Privacy Policy

This Privacy Policy explains what information Integrated Holdings LLC, doing business as Fairmark ("Fairmark," "we," "us," or "our"), collects when you use fairmark.us or our Services, how we use and share it, and the choices and rights you have. This Policy is part of our Terms of Service.

1. Introduction and Scope

1.1 This Policy applies to fairmark.us, the Fairmark account dashboard, the email and PDF communications we send you, and any filings we prepare on your behalf.

1.2 Fairmark serves only U.S. residents and residential property owners in the eight Served States listed in our Terms (CA, CO, UT, FL, MD, OK, AL, NE). We do not knowingly target or market to EU or UK residents. If you are outside the United States, please do not use the Services.

1.3 Fairmark is the data controller (or, under California law, the "business") for the personal information collected through the Services.

2. Information We Collect

2.1 Information you provide directly.

• Property address. The street address you enter for a valuation estimate. Required.
• Email address. Collected at checkout (or at Free Appeal Kit download). Required for delivery and account access.
• Name. Collected when you sign your LOA. Required for county filings. Must match the name on record at the county.
• Payment method (card on file via Stripe SetupIntent). At signup, we collect a payment method using Stripe's SetupIntent flow. $0 is charged at signup. Card details are entered into Stripe's hosted Elements on our Site; we never see or store the full card number. Stripe returns a tokenized payment-method reference, which we store on file so we can charge the contingency fee off-session if and when the Charging Event occurs (BAR issues a determination lowering your assessment). See Terms §2 for the Charging Event definition.
• Property address, parcel ID, and assessment data. The street address, parcel/section-block-lot identifier, prior assessed value, comparable-sales data, owner-of-record name, and any exemption flags associated with your property. We collect this both from you and from public-record sources. Because parcel ID and street address can be linked to ownership records by anyone, we treat this combination as personal information and protect it accordingly under Sections 4, 5, and 10 of this Policy.
• Electronic signature. Captured by SignWell when you sign your LOA.
• Support correspondence. Emails you send to team@fairmark.us and responses we send back.

2.2 Information we retrieve on your behalf from third-party sources.

• County assessor data — assessed value, parcel ID, ownership of record, exemption flags, millage/mill rate, historical assessments.
• ATTOM — automated valuation model (AVM) estimate, square footage, bedroom/bath count, year built.
• RentCast — comparable sales within a configurable radius and date range.
• Google Places API — address autocomplete and geocoding when you type in the address field.
• Google Street View — street-level photo displayed on the reveal page.

This data describes the property, not you personally. We pair it with your account email only after you create an account.

2.3 Information collected automatically.

• Device and session. IP address, browser user-agent, referrer URL, language, timezone.
• Usage analytics. Page views, clicks, and milestone events (e.g., "reveal_viewed," "checkout_started"), collected via our product-analytics provider. Distinct IDs are anonymous until you log in; once logged in, your analytics ID is linked to your Fairmark user ID. See the subprocessor table in Section 4 for the specific vendor.
• Essential cookies. A session cookie to keep you logged in; a CSRF-protection cookie.
• Analytics cookies. First-party analytics session cookies. You may accept or decline via the cookie banner on your first visit, or change your choice anytime.
• Session interactions. Anonymized recordings of mouse movements, scrolls, and clicks on our pages, used to debug confusing UX. Form inputs (text fields, dropdowns, addresses, payment info) are automatically masked at the browser before capture, so we never see what you typed. Same opt-out path as Usage analytics — declining analytics in the cookie banner stops session recording for both.

2.4 Information we do not collect.

• We do not collect Social Security numbers, drivers' license numbers, financial-account numbers, biometric data, precise geolocation, or health data.
• We do not sell personal information.

3. How We Use Your Information

We use information only as described below:

