civicmerge

Privacy Policy

Last updated June 12, 2026

CivicMerge (“we,” “us,” “Interzone Group”) provides cleaned government datasets and subscription services. This policy explains what data we collect, why, and what you can do about it.

Information We Collect

  • Account information. Email address when you sign in via magic link. Optional wallet address if you connect one.
  • Purchase history. Records of datasets or subscriptions you buy, including transaction IDs and amounts. Used for order fulfillment and tax compliance.
  • Usage data. Page views, dataset interactions, and feature usage collected via Google Analytics. We track page views, item views, cart additions, checkouts, purchases, logins, map interactions, and scroll depth.
  • Cookies. A session cookie (cm_session) for authentication (essential). Google Analytics cookies for anonymous traffic analysis (optional, requires consent). You can manage your preferences via Cookie Settings or disable cookies in your browser settings. Authentication will not work without the session cookie.

How We Use Your Information

  • Provide and maintain your account
  • Process payments and deliver purchased datasets
  • Send authentication emails via Resend
  • Improve our site and datasets based on usage patterns
  • Comply with legal obligations (tax records, lawful requests)

Third-Party Services

  • Cloudflare. Hosting, DNS, D1 database, R2 storage, Workers API. All data processed through Cloudflare's global network.
  • Stripe. Payment processing. Your card details never reach our servers. Stripe handles all payment data under their privacy policy.
  • Resend. Transactional email delivery for magic link authentication.
  • Google Analytics. Anonymous usage analytics. We do not share personal data with Google.

De-identification Practices

  • Dataset products. All datasets are processed through an automated pipeline that strips personal identifier fields (owner names, personal IDs, inspector names) from source data pre-join and post-join. Geographic aggregation is enforced at the census tract level or higher. Small-population cells below 15 records are suppressed.
  • Purchase records. After 7 years (tax retention period), purchase records are fully anonymized — account email linkage is permanently stripped.
  • Analytics. Google Analytics data is collected without personally identifiable information. IP addresses are anonymized, and we do not merge analytics data with account records.
  • No re-identification. We do not attempt to re-identify anonymized data. Anonymized datasets are treated as non-personal data and may be used for product improvement and aggregated reporting.

Data Retention & Deletion

  • Account data. We retain your email and account information until you request deletion. To delete your account, email [email protected] from the address associated with your account. We will remove your personal data within 30 days.
  • Purchase records. Transaction records (anonymized — stripped of email linkage) are retained for 7 years to comply with tax obligations.
  • Analytics data. Governed by Google Analytics's data retention policies.

Your Rights (CCPA & GDPR)

California residents (CCPA). The California Consumer Privacy Act grants you the right to request disclosure of the personal data we collect, request deletion of your data, and opt out of the sale of your data. We do not sell personal data.

European Economic Area (GDPR). If you are in the EEA, you have the right to access, rectify, or erase your personal data, restrict or object to processing, and request data portability. Our lawful basis for processing is your consent (for cookies) and contract performance (for account and payment processing).

To exercise any of these rights, email [email protected]. We will respond within the timeframe required by applicable law.

Security

We use Cloudflare's infrastructure for hosting and database storage. Authentication uses JWTs with 7-day expiry. Payments are processed entirely by Stripe — we never store or process payment card data. That said, no online service is 100% secure. You use our services at your own risk.

Children

CivicMerge is not intended for anyone under 18. We do not knowingly collect data from minors. If we learn that we have collected data from someone under 18, we will delete it promptly.

Changes

We may update this policy. Material changes will be posted on this page. Continued use after changes take effect constitutes acceptance.

Contact

Interzone Group • California, USA
[email protected]