Privacy Policy

DoesItHaveIt? ("we," "us," or "our") is operated by JustWhat LLC, a Colorado company. This policy explains what personal information we collect, how we use it, and your choices. We take privacy seriously — we don't sell personal data, and we minimize what we collect to what's necessary to run the service.

Account information. When you create an account we collect your email address, name (optional), and billing details (via Stripe — we never see your full card number). If you sign in via Google, we receive your name and email from Google with your consent.

Addresses you look up. We process address queries to return results. Anonymous lookups are not stored against your identity. If you're signed in and save an address, we store it encrypted at rest. We never sell address data you enter.

Usage data. We collect standard server logs (IP address, browser type, pages visited, timestamps) and aggregate analytics (e.g., which categories are most searched). We use these to improve the product.

Communications. If you contact us via email, the contact form, or the bug reporter, we store your message and contact details to respond and track issues.

Cookies and local storage. We use session cookies for authentication and localStorage for UI preferences (e.g., theme, recent searches). We don't use advertising tracking cookies.

We use the information we collect to: provide and improve the service; process subscription payments; send transactional emails (receipts, plan changes, watchlist alerts) you've opted into; respond to support requests; detect and prevent fraud and abuse; and comply with legal obligations.

We do not use your data for advertising, profile-building for third parties, or sale to data brokers.

We share limited data with the following categories of service providers who help us operate:

• Stripe — payment processing. Governed by Stripe's Privacy Policy.
• AWS — cloud infrastructure (RDS, S3, SES, Fargate, Cognito). Data is stored in the us-east-1 region.
• Mailchimp / Mandrill — transactional and marketing emails.
• Asana and GitHub — bug tracking (only the content of bug reports you submit).
• Data providers (official federal, state, and county records, commercial place and event data, live environmental and infrastructure feeds, and our own proprietary monitoring and scraper network) — we query live APIs, cached provider endpoints, and scheduled public datasets to return address results. Your query may be sent to upstream providers when a live lookup is required, but it is not associated with your DoesItHaveIt identity beyond what the provider logs by default.

We require service providers to handle your data consistent with this policy and applicable law.

We retain account data for as long as your account is active and for a reasonable period afterward. You may request deletion at any time (see "Your rights" below). Saved addresses are encrypted at rest and permanently deleted when your account is closed. Anonymous lookup logs are retained in aggregate form only.

We use industry-standard measures to protect your data, including TLS encryption in transit, AES encryption at rest for sensitive fields (e.g., saved addresses), access controls, and regular security reviews. No system is perfectly secure — if you believe your account has been compromised, contact us immediately at security@doesithaveit.com.

Depending on your location, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to or restrict processing; and data portability. Colorado residents have additional rights under the Colorado Privacy Act (CPA).

To exercise any right, email privacy@doesithaveit.com. We respond within 30 days. You may also close your account and delete all associated data from Dashboard → Account settings.

DoesItHaveIt? is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this policy from time to time. We'll notify you of material changes via email (if you have an account) or a banner on the site. The "last updated" date at the top of this page reflects the most recent revision. Continued use after changes constitutes acceptance.

Privacy questions or requests: privacy@doesithaveit.com

JustWhat LLC · Denver, Colorado · United States