Privacy.

Who we are

Beneath is operated at usebeneath.com. For data protection purposes we are the controller of the personal data described here. Reach us at privacy@usebeneath.com.

What we collect

Account data: your email address, and your name and profile image if you sign in with Google. We use it to identify you, to sign you in and to contact you about your account and your analyses.

Boundaries and analyses: the geometry you draw, the names you give it, the results we produce and the exports you take. This is the substance of the service, so we keep it in your workspace until you delete it or close the account.

Billing data: your plan, subscription status and invoice history. Card details are entered into and held by our payment processor. They never reach our servers and we never see them.

Operational logs: request metadata, IP address, browser and coarse location, retained for security, abuse prevention and debugging. We do not build advertising profiles and we do not sell anything about you.

Why we are allowed to

We process account, boundary and billing data to perform the contract you enter into when you use the service. We process operational logs under our legitimate interest in keeping the service secure and working. Where we rely on consent, such as optional product email, you can withdraw it at any time.

Who else processes it

Supabase, for authentication and application data storage. Paddle, as merchant of record, for payment processing, tax and invoicing. Our hosting and database providers, for running the service. Resend, for the emails we send you about your account and your analyses, which receives your address and the message. Map imagery and geospatial data providers, which receive tile requests from your browser when you view a map. Google Maps Platform, when you use the place search: what you type goes from your browser to Google, with your IP address and a session identifier, and Google's own script is loaded at that moment rather than on every page. Google Analytics and PostHog, for product analytics: which pages are opened and which actions are taken, so we can see what works. Neither receives your boundaries or your results.

Each is bound by a data processing agreement. We do not share your boundaries or your results with anyone else, and we do not use them to train models for other customers.

Where it lives

Data may be processed in the United States and the European Union. Where personal data leaves the region it was collected in, transfers rely on Standard Contractual Clauses or an equivalent safeguard.

How long we keep it

Account and analysis data is kept while your account is open and for thirty days after you close it, after which it is deleted. Billing records are kept for as long as tax and accounting law requires, typically seven years. Operational logs are kept for ninety days.

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to processing, or take it elsewhere in a portable format. Write to privacy@usebeneath.com and we will answer within thirty days.

If you are in the EEA or the UK you may also complain to your local supervisory authority. If you are in California you have the rights described in the CCPA, including the right to know and the right to delete. We do not sell or share personal information as those terms are defined there.

Cookies

We set the cookies needed to keep you signed in and to remember your interface preferences. These are essential and cannot be switched off without breaking sign-in.

We also use Google Analytics and PostHog to understand how the site and the application are used. These set analytics cookies and similar identifiers in your browser. They are not advertising cookies, we do not sell or share what they collect, and we do not use them to build profiles for anyone else.

Neither is loaded until you allow it. If you are in the EEA, the United Kingdom or Switzerland we ask before anything non-essential runs, and nothing analytics-related is loaded, and no identifier is set, unless you choose to allow it. Elsewhere they load by default. Either way, if your browser sends a Do Not Track signal we treat that as a refusal, and you can turn analytics off — or back on — at any time: the switch is in the footer of every page on the site, and in the account menu inside the application. Turning it off stops all of it; the essential sign-in cookies above are unaffected.

Changes

If we change this policy materially we will say so by email or in the application before the change takes effect. The date at the top of this page always reflects the current version.