Privacy Notice
What Utthana Ventures LLC collects when you use CertiDwell, why, and who it goes to.
Operated by: Utthana Ventures LLC, a California limited liability company · Website: certidwell.io
20.Information We Collect
Depending on use, we may collect name, email, contact information, account credentials, property and household information, documents and photographs, descriptions and notes, subscription information, support communications, IP address, browser and device information, approximate location derived from IP address, usage information, and diagnostic and security information.
21.How We Use Information
We may use personal information to provide and operate CertiDwell; maintain accounts; store and organize documents; process transactions; provide support; communicate with users; personalize and improve the Service; detect fraud and security threats; troubleshoot; analyze usage; comply with legal obligations; and enforce agreements.
22.Sharing
We may disclose information to service providers supporting hosting, payments, email, authentication, analytics, customer support, security, storage, and infrastructure. Google LLC is one such provider, for website analytics, optional Google Sign-In, and font delivery. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
If you choose device notifications, your browser creates a subscription endpoint and encryption keys and provides them to CertiDwell. Notification delivery uses the push service selected by your browser or operating system, which may be operated by Apple, Google, Mozilla, or another browser provider. We send that service the encrypted notification payload and its routing endpoint, not property documents or photographs. You can revoke a device subscription from the Account page or through the device’s notification settings.
When you generate or view a property map, we disclose the property’s latitude and longitude to CAL FIRE and FEMA to retrieve official fire and flood information, and to the U.S. Geological Survey when a National Map topographic or imagery background is displayed. Requests are sent by CertiDwell’s server, without your name, email, account identifier, client record, uploaded documents, or photographs. Those agencies operate their own public services and control their service logs under their own notices and retention practices.
We may also disclose information when required by law, to protect rights and safety, investigate fraud or abuse, enforce agreements, or in connection with a merger, acquisition, financing, reorganization, or sale of assets.
23.Retention and Security
How long each thing is kept, rather than a general assurance:
- Your account, documents, photographs and assessments — until you delete them or close your account. Deleting an account removes the profile, private properties, saved assessments and generated packets. A property shared with another active participant remains available to that participant, but your account identifiers are detached from its evidence and activity. We do not keep a shadow profile.
- Sign-in sessions — at most 30 days, and immediately when you sign out. Expired sessions are deleted automatically.
- Backups — snapshots are kept 14 days on the server and 30 days in offsite storage, then destroyed. Something you delete can therefore persist in a backup for up to 30 days after you delete it. Backups are used to restore the Service, never to answer a request.
- Support and contact messages — for as long as we need them to deal with what you raised, and deleted at your request.
- Website measurement — held by Google under the retention period configured for our Google Analytics property. It contains no document, address or client name; see section 26.
- Push subscriptions — until you disable notifications on that device, delete the account, or the browser’s push service reports that the endpoint has expired.
- Records we are required to keep — tax and payment records, for the period the law requires, whatever else this list says.
We use reasonable administrative, technical, and organizational safeguards, including encryption of the most sensitive fields at rest, but no internet service can guarantee absolute security.
24.California Privacy Rights
Where the CCPA applies, California residents may have rights including access and the right to know, deletion, correction, opt-out of sale or sharing where applicable, limits concerning certain sensitive personal information, and nondiscrimination. Requests may be submitted through our contact form. We may verify identity where required.
We answer within 45 days and will tell you if we need the further 45 days the CCPA allows. Exercising any of these rights costs you nothing and does not change the price or quality of the Service. An authorized agent may act for you: send us written permission signed by you, and we may still ask you to verify your own identity directly.
If the information you are asking about is Client Data that one of our customers uploaded about you, we hold it as their service provider and cannot act on it ourselves. Tell us and we will pass your request to them and say who they are.
25.Notice at Collection
This section is that notice. It is given at or before the point we collect anything: it is linked from the sign-up form and from every page footer, and it applies from the moment you first use the Service.
| Category collected | Why | Kept |
|---|---|---|
| Identifiers — name, email, account credentials | To create and secure your account | Until you delete the account |
| Property and household information, documents, photographs, notes — which may include a property address | To organize and retrieve your records and produce evidence packets | Until you delete them |
| Precise geolocation — property latitude and longitude | To retrieve official CAL FIRE and FEMA hazard information and the selected USGS National Map background | Stored with the assessment until you delete it; public map services may retain request logs under their own policies |
| Commercial information — subscription and payment status | To bill you and know what you are entitled to | Tax retention periods |
| Internet activity — pages viewed, browser and device, approximate location from IP | To operate and secure the Service and see which pages are read | See section 23 |
| Client Data you upload about other people | To provide the Service to you; we act as your service provider | Until you delete it |
We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is no opt-out to offer. We do not use or disclose sensitive personal information for any purpose that would give you a right to limit it. We do not knowingly collect personal information from anyone under 16 for sale or sharing.
26.Cookies and Analytics
We use cookies and local storage for operation, security, and preferences. A session cookie keeps you signed in and a token cookie protects forms against cross-site request forgery; neither is used for advertising, and the Service does not work without them.
We also use Google Analytics 4, a measurement service provided by Google LLC, to understand how the site is used. It sets its own cookies and reports the page you viewed, an approximate location derived from your IP address, and browser and device information. We have configured it to truncate IP addresses. We do not use it for advertising, and Google Signals and advertising features are not enabled.
When you follow a link with a recognized campaign channel, we may keep that channel in a first-party cookie (cd_ref) for up to seven days and associate it with registration. Only predefined channel names are stored, not the full link or property address. We aggregate account and workflow records for pilot measurement on our server.
Our pages load three typefaces from Google Fonts, also operated by Google LLC. Requesting a font file discloses your IP address and browser information to Google, which states that it does not use those requests to build advertising profiles and does not set cookies for them. No property address, client name, or document is involved — only the font files themselves. Pages remain fully legible if the request is blocked, because every page also names system typefaces to fall back to.
You can opt out of Google Analytics on every site by installing Google’s browser add-on, or by blocking analytics cookies in your browser. Blocking analytics does not affect your ability to use CertiDwell. Where required by law, we will provide appropriate choices before setting non-essential cookies.
27.Children and International Users
CertiDwell is not directed to children under 13 and does not knowingly collect their personal information without legally required authorization. CertiDwell may process information in the United States and other countries where service providers operate.
28.Changes and Contact
We may update this Privacy Notice periodically. Questions and requests may be sent to Utthana Ventures LLC, a California limited liability company, through our contact form.