Privacy Policy

• Account information. Email address when you sign in via magic link. Optional wallet address if you connect one.
• Purchase history. Records of datasets or subscriptions you buy, including transaction IDs and amounts. Used for order fulfillment and tax compliance.
• Usage data. Page views, dataset interactions, and feature usage collected via Google Analytics. We track page views, item views, cart additions, checkouts, purchases, logins, map interactions, and scroll depth.
• Cookies. A session cookie (cm_session) to keep you authenticated. Google Analytics cookies for traffic analysis. You can disable cookies in your browser settings, but authentication will not work without the session cookie.

• Provide and maintain your account
• Process payments and deliver purchased datasets
• Send authentication emails via Resend
• Improve our site and datasets based on usage patterns
• Comply with legal obligations (tax records, lawful requests)

• Cloudflare. Hosting, DNS, D1 database, R2 storage, Workers API. All data processed through Cloudflare's global network.
• Stripe. Payment processing. Your card details never reach our servers. Stripe handles all payment data under their privacy policy.
• Resend. Transactional email delivery for magic link authentication.
• Google Analytics. Anonymous usage analytics. We do not share personal data with Google.

• Account data. We retain your email and account information until you request deletion. To delete your account, email team@civicmerge.com from the address associated with your account. We will remove your personal data within 30 days.
• Purchase records. Transaction records (anonymized — stripped of email linkage) are retained for 7 years to comply with tax obligations.
• Analytics data. Governed by Google Analytics's data retention policies.

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the right to request disclosure of the personal data we collect, request deletion of your data, and opt out of the sale of your data. We do not sell personal data. To exercise your rights, email team@civicmerge.com.

We use Cloudflare's infrastructure for hosting and database storage. Authentication uses JWTs with 7-day expiry. Payments are processed entirely by Stripe — we never store or process payment card data. That said, no online service is 100% secure. You use our services at your own risk.

CivicMerge is not intended for anyone under 18. We do not knowingly collect data from minors. If we learn that we have collected data from someone under 18, we will delete it promptly.

We may update this policy. Material changes will be posted on this page. Continued use after changes take effect constitutes acceptance.

Interzone Group • California, USA
team@civicmerge.com