• Service delivery. To run the AVM, pull comps, generate your appeal packet, prepare your LOA, file with your county, and return status to you.
• Account management. To create and maintain your account, authenticate your email link, and serve your dashboard.
• Payment processing — Stripe. Stripe handles payment. At signup, Stripe stores a tokenized reference to your payment method via SetupIntent. No charge fires at signup. When the BAR issues a determination lowering your assessment (the Charging Event under Terms §2), Stripe processes the off-session charge against the saved method. We share with Stripe: tokenized card data, billing ZIP, your email address, and the charge amount. Refunds and disputes are also handled through Stripe.
• E-signature — SignWell. SignWell collects your signature on the RP-524 written-authorization page. We share with SignWell: your name, email, property address, parcel ID, and the document to be signed.
• Mailing — Lob. For BARs that require paper filings, Lob mails the signed RP-524 packet via U.S. certified mail. We share with Lob: your name (as on record), property address, the BAR's mailing address, and the filing PDF.
• BAR filing. Once filed, your BAR receives your name, address, parcel ID, and the signed grievance packet because the filing requires it. BAR records may be subject to public-records disclosure under state law.
• Monitoring. If you enroll in Annual Monitoring, we re-check your county's assessment annually and act on refile triggers.
• Customer support. To respond to your emails and refund requests.
• Analytics and product improvement. To measure conversion, identify bugs, and calibrate the pre-screen model.
• Legal compliance and safety. To meet our record-keeping obligations and to detect fraud.
• Transactional email. Order confirmations, filing confirmations, county-response notices, refund notices, auto-renewal reminders, and expiration/deadline reminders.
• Marketing. Only to users who have provided email for a Free Appeal Kit or who have an account, and only until they unsubscribe.

We do not use your data to train foundation models. We do not license your personal data.

4. How We Share Your Information

We share the minimum necessary data with the following categories of recipients. The table below summarizes our subprocessors:

4.1 Payment processor.

• Stripe, Inc. — Processes charges for Fairmark Complete, Annual Monitoring, and Additional Property; holds tokenized payment methods; manages refunds. Stripe receives your payment credentials and billing ZIP. Stripe is a PCI-DSS Level 1 service provider.

4.2 Filing infrastructure (essential to the Service).

• SignWell (Documenu, Inc.) — E-signature on your LOA. Receives your name, email address, property address, and electronic signature.
• Skyvern, Inc. — Browser-automation vendor used to file appeals through county online portals. Receives the data required to populate the county form.
• Lob, Inc. — U.S. mail delivery for counties without an online portal. Receives your name (as on record), property address, and the LOA + appeal PDF to mail.
• Your county assessor's office — The filing itself. Counties are public agencies and may publish some of the submitted information in public records.

4.3 Email delivery.

• Resend, Inc. — Transactional email delivery (receipts, status updates, refund notices, auto-renewal reminders). Receives your email address and the content of each message.

4.4 Data enrichment (pre-filing, retrieval only).

• ATTOM Data Solutions — AVM and property characteristics.
• RentCast — Comparable sales data.
• Google (Places API, Street View, Geocoding) — Address autocomplete, property photo.

These vendors receive the property address (not your name, email, or payment info) to return public-record and market data.

4.5 Analytics and infrastructure.

• PostHog, Inc. — Product analytics. U.S.-hosted. Receives pseudonymous event data; receives your user ID after login so we can measure per-user funnels.
• Supabase, Inc. — Our database and file storage host. Stores your account, appeal records, and signed LOA PDFs at rest, encrypted.
• Vercel, Inc. — Web hosting.
• A VPS provider (Hetzner) — Hosts the "Crane" AI agents that triage filing anomalies.

4.6 Professional advisors. Attorneys, auditors, and insurers, when we need their advice and under confidentiality.

4.7 Legal. We may disclose information when required by subpoena, court order, or applicable law, or to protect our rights.

4.8 Business transfer. If Fairmark is acquired or merges, personal information may transfer to the successor, subject to this Policy.

4.9 We do not sell personal information. We do not "share" personal information for cross-context behavioral advertising within the meaning of the California Privacy Rights Act ("CPRA"). If that ever changes, we will update this Policy and provide the required opt-out link.

5. Data Retention

We keep data only as long as needed for the purposes above or as required by law.

• Signed RP-524 authorizations, filing records, BAR determinations, and contingency-fee charge records: 7 years from the date of the authorization or charge, consistent with audit-and-tax-record retention norms and IRS guidance.
• Stripe payment-method tokens: Retained until the Charging Event resolves (charge collected, charge waived, or claim cycle closed), then deleted unless you opt into Annual Monitoring (in which case retained for the next monitored cycle).
• Account email and profile: Until you request deletion, subject to the 7-year audit-and-tax carve-out above.
• Property analysis results (address + comps + assessment data): 24 months from last analysis.
• Server and analytics logs: 13 months.
• Email support correspondence: 3 years from last message.
• Product-analytics events: 2 years.

