Privacy Policy

1. Overview

MuniReports ("we," "us," or "our") operates munireports.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the rights you have regarding your information.

2. Information we collect

Account information. When you create an account, we collect your email address and a hashed password via our authentication provider, Supabase.

Payment information. Payments are processed by Stripe. We do not store credit card numbers or full payment details on our servers. Stripe provides us with a transaction reference and the last four digits of the card used.

Usage information. We log basic operational data including request logs and order references to operate and improve the Service.

Technical information. Like most websites, we automatically collect IP address, browser type, device type, and similar technical data.

3. How we use information

• To operate and provide the Service
• To process payments and manage your account
• To improve report accuracy and product features
• To respond to support requests
• To send essential service notifications (e.g., billing receipts)
• To detect, prevent, and address fraud or abuse

4. Service providers

We share information only with the third-party providers needed to operate the Service:

• Supabase — authentication and database hosting
• Vercel — application hosting
• Stripe — payment processing
• Anthropic — AI model that generates report content
• Google Workspace — email

Each of these providers has its own privacy practices. We do not sell your personal information to third parties.

5. AI processing

We use AI internally as part of our research workflow, including Anthropic's Claude API, to draft initial content from ACFR data and other public sources. All AI-assisted output is reviewed, verified, and finalized by MuniReports analysts before delivery to customers. AI does not directly produce customer-facing deliverables.

6. Cookies

We use cookies and similar technologies for essential functionality (keeping you signed in, processing payments) and basic analytics. We do not use third-party advertising cookies.

7. Data retention

We retain account information and saved reports as long as your account is active. If you delete your account, we delete associated personal data within 30 days, except where retention is legally required (e.g., payment records for tax purposes).

8. Your rights

You may request access to, correction of, or deletion of your personal information at any time by emailing admin@munireports.com. Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA) or the EU General Data Protection Regulation (GDPR).

9. Security

We use industry-standard security practices including encrypted connections (HTTPS), encrypted password storage, and access controls. No system is perfectly secure, however, and we cannot guarantee absolute security.

10. Children

The Service is not directed at children under 16, and we do not knowingly collect information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service. Continued use after changes constitutes acceptance.

12. Contact

Privacy questions? Email admin@munireports.com.