TerritoryLens Privacy Policy

1. Who we are and what this policy covers

TerritoryLens is operated by Flatfour Ventures LLC, a Virginia limited liability company, at 4445 Corporation Ln Ste 259, Virginia Beach, VA 23462. Contact us at hello@territorylens.ai for privacy, security, support, or legal requests.

This policy covers our website, accounts, and business research service. TerritoryLens helps United States businesses research local businesses using public sources, organize evidence, and use enabled workspace features. We determine how account, security, and service administration information is used. For research content that a business customer directs us to process, we act on that customer's instructions, subject to our agreement and applicable law. A separately signed data processing agreement may provide additional terms.

2. Information we collect

Account information includes your email address, name, account identifier, authentication details managed by our authentication provider, and workspace membership and permissions. If you contact us, we receive your message and the information you choose to include.

Workspace information includes search categories and locations, approved research jobs, selected businesses, notes, client containers, exports, and integration settings where those features are enabled. Research results may include business names, addresses, websites, public contact information, source URLs, timestamps, and confidence indicators. Public business information may identify an individual, including a sole proprietor.

Technical information includes IP addresses, browser and device details, request timestamps, service events, error reports, and security and audit records. When paid billing is enabled, we receive subscription, invoice, payment status, and limited payment-method information from our payment provider. Hosted payment forms collect full card details directly; we do not store full payment card numbers.

3. Google sign-in

Google sign-in is optional. Through Clerk, our authentication provider, we request basic identity permissions: OpenID, email, and profile. Google may provide your Google account identifier, email address and verification status, name, and profile picture. Clerk processes this information and the authentication credentials needed for the connection; we use the resulting identity information to create or link your TerritoryLens account, sign you in, and protect account access. Relevant account identifiers and profile information may be stored in Clerk and our account records.

We do not request access to your Gmail messages, Google Drive files, contacts, or calendar. We do not sell Google account data, share it for advertising, or use it to train generalized artificial intelligence models. Access is limited to providers and personnel who need it for authentication, account support, security, or legal obligations. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements where applicable: https://developers.google.com/terms/api-services-user-data-policy.

You may revoke TerritoryLens's Google connection through your Google Account's third-party connection settings. Revoking the connection prevents future authorized Google access; it does not automatically delete your TerritoryLens account or records. To request deletion, email hello@territorylens.ai. Arrange another available sign-in method before disconnecting Google if you want continued account access.

4. How we use information

We use information to provide and administer accounts and workspaces; execute research you approve; display sources and evidence; deliver enabled exports and integrations; process billing when activated; respond to requests; send account and service communications; diagnose errors; improve service functionality; prevent abuse; enforce agreements; and comply with legal obligations. We do not use Google sign-in data for prospect discovery or outreach.

Search estimates and approval steps help you control research execution. TerritoryLens does not automatically send sales messages to researched businesses. Public availability of contact information is not consent to contact that person.

5. When information is shared

We use service providers to operate the service. These include Clerk for authentication; Vercel for hosting; Neon for database storage; and Trigger.dev for enabled background workflows. Depending on activated features, providers may include Cloudflare for infrastructure and private export storage, DataForSEO for approved business discovery, Bouncer for specifically enabled email verification, Stripe for hosted payments, Resend for service emails, Sentry for error monitoring, and PostHog for enabled product-event analytics. A provider receives information needed for its enabled function; an installed or dormant integration does not by itself mean customer information is sent to it.

Workspace administrators can manage members and access workspace information. Exports, sharing, APIs, and destination integrations disclose information to recipients you or your administrator authorize when those features are enabled. Those recipients may have their own privacy practices.

We may disclose information to comply with valid legal process, protect rights and security, investigate abuse, or carry out a business transaction subject to appropriate safeguards and applicable notice or consent requirements. We do not sell personal information or share it for cross-context behavioral advertising.

6. Cookies and analytics

Authentication uses cookies or similar technologies needed to maintain sessions and secure access. Blocking them may prevent sign-in. Error monitoring helps diagnose failures. If product analytics is enabled, we collect selected service events; our current product analytics configuration disables session recording and automatic page or interaction capture and uses memory-only analytics persistence. We do not use advertising tracking cookies. Your browser provides controls for cookies and storage.

7. Retention and deletion

We retain information for the purposes described in this policy, considering account activity, service needs, customer instructions, security, and legal obligations. Account closure and subscription cancellation are separate from deletion. An automatic purge following account closure is not currently provided; contact hello@territorylens.ai to request deletion. We assess and carry out applicable requests through a manual process and explain information that must remain.

Financial and normalized billing records may be retained for seven years. Billing support and incident metadata may be retained for two years after closure, or longer when necessary for a linked dispute, financial record, security investigation, or legal obligation. Other records are retained only as reasonably necessary for their purposes. Backups may retain deleted information until their ordinary replacement cycle; retained backups are restricted and are not used to restore deleted records to ordinary service use. Export download links may expire independently of stored records. A legal hold, dispute, or security investigation may delay deletion.

8. Security and processing locations

We use access controls, workspace authorization, tenant-scoped database controls, encrypted connections, and restricted operational access to protect information. No system guarantees absolute security. Our service is intended for United States business customers. Providers may process information in the United States or other countries where they operate, subject to applicable contractual and legal protections. Do not submit sensitive personal information, government identifiers, health records, or full payment card details into research notes or support messages.

9. Your choices and privacy rights

You can manage available account settings and ask your workspace administrator about workspace access. You may request access, correction, deletion, or a copy of your personal information by emailing hello@territorylens.ai. Depending on applicable law, you may also have rights to restrict processing, opt out of certain uses, use an authorized agent, or appeal a decision. We verify identity and authority using information proportionate to the request, explain applicable exceptions, and respond within the time required by law. We do not discriminate for exercising applicable privacy rights. If we deny a request, you can ask for an appeal at the same email address.

If your request concerns information controlled by a business customer, we may direct it to that customer or assist it in responding. You may also contact us about inaccurate public business information or a suppression request. We do not ask for your password to process a privacy request.

10. Age and changes

TerritoryLens is intended for business users aged 18 or older and is not directed to children. If you believe a child has provided personal information, contact us. We will update this policy when practices change and identify the effective date. We will provide additional notice or obtain consent when required, including before using Google user data for a new purpose that requires consent.