Privacy Policy

Who we are

Information you give us when you create an account

• Every account: your email address and a password. Passwords are stored only as a bcrypt hash — we never store or can read the password itself.
• Resident accounts: first and last name, street address, and ZIP code. The address and ZIP are used to determine whether you live within Skye Ranch, which is what unlocks the resident badge on your reviews.
• Optional resident profile fields: phone number, short bio, and a profile photo you choose to upload.
• Business owner accounts: your business name, description, logo, photos, service area, business hours, and the contact channels you choose to publish (phone, email, website, Google Business profile, and social links).

Information created as you use the site

• Reviews you write, including the rating, title, review text, and the display name shown with it.
• Replies business owners post to reviews on their own listing.
• Flags you submit on a review, including the reason and any detail you add. Flags are visible to administrators, not to the reviewer.
• Businesses you save to your favorites list.
• Sign-in sessions, recorded with an expiry, a truncated browser user-agent string, and a one-way hash of your IP address so you can be signed out securely. The raw IP address is not stored.

Directory analytics: what we deliberately do not collect

• Each analytics record stores only the business it belongs to, which contact channel was used, and a timestamp. Nothing identifies the visitor.
• There is no advertising network, no third-party analytics script, no tracking pixel, and no cross-site profile.
• We do not set marketing or advertising cookies. The only browser storage used is what is needed to keep you signed in and to preserve an in-progress review draft on your own device.
• Because visitor identity is never recorded, business owners see counts and trends only — never who viewed or clicked.

How we use your information

• To operate your account: signing you in, keeping you signed in, and letting you reset your password.
• To publish what you intend to publish: your listing, your reviews, and owner replies.
• To apply the resident badge, based on the address and ZIP code you provided.
• To moderate content: review flags, and the automatic thresholds that hide a review at three flags and remove it at five.
• To send transactional email, described below.
• To keep the site secure — for example, limiting repeated failed sign-in and password reset attempts.

Email we send

• Welcome messages when a resident or business owner account is created.
• A notice when your business listing is approved or rejected.
• A notice when someone replies to a review you wrote.
• Password reset links you request yourself.
• Occasional community announcements from an administrator.
• Transactional email tied to your account activity cannot be turned off separately while the account exists, because it carries account-critical information. Announcement emails include an unsubscribe link. Deleting your account stops all of it.

What is public and what is not

• Public: approved business listings, their contact details and hours, published reviews with the reviewer's display name and resident badge, and owner replies.
• Not public: your email address, password hash, street address, ZIP code, phone number, favorites list, review flags you submit, notification history, and session records.
• Administrators can see account and moderation data needed to run the directory. Administrator actions are recorded in an internal audit log.

Who else touches your data

• Our managed hosting and database provider, which stores the data and serves the site.
• Our transactional email provider, which delivers the messages listed above.
• Object storage for listing logos, listing photos, and profile photos. Files uploaded for a public listing are served from public URLs.
• We do not sell your personal information, and we do not share it with advertisers or data brokers.

Retention and deletion

• Account and listing data is kept while your account is active.
• Deleting your account performs a soft delete: your account is deactivated and your reviews, replies, and favorites are removed from public view immediately.
• Password reset tokens expire one hour after they are issued. Sign-in sessions expire after seven days.
• Rate-limiting records are keyed to a one-way hash, hold no personal detail, and are cleared automatically.
• To request permanent erasure of the underlying records, email privacy@skyeranchprofessionals.com from the address on the account.

Your choices

• View and edit your profile, address, and photo at any time from your dashboard.
• Edit or delete any review you have written.
• Delete your account from your profile settings.
• Request a copy of the data associated with your account, or ask us to correct it, by emailing privacy@skyeranchprofessionals.com.

Children

Changes to this policy