Privacy Policy

DRAFT — for attorney review; not legal advice. This document is a working draft prepared for review and finalization by Field Dog, LLC's attorney. It is not legal advice and should not be published or relied upon until a licensed attorney has reviewed and approved it. Items in [brackets] require confirmation by counsel or the company.

Field Dog — Privacy Policy

Effective date: [DATE — confirm with counsel] Last updated: [DATE]

1. Introduction

1.1. This Privacy Policy explains how Field Dog, LLC, a Tennessee limited liability company ("Field Dog," "we," "us," or "our"), collects, uses, and shares information in connection with the Field Dog web application at field-dog.com (the "Service").

1.2. You may contact us about privacy at gage.adkins@adkinsdevelopment.net.

2. Information We Collect

2.1. Information you provide.

• Account information: your email address and a password. We store your password only in hashed form (using PBKDF2); we never store your plaintext password.
• Payment information: on iOS, purchases are handled by Apple through your Apple ID/App Store account; on the web, payments are processed by Stripe. In both cases we do not receive or store your full card number or complete payment card details.
• Imported contacts (optional, where offered): if you choose to import your own phone contacts via a .vcf file, we store that contact data per-user and isolated to your account, solely to flag when a person in your feed already exists in your contacts. This feature may not be available in all versions of the app, and it is only used if you affirmatively provide it.
• Résumés (optional): if you upload a résumé for job matching, we store it and process it — including sending its text to our AI provider (Anthropic) — to match you with relevant items.
• Push notification tokens (optional): if you enable notifications, we store your device push token so we can send you alerts about new items in the categories you choose.
• Other content: watchlists, favorites, custom scoring preferences, your chosen map focus/radius, and archived items you create.

2.2. Information collected automatically.

• Usage and analytics data: such as time on app, features used, and interactions, used to operate and improve the Service.
• Contact-reveal activity: when you unlock an individual's direct contact details, we log which contact you revealed, when, and the credits it used — both to enforce your plan's monthly allowance and to maintain a record of the activity.
• Session cookie: we use a signed session cookie to keep you logged in. [Confirm whether any additional analytics or cookies are used; if so, list them.]
• Technical/log data: such as IP address and device/browser information handled by our network and hosting providers (Cloudflare and Render). [Confirm log retention.]
• Location: the Service is geographically focused on the Nashville / Middle-Tennessee area and centers its map there. It does not request your device's GPS location; the "focus radius" you set is a display preference, not your physical location.

2.3. Business contact data displayed in the Service.

• The Service collects and displays business contact information for professionals in their business capacity (name, title, phone, and email), drawn from firm bios, team/careers pages, press, and leasing flyers. Our aim is to surface business-capacity contact details; because professionals often publish or use a direct/mobile number or a personal email address for business, the details we surface may include such a number or address where it is associated with the individual's professional activity. We do not seek private home addresses or deliberately unlisted personal information, and we do not use consumer people-search or data-broker sites. We also license Apollo.io to help us locate and verify contacts internally; Apollo-sourced contact details are not displayed to subscribers. See Section 8 regarding the rights of individuals whose contact data appears in the Service.
• Public property, permit, and government records. The Service also surfaces public records tied to specific properties from government systems, including: (a) property records from county GIS and assessor systems — the property owner of record (which may be an individual's name), zoning, acreage, appraised value, and recorded sale/deed information; and (b) building-permit records from municipal and county permitting systems — permit type, construction cost, issue dates, the parcel, and the applicant/contact of record (which may be an individual's name in a business capacity). Coverage centers on Nashville / Davidson County and, increasingly, the surrounding Middle-Tennessee counties within the Service's coverage area, drawn from the applicable county and statewide (Tennessee Comptroller / TNMap) GIS services. Where the underlying documents (deeds, plats, permit plans, sale records) reside on official government portals — for example Metro Nashville's ePermits and Parcel Viewer, county registers of deeds, and state assessment systems — the Service provides links to those official sources and does not host, alter, store, or warrant those documents. All of the foregoing is public-record information; the rights described in Section 8 apply. [Draft — for attorney review: counsel to review the surfacing of permit applicant/contact names and any jurisdiction-specific republication or terms-of-use limits on the linked government portals.]
• Under the Stakes › Investors feature, the Service also surfaces publicly-known real-estate investors and investment prospects — including individuals characterized, from public sources, as active or high-net-worth real-estate investors — in their business capacity, with their public business contact path. No private, home, unlisted, or personal financial-account information is collected. The rights described in Section 8 (including deletion/opt-out for individuals whose business contact information appears) apply equally to these individuals.

3. How We Use Information

3.1. We use information to:

• provide, operate, secure, and maintain the Service;
• authenticate you and manage your account and subscription;
• process payments (via Apple on iOS, or Stripe on the web);
• generate AI summaries, scores, and structured intelligence (via Anthropic's Claude models), including processing your résumé text and search queries;
• send push notifications you have enabled (via Expo);
• surface and, where applicable, enrich or verify business contact information (via Apollo.io);
• flag overlaps between your feed and your imported contacts (if you opt in);
• match uploaded résumés to relevant items;
• analyze usage to improve features and performance;
• communicate with you about your account, the Service, and, where permitted, updates; and
• comply with law and enforce our Terms and Acceptable Use Policy.

