Privacy Policy

1. Introduction

OutcropAI ("we," "our," or "us") is operated by City Deals. This Privacy Policy explains how we collect, use, store, and protect your information when you use the OutcropAI web application at outcropai.app.

By using OutcropAI, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the application.

2. Information We Collect

Account Information: When you create an account, we collect your email address, display name, and authentication credentials through our secure authentication system.

Field Data: Photos, GPS coordinates, field notes, geological observations, measurements, and other data you input into the application for report generation.

Location Data: GPS coordinates collected with your permission for site reports. We also use IP-based geolocation to auto-detect your country for standards compliance. You may deny location access at any time through your browser settings.

Usage Data: We collect anonymized usage analytics including pages visited, features used, report generation frequency, and error logs to improve the application.

Payment Information: Payment processing is handled entirely by a PCI-DSS compliant third-party processor. We do not store credit card numbers, bank account details, or other payment credentials on our servers.

3. How We Use Your Information

We use the information we collect to:

• Generate geological site reports using AI-powered analysis
• Auto-detect applicable geological standards and professional licensing requirements for your location
• Provide weather data and geospatial context for your field reports
• Process subscription payments and manage your account
• Send transactional emails (account confirmation, password reset, payment receipts)
• Improve the application through anonymized usage analytics
• Provide customer support

4. AI Processing & Third-Party Services

We use third-party services in the following categories:

• AI Processing — Your field photos, notes, and GPS data are sent to an AI provider for analysis and report generation. Data is processed in real-time and not retained beyond the session.
• Authentication & Database — We use a cloud-based authentication and database service to manage your account, store your reports, and sync your data securely.
• Payment Processing — Subscription payments are handled by a PCI-DSS compliant payment processor. We never store your credit card or banking details on our servers.
• Weather Data — Real-time weather conditions are retrieved from a weather API using your GPS coordinates only. No personal data is shared.
• Geocoding — Your GPS coordinates are sent to a reverse geocoding service to determine your location name and country. Only coordinates are shared, no personal data.
• Hosting — The application is hosted on a cloud deployment platform with global CDN for fast, reliable access worldwide.

5. Data Storage & Security

Your data is stored on a secure cloud platform with industry-standard encryption at rest and in transit. We implement the following security measures:

• TLS/SSL encryption for all data transmission
• Database security rules restricting data access to authenticated users only
• No storage of payment credentials — handled entirely by our PCI-DSS compliant payment processor
• Regular security reviews and dependency updates

Your geological field data and generated reports are stored in your secure account and are accessible only to you (and your team members on Team plans).

6. Data Retention

We retain your account data and generated reports for as long as your account is active. If you delete your account, your personal data will be removed within 30 days. Anonymized usage analytics may be retained indefinitely for product improvement.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data
• Portability: Request export of your data in a machine-readable format
• Objection: Object to certain types of data processing

To exercise any of these rights, contact us at privacy@outcropai.app.

8. Cookies & Local Storage

OutcropAI uses browser local storage (not tracking cookies) to store your preferences including theme selection, language preference, and authentication state. We do not use third-party advertising cookies or tracking pixels.

9. Children's Privacy

OutcropAI is a professional geological tool and is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children.

10. International Data Transfers

OutcropAI serves users in 30+ countries. Your data may be processed in jurisdictions outside your country of residence, where our service providers operate. We ensure appropriate safeguards are in place for all international data transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of OutcropAI after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact us at: