Privacy Policy

Effective Date: April 14, 2026 · Compliant with: CCPA, NJ Data Privacy Act (P.L. 2023, c. 266), GDPR (EU users), GLBA

TitleQuiet ("TitleQuiet," "we," "us," or "our") operates the TitleQuiet platform. This Privacy Policy describes how we collect, use, store, and share information about you when you use our Platform.

1. Information We Collect

Account Information

Name, email address, phone number, professional credentials (bar number for attorneys), and any information you provide during onboarding.

Property & Search Data

Property addresses, block/lot numbers, and search queries you submit to the Platform. Diagnostic reports and chain of title data associated with your account.

Payment Information

We do not store credit card numbers. Payment information is processed by Stripe, Inc. We store only transaction identifiers and subscription status.

Usage Data

Pages visited, features used, search queries, time spent, browser type, IP address, and device information.

2. How We Use Your Information

Providing and improving the Platform services
Processing payments and managing subscriptions
Matching consumers with attorneys through the TitleQuiet network
Sending transactional communications (diagnostic complete, case updates, alerts)
Sending marketing communications (with your consent, opt-out available)
Fraud detection and security monitoring
Complying with legal obligations

3. How We Store Your Information

All data is hosted in the United States on the following managed infrastructure providers, each independently SOC 2 Type II certified:

Vercel — application hosting and content delivery
Neon — managed PostgreSQL database (AES-256 encryption at rest, TLS 1.3 in transit, automated key rotation)
Upstash — serverless Redis cache (AES-256 encryption at rest, TLS 1.3 in transit)

We do not operate our own data centers or servers. Database backups are retained by Neon with point-in-time restore capability. We never store credit card numbers — payment data is processed exclusively by Stripe (PCI-DSS Level 1 certified).

4. Information Sharing

We share your information only in these circumstances:

With attorneys you engage: When you submit a case through TitleQuiet Connect, we share your property data and diagnostic report with the attorney you select.
Payment processing: Stripe, Inc. processes payments. We share only what is necessary for payment processing.
Analytics: We use privacy-respecting analytics tools. No personal data is shared with advertising networks.
Legal compliance: We will disclose information when required by law, court order, or to protect our legal rights.
Business transfer: In the event of a merger, acquisition, or sale of assets, your data may transfer to the successor entity.

We do not sell your personal data.

5. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate data
Deletion: Request deletion of your personal data (subject to legal retention requirements)
Portability: Request your data in a machine-readable format
Opt-out of marketing: Opt out of marketing communications at any time via the unsubscribe link in any email or by contacting us
CCPA (California): Right to know, right to delete, right to opt-out of sale (we do not sell data)

New Jersey Residents — NJ Data Privacy Act (P.L. 2023, c. 266)

If you are a New Jersey resident, you have the following additional rights under the NJ Data Privacy Act, effective January 15, 2025:

Right to opt out of targeted advertising: We do not currently engage in targeted advertising. If this changes, we will update this policy and provide an opt-out mechanism.
Right to opt out of the sale of personal data: We do not sell personal data.
Right to opt out of profiling: We do not engage in profiling that produces legal or similarly significant effects concerning you.
Right to appeal: If we deny your privacy rights request, you may appeal that decision within a reasonable time by contacting us at privacy@titlequiet.com. We will respond to your appeal within 60 days.

We will respond to verified rights requests within 45 days as required by the NJ Data Privacy Act, with a possible 45-day extension where reasonably necessary.

To exercise any of these rights, contact us at privacy@titlequiet.com

6. Data Retention

We retain different categories of data for different periods:

Account and profile data: Retained while your account is active. Permanently deleted when you close your account (or request deletion via DELETE /api/me or by emailing privacy@titlequiet.com).
Diagnostic reports and property records: Retained for the lifetime of your account. You may request deletion at any time subject to any applicable legal holds.
Audit logs: Retained for 2 years, then automatically purged, to satisfy state court record requirements.
Billing and payment records: Retained as required by applicable tax, financial, and legal regulations (typically 7 years under IRS requirements).
Operational logs (scraper jobs, notifications): Automatically purged after 90 days.

You may request earlier deletion of any personal data subject to legal retention obligations. Upon account closure, we delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Analytics & Cookies

We do not use third-party advertising networks, tracking pixels, or behavioral advertising tools. We do not share data with ad networks.

We use functional cookies strictly necessary to operate the Platform (session authentication tokens managed by Clerk). We use Sentry for error monitoring — Sentry receives error stack traces and request metadata. Sentry is configured to scrub personal data before transmission. No persistent tracking cookies are set for advertising or cross-site tracking purposes.

8. Children's Privacy

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided personal data to us, please contact privacy@titlequiet.com and we will delete it promptly.

9. Data Breach Notification

In the event of a data breach affecting your personal data, we will notify you within 72 hours of becoming aware of the breach (for GDPR purposes) or within a reasonable time as required by applicable US law. Notification will be provided via email to the address on your account.

10. Contact

Privacy inquiries: privacy@titlequiet.com