We verify facts. We don’t sell data.

ADUOS is an address-first ADU feasibility tool. To work, we need to know the address you’re asking about. If you want to save or come back to a case, we also need your email.

We do not sell, lease, or broker your information. We do not run third-party advertising trackers. We do not share your address with builders unless you explicitly opt in during the execution phase.

• The address you enter. Required to run the parcel lookup and show the feasibility answer.
• Your email (optional). Only if you choose to save your case or receive a magic-link sign-in.
• Anonymous usage events. Address submitted, case opened, evidence drawer opened. No personally identifying attributes attached.
• Payment data (only if you buy). Handled by Stripe; we never see your card number.

• Run your address against public parcel and zoning data.
• Generate your case and save it under your account if you signed in.
• Improve ADUOS based on aggregate usage patterns (never tied back to an individual email or address).
• If you’ve purchased an execution-lane case and explicitly opt in, we share the case with a vetted local partner builder.

• We do not sell, lease, or otherwise monetize your contact information.
• We do not run third-party advertising pixels, retargeting scripts, or behavioral tracking.
• We do not send you newsletters you didn’t ask for.
• We do not share your address with builders unless you’ve paid and opted in.

If you have an account, your case lives as long as the account — you can delete it at any time from your account page.

If you used ADUOS without an account, your case lives for 30 days and then is purged automatically.

Aggregate usage data is retained indefinitely in anonymized form, because we use it to understand what homeowners actually need.

Under the California Consumer Privacy Act (CCPA) and similar regulations, you have the right to know what data we hold about you, correct it, export it, or delete it. To exercise any of these rights, email hello@aduos.co from the email tied to your account. We’ll respond within 30 days.

Data at rest is encrypted via Supabase’s managed infrastructure. Data in transit is TLS 1.3. We use strict Content Security Policy, HSTS, and SameSite cookie rules. If we ever discover a breach, we’ll notify affected users within 72 hours.

If we change this policy materially, we’ll note the change here and email users with accounts. The “last updated” date at the top reflects the most recent change.

Privacy questions go to hello@aduos.co. We read every one.