Skip to main content

Privacy Policy

Last updated: October 2, 2026

Streetmark ("StreetMark," "we," "us," "our"), a registered trade name under which the StreetMark service is operated in the State of Nevada, provides the StreetMark websites, web application, mobile applications, and APIs (the "Service"). This policy explains what personal information we collect, how we use and share it, and the choices and rights you have. It should be read together with our Terms of Service.

Our Role

Organizations (our customers) use the Service to record field encounters and collect information, including through forms and a client portal. For information an organization collects and stores in the Service ("Organization Data"), the organization decides what is collected and why, and we process it on the organization's behalf as its service provider. For account, billing, and usage information about the people who use the Service, we decide how it is used, as described here.

Information We Collect

  • Account information: name, email address, job title, how you heard about us, organization name, and your role and memberships. Sign-in is handled by our authentication provider; we do not store your password.
  • Organization Data: encounters and their field values, locations, timestamps, photos, documents, notes, dataset records, and submissions made through public forms and the client portal.
  • Voice input: when you use voice dictation, the audio recording, its transcript, and the field values extracted from it.
  • Billing information: plan, seat count, usage, and invoice history. Card details are collected and stored by Stripe; we do not receive or store full card numbers.
  • Notification information: your notification preferences and, if you enable push notifications, a device or browser push token.
  • Technical and usage information: IP address, browser and device type, app version, request logs, and error diagnostics used to secure, operate, and troubleshoot the Service.
  • Communications: messages you send us, such as support requests and feedback.

Location Information

The Service is built around geo-tagged records. When you log an encounter or submit a form, the Service collects the location you provide or, with your permission, your device's precise location at that moment. We use precise location only to provide the Service (placing records on a map, reports, and exports for the organization). We do not track your location in the background and do not sell or use it for advertising. You can turn off location access in your device or browser settings and enter locations manually instead.

How We Use Information

  • To provide, maintain, and secure the Service, including authentication and tenant isolation.
  • To process payments, manage subscriptions, and measure usage for billing.
  • To send service, security, billing, and legal messages, and the notifications you choose.
  • To provide support and respond to your requests.
  • To monitor, debug, and prevent abuse, fraud, and security incidents.
  • To operate and improve the Service and its automated and AI-assisted features, such as voice dictation, transcription, and the automated extraction of field values, including by evaluating and improving the prompts, models, and configurations that power them, as described in our Terms of Service.
  • To comply with legal obligations and enforce our Terms.

We may create de-identified and aggregated data that does not identify you, your organization, or any individual, and use it to analyze usage, benchmark, and improve the Service. We do not attempt to re-identify de-identified data.

How We Share Information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only:

  • Within your organization: Organization Data is visible to members of that organization according to the roles and permissions its administrators set. Information a guest user shares is visible to the organization that invited them.
  • With service providers who process it on our behalf to provide the Service, under obligations of confidentiality and security, and who may not use it for their own purposes (listed below).
  • For legal reasons: when required by law or legal process, or to protect the rights, safety, and security of our users, the public, or StreetMark.
  • In a business transfer: to a successor entity, for example if the business is reorganized as a limited liability company, merged, or acquired, subject to this policy.
  • With your direction or consent.

Service Providers

Our principal service providers are:

  • Heroku (Salesforce): application hosting and database
  • Cloudflare: file and photo storage, DNS, content delivery, and website analytics
  • Auth0 (Okta): sign-in and account authentication
  • Stripe: payment processing and billing
  • OpenAI: voice transcription and automated extraction of field values
  • Resend: transactional email
  • Sentry: error monitoring and diagnostics
  • Google: maps (Google Maps Platform) and bot protection (reCAPTCHA)
  • Expo: mobile push notification delivery

Our use of Google Maps Platform and reCAPTCHA is subject to the Google Privacy Policy. We use AI providers under API terms that do not permit them to use your data to train their own models.

Guest Users and People in Organization Records

If an organization invited you as a guest, or information about you appears in an organization's records, that organization controls that information. Please contact the organization directly with questions or requests about it. If you contact us instead, we will refer your request to the organization and help it respond where the Service does not let it do so directly.

Cookies and Local Storage

We use cookies and browser storage that are necessary to sign you in, keep your session and preferences (such as the selected organization and theme), and protect the Service. We do not use advertising cookies or third-party advertising trackers. Our browsers do not currently respond to "Do Not Track" signals, because we do not track you across other sites.

To understand how many people visit our public pages, we use Cloudflare Web Analytics on those pages for visitors who are not signed in; it does not run inside the Service. It sets no cookies, does not record the query part of web addresses, and gives us only aggregate counts of page views, referring sites, countries and device types.

Data Retention and Deletion

We keep account information while your account is active. We keep Organization Data while the organization's account is active and, after it ends, until the organization asks us to delete it, unless the law requires otherwise. An organization administrator may request deletion of the organization's data at any time by writing to support@streetmark.app; we will delete it from our active systems within thirty (30) days after verifying the request. Copies in backups are overwritten through normal rotation, currently within ninety (90) days. We keep billing and tax records, and records needed to resolve disputes or enforce our agreements, for as long as the law requires or permits. Error diagnostics and request logs are kept for a limited period for security and troubleshooting.

Your Privacy Rights

Depending on where you live, including under the California Consumer Privacy Act and other U.S. state laws, you may have the right to know and access the personal information we hold about you, correct it, delete it, receive a portable copy, and opt out of its sale or sharing for targeted advertising (we do neither). We use sensitive information, such as precise location, only to provide the Service. Nevada residents may submit a request to opt out of the sale of covered information, although we do not sell it.

To exercise a right, email support@streetmark.app from the address on your account. We will verify your request and respond within the time the law requires (generally forty-five (45) days). You may use an authorized agent, and we will not discriminate against you for exercising your rights. For Organization Data, see "Guest Users and People in Organization Records" above.

Security

We use industry-standard measures to protect information, including encryption in transit, access controls, server-side enforcement of organization boundaries, and restricted administrative access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security incident affecting your personal information, we will notify you as required by law.

Where Data Is Stored

The Service is operated from the United States, and information is stored and processed in the United States. Some service providers may process information in other countries under appropriate safeguards.

Children

The Service is not directed to children, and you must be at least 18 years old to use it. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service before they take effect, and update the date above.

Contact

Questions or requests about this policy or your information: support@streetmark.app.