3.2. We do not sell your personal account data. [Confirm "do not sell/share" characterization with counsel, particularly regarding business contact data under state law — see Section 8.]

4. How We Share Information; Third-Party Processors

4.1. We share information with service providers that process data on our behalf, including:

• Apple — in-app purchases and subscription billing on iOS (payment details handled by Apple under its terms);
• Stripe — payment processing for any web purchases;
• Anthropic — AI processing and web search used to read, summarize, and score content; this includes sending content you provide, such as résumé text and search queries, to Anthropic for processing;
• Apollo.io — business contact data enrichment and verification (a third-party data source/processor; its data is subject to Apollo's terms);
• Expo — mobile app delivery/updates and push-notification dispatch (receives your device push token and the notification content);
• U.S. Census Bureau geocoder; county and municipal GIS, assessor, and permitting systems; the Tennessee Comptroller / TNMap statewide parcel service; and official government records portals (e.g., Metro Nashville ePermits and Parcel Viewer) — address geocoding and public property-, sale-, and building-permit-record lookups, and links to the official source documents;
• Cloudflare — network delivery and security; and
• Render — application hosting, where the Service's SQLite database is stored.

4.2. We may also disclose information to comply with law, respond to lawful requests, protect our rights and users, or in connection with a business transfer (such as a merger or sale of assets).

4.3. Hard guarantee on your data: we never contact, email, or message your imported contacts, and we never cross-share one user's data with another user.

5. Data Storage and Security

5.1. Your data is stored in a SQLite database on our hosting provider (Render), with Cloudflare in front of the Service.

5.2. Security measures include hashing passwords with PBKDF2, signed session cookies, per-user data isolation, optional per-device biometric lock, and not storing full payment card numbers. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

6. Data Retention

6.1. We retain personal data for as long as your account is active and as needed to provide the Service, and thereafter as necessary to comply with legal obligations, resolve disputes, and enforce agreements. [Confirm specific retention periods with counsel.] When no longer needed, we delete or de-identify data.

6.2. Surfaced development data. The public real-estate development information the Service compiles (deals, leasing listings, events, and the companies and public professional contacts associated with them) is retained in our database. The app displays a rolling recent window of this information and moves older items to an archive rather than deleting them; the operator may keep periodic encrypted-at-rest backups of the database for continuity and disaster recovery. This information consists of facts and public/first-party sources; see Section 3 for how we use it and Section 7 for how surfaced individuals may request removal.

7. Your Choices and Rights

7.1. You may access or update your account information, delete imported contacts or uploaded résumés, and cancel your subscription. To request access to or deletion of your personal data, contact gage.adkins@adkinsdevelopment.net. [Confirm verification process and response timeline.]

7.2. Depending on your location, you may have additional rights described in Section 8.

8. State Privacy Laws (CCPA/CPRA and Similar)

8.1. Residents of California and certain other states may have rights to know, access, correct, delete, and opt out of the "sale" or "sharing" of personal information, and to non-discrimination for exercising those rights, subject to the applicable law. [Confirm which state laws apply based on where users and surfaced individuals reside.]

8.2. Business contact data. Because the Service collects and displays third-party business contact information, individuals whose business contact information appears in the Service may request access to, correction of, opt-out from, or deletion of that information. To make such a request, contact gage.adkins@adkinsdevelopment.net. We will honor verified requests to the extent required by applicable law. [Confirm handling process, including how Apollo-sourced data and opt-out/deletion requests are processed and passed through to Apollo where applicable, and any B2B exemptions.]

8.3. How to submit a request. [Describe the request method(s) and any authorized-agent process required by applicable law.]

9. Marketing and Communications; CAN-SPAM / TCPA

9.1. The Field Dog Service itself does not send marketing emails, calls, or text messages to the business contacts it surfaces. Any outreach you conduct to surfaced contacts is your responsibility and must comply with CAN-SPAM, the Telephone Consumer Protection Act (TCPA), Do-Not-Call rules, and applicable state anti-spam laws, as described in the Acceptable Use Policy.

9.2. We may send you (as a user) transactional and account-related messages, and, where permitted, product updates you can opt out of.

10. Children's Privacy

10.1. The Service is not directed to, and may not be used by, anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. International Users

11.1. The Service is operated from the United States and intended for U.S. users. If you access it from outside the United States, you understand your information will be processed in the United States. [Confirm whether non-U.S. users are permitted; adjust for GDPR if applicable.]

12. Changes to This Policy

12.1. We may update this Privacy Policy from time to time. Material changes will be communicated by [describe method], and the "Last updated" date will be revised.

13. Contact Us

13.1. For privacy questions or requests, contact gage.adkins@adkinsdevelopment.net, Field Dog, LLC (Tennessee).