Privacy Policy

Scope

This policy covers parcelclear.com and the ParcelClear application. ParcelClear is a brand of SecurePoint USA LLC, a Washington limited liability company.

What we collect

Account data: your name, work email, organization name, and role. Billing data: your Stripe customer record, plan, and payment history. Card numbers go to Stripe and never reach our servers. Transaction data: the facts your office enters about a file, including names of parties, entities, ownership and control relationships, and property details. Screening data: the matches returned from United States government sanctions lists, the score, and the disposition your reviewer recorded. Operational data: audit records of privileged actions, error reports, and basic analytics.

Who the data is about

Most of the personal information in ParcelClear is not about you. It is about the parties to a transaction your office is handling. Your organization decides what to enter and why. We process it on your instruction, as a service provider to your organization.

What we do not do

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not use the facts in your files to train models. We do not use your file content to market to the people named in it.

Where it lives

Data is stored in the United States. Our subprocessors are Supabase for the database and authentication, Vercel for hosting, Stripe for payment, Resend for outbound mail, and Sentry for error reporting. Sanctions list data comes from the United States Department of the Treasury, Office of Foreign Assets Control, and is public.

Logs

Error reports and audit records carry identifiers, hashes, counts, and event types. They do not carry names, addresses, dates of birth, or free-text notes. The evidence pack PDF does carry the names in your file, because the pack is the record.

Retention

Files, screening results, and evidence packs are retained for the period in your plan. The audit log is append-only and is retained for the life of the account, because a record that can be edited is not a record. If you close your account, you may export your files first. We delete or de-identify file content within ninety days after closure, except where a law requires us to keep it.

Security

Every tenant table carries an organization identifier and row level security is enforced at the database. Roles limit what a member can see. Evidence packs are hashed so a stored copy can be checked against the record. Access to production is limited and logged.

Your choices

You may ask us to access, correct, export, or delete account data. If you are a person named in a file, the organization that created the file controls that record. Send your request to that organization. If you send it to us, we will pass it to them and tell you we did. State privacy laws, including the Texas Data Privacy and Security Act, may give you additional rights. We honor them where they apply.

Children

ParcelClear is a business tool. It is not directed to anyone under eighteen.

Changes

We may update this policy. The last-updated date at the top of this page changes when we do.

Contact

Privacy questions go to the support address in the footer.