This Privacy Policy explains how Flood Form Inc. (“Flood Form,” “we,” “our,” or “us”) collects, uses, and shares information when you use the Flood Form web application and website at https://floodform.nyc and our related services, including reports, site visits, and project tools (together, the “Platform”). It should be read together with our Terms of Service.

1. Information You Give Us

Report access. When you unlock a Flood Form report, we collect your email address and the property address you confirm, and we record which properties you have looked up.
Property surveys. If you answer our flooding survey, we keep your answers, such as when and where a property has flooded, basement conditions, and existing measures.
Accounts. If you create an account, we collect your name, email address, and role (for example, homeowner or contractor). If you sign in with Google, we receive your basic Google profile (name and email address). Contractors may also provide business details and bid information.
Contact and booking. When you contact us or book a call or site visit, we collect the details you provide, such as your name, email, phone number, property address, preferred times, and message.
Payments. Payments are processed by Stripe. We receive the payment status, amount, and the name and email on the purchase, but we do not receive or store full card or bank account numbers.
Site visits and projects. For site visits, designs, bids, and construction, we collect and create project information, including field notes, photographs of the property, measurements, schematics, agreements, invoices, documents you upload, and messages within a Job Folder.
Alerts and Flood Club. If you join Flood Club or sign up for flood alerts, we keep the addresses you follow and your notification preferences.

2. Information Collected Automatically

Analytics. We use Vercel Web Analytics and Speed Insights to understand page visits and site performance in aggregate. They do not use cookies to track you across other websites.
Logs. Our hosting and database providers record technical information when you use the Platform, such as IP address, browser type, pages requested, and the time of the request, for security and troubleshooting.
Outreach links. If you arrive through a Flood Form link or QR code shared by us or a partner, we set a cookie (for up to 180 days) that lets us count opens, report views, sign-ups, and survey completions that come from that link.
Cookies and browser storage. See Section 7.

3. Property Data From Public Sources

Flood Form reports are built mainly from information about properties, not people: public datasets such as NYC tax lot and building records, sewer and drainage data, FEMA flood maps, 311 service requests, flood sensor readings, soil and groundwater records, and similar sources. We combine these with our own analysis to rate a property’s flood exposure.

4. How We Use Information

to provide reports, site visits, designs, bidding, and project services you request;
to personalize a property’s report with the survey answers and field observations for it;
to send service emails, such as report links, booking confirmations, bid and project updates, receipts, and alerts you sign up for;
to respond to questions and requests;
to process payments and prevent fraud and abuse;
to improve our methodology, data quality, and the Platform, including measuring how people find us;
to comply with law and enforce our Terms of Service.

Our staff use AI tools, provided by Anthropic, to help extract and summarize field notes and draft site visit summaries, which staff review before they are shared. Under Anthropic’s commercial terms, information sent through its API is not used to train its models.

5. Property Pages and Search Engines

Some free Flood Form property reports may be viewable by anyone with the link and may appear in search engine results. Those pages show only exposure information built from public property data. They never include survey answers, field notes, photographs, contact details, or anything else you have given us, and we do not make a report page searchable for a property where we have a client, lead, or account relationship.

If you own a property and want its report page removed from search results, email samuel@floodform.nyc with the address, or use the “Request removal” link on the page. Search engines may take some time to update after we remove a page.

6. How We Share Information

We do not sell your personal information, and we do not share it for targeted advertising.

We share information only as follows:

Service providers that operate the Platform for us under contract, including Supabase (database, sign-in, and file storage), Vercel (hosting and analytics), Stripe (payments), Resend (email delivery), Google (sign-in and calendar scheduling), Anthropic (AI assistance for staff), Slack (internal team notifications), and JobTread (project management).
Contractors and professionals you work with. When you request bids or start a project, the contractors you invite or accept can see the project details they need, such as the property address, scope, schematics, and relevant documents.
Organizations you belong to. If you use Flood Form through an organization, such as a property portfolio or community group, authorized members of that organization can see its properties and projects.
Legal and safety. When required by law or legal process, or to protect the rights, property, or safety of Flood Form, our users, or others.
Business transfers. As part of a merger, acquisition, financing, or sale of assets, subject to this Policy.
With your consent or at your direction, for example when you share a report link.

7. Cookies and Browser Storage

Sign-in cookies keep you logged in to your account.
Outreach cookie (described in Section 2) attributes visits to the link you arrived from.
Browser storage on your device remembers conveniences such as your email for the report form, which reports you have unlocked, unsent drafts, and display preferences.
Stripe may set its own cookies during checkout to process payments and prevent fraud.

You can clear cookies and browser storage in your browser settings. Some features, such as staying signed in, will not work without them.

8. Retention

We keep information for as long as needed to provide the Platform and our services, to maintain records of site visits and projects, and to meet legal, tax, and accounting obligations. When information is no longer needed, we delete it or keep it only in a form that no longer identifies you.

9. Security

We use administrative, technical, and physical safeguards designed to protect information, including encrypted connections and access controls that limit staff and partner access to what their role requires. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Choices and Rights

Access, correction, and deletion. You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it, subject to records we must keep by law or for an active project.
Email. You can stop optional emails, such as alerts, at any time by changing your settings where available or by emailing us. We may still send messages about services you have requested.
Property pages. You can ask us to remove a property’s report page from search, as described in Section 5.

To make a request, email samuel@floodform.nyc. We may need to verify your identity before acting on a request.

11. Children

The Platform is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the “Last Updated” date above, and for significant changes we will provide additional notice, such as on the Platform or by email.

13. Contact

Flood Form Inc.
Website: https://floodform.nyc
Email: samuel@floodform.nyc