Privacy policy

Short version

• We record visits with PostHog analytics and session recordings, on the site and in the app.
• We keep what you give us, like your email, territory and team, to run your account and email you about liftdue.
• We don't tell building owners, agencies or other companies which buildings you look at, unless the law requires it. If liftdue is ever sold, the buyer gets your data under this same policy.
• Clicking a link in one of our emails can tie your visit, and its recording, to your email.
• If we emailed you before you signed up, here's what we hold and how to stop it.
• Giving your email to download a file also starts a free trial. There's no card, so it can't turn into a charge.
• We don't sell your personal information, and we don't use ad networks.
• Ask us for a copy of your data, a correction or deletion.

On liftdue.com

Analytics and session recordings

Every visit is recorded with PostHog, so we can see where the site breaks or confuses people. That includes the pages you view, clicks and taps, scrolling, how fast pages load, errors, your browser, device and screen size, the page that sent you, and campaign tags in the link (like utm_campaign or an ad click id). PostHog also stores your IP address and uses it to estimate your rough location.

Session recordings replay what happened on the page, including mouse movement, browser console messages and what you type into fields, like your email or ZIP code. Sign-in codes and fields we mark as secret are masked in your browser before anything is sent. We never use recordings for ads. Recordings are deleted after 30 days.

We remember the first and the latest campaign that brought you to liftdue, so we know which emails and pages work.

The territory search

When you look up a ZIP code, city or borough, we store the territories you looked at with a random visitor id, your IP address and browser.

Forms

• Your email, when you give it to get a file or a list. We store it with the territory, the page, the campaign that brought you, your IP address and browser. Giving it also opens a free trial account for that email, with its welcome emails. Each has an unsubscribe link. If someone else typed your email, use that link to stop the emails, or ask us to delete the account.
• Book a call: your name, email, the time you picked and your time zone, plus your phone, company and note if you add them.

Our emails

Our emails report whether they were opened and which links were clicked.

In the app

• Account: your email, your name if you add it, your team, your territory, the people you invite (their email addresses) and when you sign in.
• Use: the same analytics and session recordings as on the site. In the app, recordings also include the app's requests to our servers, with sign-in codes and tokens removed. Once you sign in, your activity, including earlier visits from the same browser, is linked to your account and email.
• Downloads: each CSV or PDF you download: which territory, how many rows and when. To skip asking twice, the app remembers on your device the email you gave for a download.
• Reports and feedback: what you write when you report a wrong record or send feedback, plus the page, your browser and window size, and a screenshot if you add one.
• Email: the emails we send you, whether they were delivered, opened or clicked, and any unsubscribes.
• Billing, once it opens: you pay on Stripe's checkout page, so Stripe gets your card and billing details. We keep a Stripe customer id, your plan, its status and dates.

Names in public records

The lists show building owners and site contacts as the government agency lists them: TDLR in Texas, and HPD or the city's PLUTO file in New York City. We try to leave out owner names that look like a private person's. Site contacts and managing agents are often named people, and we show them as the agency lists them. If you're named in a record and want us to look at it, contact us. Changes to the record itself go through the agency.

If we emailed you first

To reach elevator companies that may want liftdue, we also collect business names and work contact details from public sources such as state license records and company websites. If you ask us to stop, we remove your details from our working lists and keep only your email address on a do-not-contact list, so we don't write to you again. Links in those emails are personal: clicking one ties your visit, and its recording, to your email.

How we use it

• To run liftdue: sign you in, show your territory's list, send the emails you asked for, and keep your team's account.
• To email you about liftdue, and to reach elevator companies that may want it.
• To answer you: a person gets an email alert when you sign up, request a call, report a record or send feedback.
• To improve liftdue: recordings and usage numbers show us bugs and where people get stuck.
• To keep it safe: to spot abuse and automated traffic.
• To bill you, once billing opens.

We don't sell your personal information, and we don't share it for advertising. The lists themselves show names from public government records, as Names in public records explains.

Who we share it with

With the services that run liftdue for us: Fly.io (web servers), Convex (database), Resend (email), PostHog (analytics and recordings), Stripe (payments, once billing opens), Google Workspace (our own email, where the alerts arrive) and GitHub (our code and outreach lists). The security page says what each one holds and where.

Outreach lists (the business contact details in If we emailed you first) are kept in a private GitHub repository, in Google Workspace and in the tool we send email with. We don't give or sell them to anyone else. Beyond that, we share data only if the law requires it, or with a buyer if liftdue is ever sold, under this same policy.

Where it's stored and for how long

The app's database and web servers are in Virginia, US. Requests can pass through a nearby Fly edge server outside the US. Analytics and recordings are in the EU, in Frankfurt, Germany. Email and payment providers are US companies. Google may store our own email, and GitHub our outreach lists, outside the US.

• Session recordings: deleted after 30 days.
• Account data: kept until you ask us to delete it, even if you stop using liftdue.
• Other analytics, emails you gave us and call requests: kept until you ask us to delete them.
• Outreach contact details: kept until you ask us to stop or delete them. Then we keep only your email address on a do-not-contact list.
• Billing records: kept as long as tax law requires.

Cookies and browser storage

In short: an analytics id, the campaign that brought you, and your sign-in. None are for advertising.

• PostHog (cookie and local storage, up to 1 year): your random visitor id and session id.
• ld_ft and ld_lt (cookies on liftdue.com, up to 400 days): the first and latest campaign that brought you, so the app can see it after you sign up.
• ld_boot (session storage): a visitor id made before analytics loads, so links into the app keep it.
• App sign-in (local storage): your sign-in session, so you stay signed in.
• Download email (local storage, in the app): the email you gave for a download, so we don't ask twice.

Clearing them resets your ids and signs you out of the app. There's no switch to turn recording off. Ask us and we'll delete the recordings tied to you.

Your choices

• Every list and onboarding email has an unsubscribe link, and our outreach emails tell you how to opt out.
• Ask us for a copy of your data, to correct it, or to delete your account and the analytics and recordings tied to you. The team owner can ask us to delete the whole team. We'll do it within 30 days.
• You can use liftdue.com without giving us your email.
• If you're in the EU or UK, you can also object to how we use your data and complain to your local data protection authority.

liftdue is a service for businesses. It isn't meant for children.

Changes

When this policy changes, we update this page and the date at the top. If a change matters for your account, we'll email you before it applies.

Contact

Questions or requests about your data:

Email

hello@liftdue.com

Talk to a person

Book a call

Mail

liftdue (Helios One)
3075 Clay St
San Francisco, CA 94115