Privacy.

Who we are

Beneath is operated at usebeneath.com. For data protection purposes we are the controller of the personal data described here. Reach us at privacy@usebeneath.com.

What we collect

Account data: your email address, and your name and profile image if you sign in with Google. We use it to identify you, to sign you in and to contact you about your account and your analyses.

Boundaries and analyses: the geometry you draw, the names you give it, the results we produce and the exports you take. This is the substance of the service, so we keep it in your workspace until you delete it or close the account.

Billing data: your plan, subscription status and invoice history. Card details are entered into and held by our payment processor. They never reach our servers and we never see them.

Operational logs: request metadata, IP address, browser and coarse location, retained for security, abuse prevention and debugging. We do not build advertising profiles and we do not sell anything about you.

Why we are allowed to

We process account, boundary and billing data to perform the contract you enter into when you use the service. We process operational logs under our legitimate interest in keeping the service secure and working. Where we rely on consent, such as optional product email, you can withdraw it at any time.

Who else processes it

Supabase, for authentication and application data storage. Paddle, as merchant of record, for payment processing, tax and invoicing. Our hosting and database providers, for running the service. Map imagery and geospatial data providers, which receive tile requests from your browser when you view a map.

Each is bound by a data processing agreement. We do not share your boundaries or your results with anyone else, and we do not use them to train models for other customers.

Where it lives

Data may be processed in the United States and the European Union. Where personal data leaves the region it was collected in, transfers rely on Standard Contractual Clauses or an equivalent safeguard.

How long we keep it

Account and analysis data is kept while your account is open and for thirty days after you close it, after which it is deleted. Billing records are kept for as long as tax and accounting law requires, typically seven years. Operational logs are kept for ninety days.

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to processing, or take it elsewhere in a portable format. Write to privacy@usebeneath.com and we will answer within thirty days.

If you are in the EEA or the UK you may also complain to your local supervisory authority. If you are in California you have the rights described in the CCPA, including the right to know and the right to delete. We do not sell or share personal information as those terms are defined there.

Cookies

We set the cookies needed to keep you signed in and to remember your interface preferences. We do not set advertising cookies and we do not run third party trackers on the application.

Changes

If we change this policy materially we will say so by email or in the application before the change takes effect. The date at the top of this page always reflects the current version.