Privacy

Page analytics (PostHog) record the pages you view (their web address), how long they stay open, the site that sent you, your browser, device type and screen size, and an approximate location PostHog works out from your IP address. They use no cookies, no session recording and no automatic click tracking, and they don't run at all when your browser sends Global Privacy Control. We don't respond to Do Not Track signals separately.

When you look up an address on the website, its text goes to Google (to suggest and locate addresses) and the U.S. Census Bureau geocoder (to find its census block group), under their own terms. Lookups never appear in the page's web address, and we don't save the address.

• Email address, when you ask for a key or sign in from an assistant: to send your sign-in link or code, tie keys and billing to you, and answer support requests.
• Keys: we store a SHA-256 hash of each key and its first 12 characters (to tell keys apart), never the whole key.
• Usage: how many calls each key makes a month, for plan limits and billing.
• IP addresses of requests for a sign-up link or sign-in code are saved with that request, to limit abuse. Calls without a key are rate-limited by IP address without saving it.
• Billing: paid plans are handled by Stripe, which collects your card details. We keep Stripe's customer and subscription IDs, not card numbers.
• Funnel events (sign-up started, key revealed, first lookup, plan changes, assistant connected) go to PostHog under an ID made from a keyed hash of your email, or the key's number for keys without an email. The email itself is never sent.
• Request logs record the path, status, time and key prefix of each call. Query strings, which can hold an address or coordinates, are removed from them.

When you connect CrimeMetric to an assistant, the sign-in page emails you a 6-digit code, or takes an API key you paste. The code is stored as a salted hash and expires after ten minutes. The page sets two short-lived cookies (up to 15 minutes) that tie the sign-in to your browser; they aren't used for anything else. The connection is an OAuth grant that names your key (and, if you signed in by email, your email); its access and refresh tokens are stored only as hashes.

CrimeMetric receives only what the assistant sends to its tools, such as an address or a city name, not your conversation. The assistant's own privacy policy covers your chat with it.

If you tell CrimeMetric what you use it for (the save_profile tool), we keep that use case, a short description and the places you named with your key, to fit later answers. Analytics get only the use case and the number of places.

Cloudflare and Fly.io host the API and website, Amazon Web Services (SES) sends email, Stripe handles payments, and PostHog runs analytics, as our service providers. The U.S. Census Bureau geocoder receives address text sent to the API or looked up on the website; Google receives address text only from lookups on the website. Both use it under their own terms.

• Account records (email, key hashes, usage, billing IDs) while your key is active, and after that until you ask us to delete them, except billing records, which we keep as tax law requires.
• Sign-in codes expire after ten minutes and sign-up links after 24 hours; the records of those requests, with their IP address, are kept with the account records and deleted with them.
• Request logs: up to 30 days with our hosting providers.
• Assistant connections lapse after 90 days without use. Removing CrimeMetric in your assistant stops it using the connection; email us to end the grant on our side as well.
• Saved profiles: until you replace them, ask us to delete them, or close the key.

To get a copy of, correct or delete your account information, end a connection on our side, or close a key, email support@vorplabs.com with “Privacy request” in the subject. A deletion removes your email, keys, usage, saved profile, sign-in and sign-up records (with their IP addresses), assistant connections, and the analytics events tied to you. We keep Stripe billing records as tax law requires, and request logs until they expire (up to 30 days).

Key secrets, sign-in codes and connection tokens are stored only as hashes (we also keep each key's short prefix), and every connection to CrimeMetric is encrypted (HTTPS). No system is perfectly secure; tell us at support@vorplabs.com if you find a problem.

CrimeMetric isn't meant for children under 13, and we don't knowingly collect their information.

When what we collect or how we use it changes, we'll update this page and the date at the top before the change takes effect.

How the figures may be used is in the API terms and data terms.