What we collect, and why.

Envelope is a zoning and architectural feasibility service for New York City property. This policy describes what we collect when you visit runenvelope.com, create an account, buy a report, or use the platform, and what we do with it.

Envelope is operated by West Egg Development. If you are an Enterprise seat holder, read this alongside our Terms of Service, which describes the seat licensing and account monitoring you agreed to at checkout.

Account information. Your name, email address, and optionally your phone number and company. If you sign in with Google, Google sends us your name, email address, and profile picture. We never receive your Google password. Authentication is handled by Clerk, and Clerk stores your credentials, not us.

Billing information. Card details are entered directly into Stripe and never touch our servers. We store only the Stripe customer identifier, your plan, and the history of what you purchased.

Security and seat enforcement data. Sign-in timestamps, IP address, approximate city level location, a hashed device fingerprint, browser user agent, and active session records. This exists to enforce the two device and no concurrent session rules in our Terms, and to spot credential sharing.

Usage data. Which pages and features you use, which tax lots (BBLs) you look up, which reports you generate, and when. We keep the reports you generate so you can return to them.

Content you create. Anything you enter into Workspace: deals, saved searches, watched sites, notes, uploaded documents, and CRM contacts. CRM contacts may include names, companies, phone numbers, and email addresses of other people that you choose to add.

To run the product: authenticate you, generate and store reports, take payment, and keep your Workspace data available across sessions.

To enforce our licensing terms. Section 3 of our Terms of Service explains this in detail. Suspected violations are reviewed by a human before any action is taken.

To keep the service working: diagnosing errors, monitoring reliability, and preventing abuse.

To contact you about your account: receipts, password and sign-in notices, service changes, and support replies. We do not run marketing drip campaigns against your address without your consent.

We use a small number of vendors, each for a specific job. They process data on our behalf and are not permitted to use it for their own purposes.

Clerk handles account creation, sign-in, and session management. Stripe handles payments and stores card data. Sentry receives error reports, which can include your IP address and technical context about what failed. Resend delivers transactional email. Vercel hosts the website. Google Maps Platform serves the static maps and Street View imagery shown in reports.

When a report renders a map or a Street View image, we send Google the property address or coordinates. We do not send Google your identity along with it.

Our application server and database run on hardware we control in the United States, not on a third party cloud database.

We do not sell your personal information, and we never have.

We do not run advertising trackers, advertising pixels, or third party analytics SDKs. There is no Google Analytics, Segment, Amplitude, Mixpanel, or PostHog on this site. The usage data described above is recorded by our own backend and stays there.

We do not share your data with anyone except the processors listed in section 4, or where we are legally required to.

We do not use your Workspace content, your deals, or your CRM contacts to train machine learning models.

Most of what appears in an Envelope report comes from public New York City records: PLUTO, Department of Buildings filings, ZoLa, and related open data. That information is about parcels and buildings, and it is public whether or not you use Envelope.

Some plans include owner contact lookups. Those results can contain personal information about people who are not Envelope users. If you use that feature, you are responsible for handling the results lawfully, including under telemarketing and anti spam rules. The same applies to any contact you add to your CRM.

Account records, reports, and Workspace content are kept for as long as your account is open, so that your history stays available to you.

Security logs, including IP addresses, device records, and session history, are kept for up to 24 months and then deleted.

Billing records are kept for as long as tax and accounting rules require, which is generally seven years.

If you delete your account, we delete your profile, reports, and Workspace content within 30 days, except for records we are required to retain for legal or accounting reasons.

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete your account and its contents. Email [email protected] and we will respond within 30 days.

If you signed in with Google, you can disconnect Envelope at any time from your Google Account permissions page. Doing so stops future sign-ins but does not by itself delete your Envelope account, so tell us if you want the data removed too.

Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA, including the right to object to processing or to lodge a complaint with a regulator. We honor these requests regardless of where you are located.

Traffic to and from the site is encrypted in transit. Card data is handled entirely by Stripe and is never stored by us. Passwords are handled by Clerk and are never visible to us. Device fingerprints are stored as hashes rather than raw values.

No system is perfectly secure. If we discover a breach affecting your personal data, we will notify affected users and any regulator we are required to notify.

Envelope is a professional tool for real estate and design work. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.

If we make a material change to how we handle personal data, we will update the date at the top of this page and, where the change is significant, email account holders. Continuing to use Envelope after a change means you accept the updated policy.