delete your Room Finder records. Please also send a deletion request if that is what you want.

Room Finder is intended only for people aged 18 and over. If you believe a minor has supplied personal information, contact us so we can investigate and take appropriate action.

We may update this policy as the service changes. We will post the revised policy here with an updated date and provide additional notice of material changes when required by applicable law. Privacy questions can be sent to greg.c.rose@gmail.com.