Post-cycle data deletion on request. Once your grievance cycle is closed (BAR determination received and any contingency charge resolved), you may request deletion of property analysis results, comps, and account profile by emailing team@fairmark.us with subject "Delete my data." We will delete within 30 days, subject only to the 7-year audit/tax carve-out for signed authorizations and charge records.

When a retention period ends, we delete the record or irreversibly de-identify it.

6. Your Rights

Depending on where you live, you may have some or all of the following rights. Fairmark extends these rights to all U.S. users regardless of state.

• Right to know / access. You may request a copy of the personal information we hold about you.
• Right to correct. You may ask us to fix inaccurate information.
• Right to delete. You may request deletion of your personal information, subject to legal retention carve-outs (for signed LOAs and payment records; see Section 5).
• Right to portability. You may request a copy of your personal information in a structured, commonly used format.
• Right to opt out of sale or sharing. We do not sell or share your personal information for cross-context behavioral advertising, so this right is already satisfied.
• Right to non-discrimination. We will not discriminate against you for exercising these rights.

How to exercise. Email team@fairmark.us with subject "Privacy Request" and describe what you want. For verification, we will confirm from the email on your account. We respond within 45 days. We may extend by another 45 days if needed and will notify you of any extension.

Authorized agents. You may use an authorized agent; we will require written authorization from you and, in some cases, verification of the agent.

California residents (CCPA/CPRA). The rights above are your California rights. The specific categories of personal information we collect, use, and disclose are described in Sections 2, 3, and 4 of this Policy. We do not use or disclose sensitive personal information for any purpose that would trigger the right to limit its use under the CPRA.

Colorado, Connecticut, Virginia, and Utah residents. The rights above also mirror your state's comprehensive privacy law. Appeals for denied requests may be submitted to team@fairmark.us.

7. Cookies and Tracking

7.1 Essential cookies (always on).

• sb-access-token / session cookie — keeps you logged in.
• CSRF token — protects against cross-site request forgery.

7.2 Analytics cookies (first-party). Measures page views and funnel conversion so we can improve the site. You may decline via the cookie banner on your first visit or change your choice anytime.

7.3 Advertising — the Meta Pixel. We use the Meta Pixel (Meta Platforms, Inc.) to measure how our ads perform and to show relevant ads to people who have visited the site. The Pixel records page views and funnel events (such as starting an appeal). With Advanced Matching enabled, it also sends Meta a hashed (irreversibly encoded) form of contact details you enter — such as email or phone — so Meta can attribute conversions; Meta does not receive those details in readable form. You can decline the Pixel via the cookie banner on your first visit or change your choice anytime, and we honor Global Privacy Control (GPC) signals as an opt-out of sharing for cross-context behavioral advertising. We do not load the Google Ads, TikTok, or other third-party ad pixels.

7.4 Do Not Track. We honor Global Privacy Control (GPC) signals by treating them as an opt-out-of-sale/sharing request.

8. Children's Privacy

The Services are not directed to children under 18 and we do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, email team@fairmark.us and we will delete it.

9. International Users

The Services are intended for U.S. residents and property owners of U.S. residential property. Data is stored in the United States. If you are outside the United States, please do not use the Services.

10. Security

We use commercially reasonable administrative, technical, and physical safeguards, including:

• TLS 1.2+ on all public endpoints.
• AES-256 at rest for Supabase-stored data.
• Stripe Elements for payment collection, so card data never touches our servers.
• Row-level security on the Supabase database.
• Least-privilege access for staff (currently the founder only) and contractors.
• Incident response. If we discover a data breach affecting your personal information, we will notify you as required by applicable state law.

No system is perfectly secure. Please keep your email account secure, since it is used for login.

11. Changes to This Policy

We may update this Policy from time to time. Material changes are communicated by email (to the address associated with your account) at least 30 days before the change takes effect, and are posted at fairmark.us/legal/privacy with a new "Last updated" date. Continued use after the effective date is your acceptance.

12. Contact

Privacy questions and requests: team@fairmark.us
Mailing address: Integrated Holdings LLC, d/b/a Fairmark, South Windsor, CT
Response time: We respond to all privacy requests within 45 days.

Transparency note: Fairmark is pre-revenue. This Policy was prepared in good faith by the founder using plain-English drafting conventions and the text of the CCPA/CPRA. It has not been reviewed by outside counsel. If anything here conflicts with a non-waivable right under your state's privacy law, your state's law controls.