What we collect, and why.

RunEnvelope is a zoning and architectural feasibility service for New York City property. This policy describes what we collect when you visit runenvelope.com, create an account, buy a report, or use the platform, and what we do with it.

RunEnvelope is operated by Envelope Technologies LLC. If you hold a seat on a RunEnvelope Pro account, read this alongside our Terms of Service, which describes the seat licensing and account monitoring you agreed to at checkout.

Account information. Your name, email address, and optionally your phone number and company. If you sign in with Google, Google sends us your name, email address, and profile picture. We never receive your Google password. Authentication is handled by Clerk, and Clerk stores your credentials, not us.

Billing information. Card details are entered directly into Stripe and never touch our servers. We store only the Stripe customer identifier, your plan, and the history of what you purchased.

Security and seat enforcement data. Sign-in timestamps, IP address, a hashed device fingerprint, browser user agent, records of the one-time sign-in codes we email when a device is not recognised, and active session records. This exists to enforce the device limits and the no concurrent session rule in our Terms, and to spot credential sharing. We do not derive your location from your IP address: we hold the address itself and nothing computed from it. If that changes, we will update this policy before we rely on it.

Usage and activity data. Which pages and features you use, which tax lots (BBLs) and addresses you search, including on the free check before you have an account, and what RunEnvelope told you about them (the zoning district, the buildable floor area and similar results). Also the report options you choose, the reports you view and download, the links you share and how often they are opened, the comparable sales filters you search with, when you sign up or sign in, and when you start or finish a checkout. For the first page you open in a visit we also note the site that sent you and any campaign tags on the link (for example utm_source). We keep the reports you generate so you can return to them.

We do not record what you type into forms other than a property search, we do not record keystrokes or mouse movements, and this activity record does not contain your IP address, your browser details, your name or your email address.

Cookies. Besides the cookies Clerk needs to keep you signed in and Stripe needs to take a payment, RunEnvelope sets two cookies of its own. One holds a random visitor ID for up to one year, so we can tell that a free check and a later sign-up came from the same browser. The other holds a random session ID and expires after 30 minutes without activity. Neither is shared with anyone or used for advertising. If your browser sends a Do Not Track or Global Privacy Control signal, we do not set the visitor ID at all.

Content you create. Anything you enter into Workspace: deals, saved searches, watched sites, notes, uploaded documents, and CRM contacts. CRM contacts may include names, companies, phone numbers, and email addresses of other people that you choose to add.

To run the product: authenticate you, generate and store reports, take payment, and keep your Workspace data available across sessions.

To enforce our licensing terms. Section 7 of our Terms of Service explains this in detail. Suspected violations are reviewed by a human before any action is taken.

To keep the service working: diagnosing errors, monitoring reliability, and preventing abuse.

To improve the product and its accuracy: seeing which features are used and where people get stuck, checking the engine's results against what was built, and producing aggregate statistics about New York City lots, such as the RunEnvelope Land Index. Aggregate statistics never identify you.

To contact you about your account: receipts, password and sign-in notices, service changes, and support replies. We do not run marketing drip campaigns against your address without your consent.

We use a small number of vendors, each for a specific job. They process data on our behalf and are not permitted to use it for their own purposes.

Clerk handles account creation, sign-in, and session management. Stripe handles payments and stores card data. Sentry receives error reports, which can include your IP address and technical context about what failed. Resend delivers transactional email. Vercel hosts the website and, through Vercel Web Analytics, counts page views without cookies and without identifying you. Google Maps Platform serves the static maps and Street View imagery shown in reports.

When a report renders a map or a Street View image, we send Google the property address or coordinates. We do not send Google your identity along with it.

Our application server and database run on hardware we control in the United States, not on a third party cloud database.

We do not sell your personal information, and we never have.

We do not run advertising trackers or advertising pixels. The only third party analytics on this site is Vercel Web Analytics, which counts page views without cookies; there is no Google Analytics, Segment, Amplitude, Mixpanel, or PostHog. The usage data and cookies described above are our own: they are recorded by our own backend and stay there.

We do not share your data with anyone except the processors listed in section 4, or where we are legally required to.

We do not use your Workspace content, your deals, or your CRM contacts to train machine learning models.

Most of what appears in a RunEnvelope report comes from public New York City records: PLUTO, Department of Buildings filings, ZoLa, and related open data. That information is about parcels and buildings, and it is public whether or not you use RunEnvelope.

Some plans include owner contact lookups. Those results can contain personal information about people who are not RunEnvelope users. If you use that feature, you are responsible for handling the results lawfully, including under telemarketing and anti spam rules. The same applies to any contact you add to your CRM.

Account records, reports, and Workspace content are kept for as long as your account is open, so that your history stays available to you.

When you delete a report, deal, document, pro forma, contact, or event, it disappears from your account straight away. We keep the item, and any file that goes with it, on our servers until your account is deleted, so that we can restore something deleted by mistake if you ask. It is then deleted along with the rest of your account.

Activity data linked to your account is kept for as long as your account is open. Activity from visitors who have not signed in is kept indefinitely, together with its random visitor and session IDs. It does not contain your name, email address, or IP address.

Documents you upload to refine a report, such as a property survey, are deleted 30 days after you upload them, and you can delete one sooner from the upload screen. The figures you confirmed from a survey stay in the reports they were applied to, because the report has to be able to say where its numbers came from.

Security logs, including IP addresses, device records, and session history, are kept for up to 24 months and then deleted.

Billing records are kept for as long as tax and accounting rules require, which is generally seven years.

If you delete your account, we delete your profile, reports, and Workspace content within 30 days, except for records we are required to retain for legal or accounting reasons. We also remove your name, email address, and account from your activity data, leaving only anonymous records.

Before we delete your reports, we keep a de-identified copy of each report's analysis: the lot's tax lot number (BBL), the inputs the analysis used, the results RunEnvelope produced, the version of our zoning engine, and the date. The copy does not contain your name, email address, account, notes, cover page details, or anything you uploaded, and it is not linked to you or your account. We keep these copies indefinitely, to measure and improve the accuracy of our results and to produce aggregate statistics such as the RunEnvelope Land Index.

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete your account and its contents. Email [email protected] and we will respond within 30 days.

You can stop us setting the visitor ID cookie by turning on Do Not Track or Global Privacy Control in your browser, or by blocking or clearing cookies for runenvelope.com. RunEnvelope keeps working either way.

If you signed in with Google, you can disconnect RunEnvelope at any time from your Google Account permissions page. Doing so stops future sign-ins but does not by itself delete your RunEnvelope account, so tell us if you want the data removed too.

Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA, including the right to object to processing or to lodge a complaint with a regulator. We honor these requests regardless of where you are located.

Traffic to and from the site is encrypted in transit. Card data is handled entirely by Stripe and is never stored by us. Passwords are handled by Clerk and are never visible to us. Device fingerprints are stored as hashes rather than raw values.

No system is perfectly secure. If we discover a breach affecting your personal data, we will notify affected users and any regulator we are required to notify.

RunEnvelope is a professional tool for real estate and design work. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.

If we make a material change to how we handle personal data, we will update the date at the top of this page and, where the change is significant, email account holders. Continuing to use RunEnvelope after a change means you accept the updated policy.