Legal
Privacy Policy
Effective April 4, 2026 · CoastClear / zkflow.ai
CoastClear is a property intelligence platform for NW Florida real estate professionals, operated by zkflow.ai (“we,” “us,” “our”). This Privacy Policy explains what personal information we collect, how we use it, and your rights under applicable law, including the Florida Digital Bill of Rights (FDBR, effective July 1, 2024).
1. Information We Collect
Account & Waitlist Data
Your email address, collected when you join the waitlist or create an account via magic link authentication. No passwords are stored.
Usage Data
Property searches and report views. Search queries are associated with your session to provide the service but are not tied to a persistent personal profile for advertising purposes.
Technical Data
IP address, browser type, and device information collected automatically by our hosting infrastructure (Vercel) and database provider (Supabase) as part of standard server operations.
2. What We Do Not Collect
- Payment card numbers or bank account information (future billing processed by Stripe, not stored by us)
- Social Security numbers, driver's license numbers, or government-issued IDs
- Cross-site tracking cookies or advertising identifiers
- Location data beyond what you provide in a property search query
3. How We Use Your Information
- To authenticate your access to the platform via email magic link
- To manage waitlist requests and communicate service availability
- To deliver property reports and related data queries
- To improve the platform based on aggregate usage patterns
- To detect and prevent fraud, abuse, or unauthorized access
- To comply with applicable legal obligations
We do not sell your personal information to third parties. We do not use your data for targeted advertising.
4. Third-Party Services
We share data with the following service providers solely to operate the platform:
Supabase, Inc.
Database and authentication. Your email address and session data are stored in Supabase's US-East region. Supabase is SOC 2 Type 2 certified.
Vercel, Inc.
Hosting, edge delivery, and server-side rendering. IP addresses and request metadata are processed by Vercel's global edge network.
5. Data Retention
- Account data is retained while your account is active and for 30 days following a deletion request
- Waitlist submissions are retained until the service is generally available or you request deletion
- Server access logs are retained per Vercel and Supabase standard policies (typically 30–90 days)
- Property search history is not retained beyond your active session
6. Your Rights (Florida Digital Bill of Rights)
Under the Florida Digital Bill of Rights (FDBR), Florida residents have the following rights regarding their personal data:
- Right to Know — confirm whether we process your personal data and receive a summary of what we hold
- Right to Access — receive a portable copy of your personal data
- Right to Correct — request correction of inaccurate personal data
- Right to Delete — request deletion of personal data we hold about you
- Right to Opt Out — opt out of the sale of personal data (we do not sell personal data)
- Right to Non-Discrimination — we will not discriminate against you for exercising these rights
To exercise any of these rights, contact us at support@zkflow.ai. We will respond within 45 days as required by law.
7. Data Security
All data is encrypted in transit using TLS 1.2 or higher and encrypted at rest using AES-256 (Supabase). Access to the platform is restricted to users on our approved email allowlist. We conduct periodic security reviews of our infrastructure and third-party dependencies.
8. Children's Privacy
CoastClear is intended for licensed real estate professionals. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal data, contact us at support@zkflow.ai and we will promptly delete it.
9. Changes to This Policy
We may update this Privacy Policy at any time. For material changes, we will notify you via email to your registered address at least 30 days before the changes take effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.
10. Contact
Questions or requests regarding this Privacy Policy: