Privacy Policy

1. Introduction

Welcome to RushRoost ("the App," "we," "us," or "our"). RushRoost is a real estate commute-analysis tool operated by Rational Mind Studios LLC ("Operator"). This Privacy Policy explains how we collect, use, store, and protect information when you use our website and services located at rushroost.com (and any associated browser extensions).

By accessing or using RushRoost, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, you must discontinue use of the App immediately.

2. Information We Collect

We collect only the information necessary to provide and improve the App's functionality. The categories of data we handle are described below.

2.1 Information You Provide Directly

• Addresses: Home addresses, work/school destination addresses, and work addresses you enter for commute calculations and neighborhood searches. These are stored locally on your device (browser localStorage) as part of your recent-address history (up to 3 entries per category) and are not transmitted to our servers for permanent storage.
• Zillow URLs: If you optionally enter a Zillow property URL, it is used solely to generate a link for your convenience and is not stored on our servers.

2.2 Information Collected Through Authentication

If you choose to sign in, we use Auth0 (a third-party authentication provider) to manage your account. Through this process, we receive and store:

• Your email address (used as your unique account identifier)
• Your name (as provided by your identity provider)
• Your profile picture URL (displayed in-app only; not permanently stored by us)

2.3 Subscription & Payment Information

If you purchase a subscription (e.g., Individual Pro or Realtor Team plans), payment processing is handled entirely by LemonSqueezy, a third-party payment processor. We do not collect, store, or have access to your credit card number or full payment details. We receive and store only:

• Your LemonSqueezy customer ID and subscription ID
• Subscription status (active, cancelled, expired, etc.)
• Plan/tier information

2.4 Usage Analytics & Operational Data

For authenticated users, we maintain the following aggregate usage counters in our database to monitor service health, manage costs, detect abuse, and improve the App:

• First and most recent login timestamps
• Total login count
• Total commute-calculator API calls
• Total neighborhood-finder API calls
• Total true-commute API calls

We do not log or store the specific addresses, routes, or results of your queries on our servers. Only aggregate call counts are retained.

2.5 Automatically Collected Information

• Vercel Analytics: We use Vercel Analytics to collect anonymized page-view and interaction data (e.g., pages visited, referral source, device type). This data is aggregated and does not personally identify you.
• Vercel Speed Insights: We collect anonymized performance metrics (e.g., page load times) to monitor and improve App performance.

3. Cookies & Local Storage

3.1 Cookies

• Auth0 Session Cookies: Essential cookies (e.g., __session) used solely to maintain your authenticated session. These are strictly necessary for the App to function when you are signed in and cannot be opted out of while using authenticated features.

3.2 Browser Local Storage

We use your browser's localStorage to store preferences and recent data locally on your device, including:

• Recent address history (home, destination, and work addresses — up to 3 each)
• Onboarding wizard state and completion flags
• Introductory modal "seen" flags

All localStorage data resides exclusively on your device. You may clear it at any time through the "Reset Everything" function on the Account page or by clearing your browser data.

4. How We Use Your Information

We use the information described above for the following purposes only:

• Service Delivery: To calculate commute times, find neighborhoods, display maps, and provide the core features of the App.
• Authentication & Security: To verify your identity, maintain your session, and protect against unauthorized access.
• Subscription Management: To process and manage your subscription tier, verify your access level, and facilitate payment through our third-party payment processor (LemonSqueezy).
• Service Improvement: To analyze aggregate usage patterns and performance metrics to improve the App's reliability, speed, and user experience.
• Abuse Prevention & Cost Management: To monitor per-user API usage counters in order to detect abuse and manage third-party API costs (e.g., Google Maps).
• Operational Administration: An administrator may access user account data (email, name, usage statistics) solely for operational, debugging, and support purposes.

5. We Do NOT Sell Your Data

RushRoost does not sell, rent, lease, trade, or otherwise commercially transfer your personal information to any third party — for monetary consideration or otherwise.

We have never sold personal information, and we have no plans to do so. This commitment applies to all categories of personal data we collect, including but not limited to your email address, name, addresses entered, usage data, and any other information described in this Privacy Policy.

For the purposes of the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), we do not "sell" or "share" (as those terms are defined under applicable law) personal information of consumers.

6. Third-Party Services

RushRoost integrates with the following third-party services to provide its functionality. Each of these services has its own privacy policy governing how it handles data:

• Google Maps Platform (Maps JavaScript API, Geocoding, Distance Matrix, Directions, Places, Street View) — Google Privacy Policy. Address data you enter is transmitted to Google's servers to perform geocoding, routing, and map rendering. Google may collect usage data in accordance with its own policies.
• Auth0 (by Okta) — Authentication provider. Auth0 Privacy Policy. Your sign-in credentials and profile data are processed through Auth0's infrastructure.
• LemonSqueezy — Payment processing and subscription management. LemonSqueezy Privacy Policy. If you purchase a subscription, your payment information is processed directly by LemonSqueezy. We do not store your credit card details.
• Vercel — Hosting, serverless functions, analytics, speed insights, and database. Vercel Privacy Policy. Anonymized analytics and performance data are processed by Vercel.

We are not responsible for the privacy practices of these third-party providers. We encourage you to review their respective privacy policies.

7. Data Storage & Security

• Server-Side Data: User account records (email, name, login timestamps, and aggregate usage counters) are stored in a PostgreSQL database hosted on Vercel's infrastructure, protected by industry-standard encryption in transit and at rest.
• Client-Side Data: Addresses and preferences are stored in your browser's localStorage. This data never leaves your device except when transmitted to Google Maps APIs for calculation purposes.
• Authentication Tokens: Session tokens are managed by Auth0 using secure, httpOnly cookies with appropriate security flags.

While we implement commercially reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data, and you use the App at your own risk.

8. Data Retention

We retain your server-side account data (email, name, and usage counters) for as long as your account remains active or as needed to provide the services. Client-side data persists in your browser until you clear it manually or use the "Reset Everything" option.

If you request deletion of your account, we will remove your personally identifiable information from our database within 30 days. We may retain anonymized, aggregate usage data that cannot be used to identify you for the purpose of service improvement.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data from our systems.
• Data Portability: Request your data in a structured, machine-readable format.
• Opt-Out of Sale: As stated in Section 5, we do not sell your data. There is nothing to opt out of.

To exercise any of these rights, please contact us at the email address provided in Section 13 below. We will respond to verifiable requests within 30 days, or such other timeframe as required by applicable law.

10. Children's Privacy

RushRoost is not directed at, and is not intended for use by, individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

11. Disclaimer of Warranties & Limitation of Liability

THE APP AND ALL ASSOCIATED SERVICES ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, OR RELIABILITY.

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, THE OPERATOR, ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, AND LICENSORS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES, ARISING OUT OF OR IN CONNECTION WITH:

• Your use of, or inability to use, the App;
• Any unauthorized access to, or alteration of, your data or transmissions;
• Any conduct or content of any third party on or related to the App, including but not limited to any defamatory, offensive, or unlawful conduct of other users or third parties;
• The accuracy, completeness, or reliability of any commute-time calculations, neighborhood results, map data, or other information provided by the App or third-party services (including Google Maps);
• Any decisions you make (including real estate purchase, rental, or relocation decisions) based in whole or in part on information provided by the App;
• Any other matter relating to the App.

IN NO EVENT SHALL THE OPERATOR'S TOTAL LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THE APP EXCEED THE AMOUNT YOU PAID TO THE OPERATOR FOR USE OF THE APP IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR TEN DOLLARS ($10.00), WHICHEVER IS GREATER.

12. Indemnification

You agree to indemnify, defend, and hold harmless the Operator, its affiliates, officers, agents, employees, and licensors from and against any and all claims, liabilities, damages, losses, costs, expenses, or fees (including reasonable attorneys' fees) arising out of or relating to:

• Your use of or access to the App;
• Your violation of this Privacy Policy or any applicable law or regulation;
• Your violation of any rights of a third party, including intellectual property rights;
• Any claim that your use of the App caused damage to a third party;
• Your use of the App in a manner that violates any third-party terms of service, including those of Google Maps or LemonSqueezy;
• Any reliance you place on commute calculations, neighborhood data, map data, property information, or any other output of the App.

This indemnification obligation shall survive the termination of your use of the App and this Privacy Policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Rational Mind Studios LLC
Email: support@rushroost.com

14. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will update the "Last Updated" date at the top of this page. Your continued use of the App after any changes constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

15. Governing Law & Dispute Resolution

This Privacy Policy shall be governed by and construed in accordance with the laws of the State in which the Operator resides, without regard to its conflict-of-law provisions. Any disputes arising out of or relating to this Privacy Policy or the App shall be resolved exclusively in the state or federal courts located in the Operator's jurisdiction, and you consent to the personal jurisdiction of such courts.

16. Severability

If any provision of this Privacy Policy is held to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving its original intent.