Privacy Policy

Who we are

Information you give us when you create an account

• Every account: your email address and a password. Passwords are stored only as a bcrypt hash — we never store or can read the password itself.
• Resident accounts: first and last name, street address, and ZIP code. The address and ZIP are used to determine whether you live within Skye Ranch, which is what unlocks the resident badge on your reviews.
• Optional resident profile fields: phone number, short bio, and a profile photo you choose to upload.
• Business owner accounts: your business name, description, logo, photos, service area, business hours, and the contact channels you choose to publish (phone, email, website, Google Business profile, and social links).

Information created as you use the site

• Reviews you write, including the rating, title, review text, and the display name shown with it.
• Replies business owners post to reviews on their own listing.
• Flags you submit on a review, including the reason and any detail you add. Flags are visible to administrators, not to the reviewer.
• Businesses you save to your favorites list.
• Questions and replies you post on the neighbor discussion board, which are public along with your display name.
• Sign-in sessions, recorded with an expiry, a truncated browser user-agent string, and a one-way hash of your IP address so you can be signed out securely. The raw IP address is not stored.

Contact messages and nominations

• Messages sent through the contact form store your name, email, the message, the page you sent it from, and whether it has been answered.
• If you nominate a business, we store the details you provide about that business — which can include another person's name, phone number, or email. Only nominate someone whose details you may reasonably share.
• A nomination that does not become a listing is kept while it is still under consideration and then deleted. A nominated business can ask for its details to be removed at any time.

Drafts saved on your device

Directory analytics: what we deliberately do not collect

• Each record stores the page or business it belongs to, which contact channel was used, a timestamp, whether the visit came from a phone, tablet or computer, and a broad category for how you arrived (a search engine, social media, another website, or straight to the site). No web address you came from is stored.
• So that one person reading three pages is not counted as three people, a random code is generated for your visit and kept in your own browser's session storage. It is not linked to any account, contains nothing about you, and disappears when you close the tab.
• Obvious automated traffic is discarded rather than counted.
• There is no advertising network, no third-party analytics script, no tracking pixel, and no cross-site profile.
• We do not set marketing or advertising cookies. The only browser storage used is what is needed to keep you signed in, to count a visit once, and to preserve an in-progress draft on your own device.
• Because visitor identity is never recorded, business owners and the administrator see counts and trends only — never who viewed or clicked.
• These counts are kept for 13 months and then deleted automatically.

How we use your information

• To operate your account: signing you in, keeping you signed in, and letting you reset your password.
• To publish what you intend to publish: your listing, your reviews, and owner replies.
• To apply the resident badge, based on the address and ZIP code you provided.
• To moderate content: review flags, and the automatic threshold that temporarily hides a review once three different people report it. Nothing is ever deleted automatically — a person makes the final decision on every reported review.
• To send transactional email, described below.
• To keep the site secure — for example, limiting repeated failed sign-in and password reset attempts.

Email we send

• Welcome messages when a resident or business owner account is created.
• A notice if your business listing is later edited, hidden, or removed by an administrator.
• A notice when someone replies to a review you wrote.
• Password reset links you request yourself.
• Occasional community announcements from an administrator.
• Transactional email tied to your account activity cannot be turned off separately while the account exists, because it carries account-critical information. Announcement emails include an unsubscribe link. Deleting your account stops all of it.

What is public and what is not

• Public: approved business listings, their contact details and hours, published reviews with the reviewer's display name and resident badge, and owner replies.
• Not public: your email address, password hash, street address, ZIP code, phone number, favorites list, review flags you submit, notification history, and session records.
• Administrators can see account and moderation data needed to run the directory. Administrator actions are recorded in an internal audit log.

Who else touches your data

• Our managed hosting and database provider, which stores the data and serves the site.
• Our transactional email provider, which delivers the messages listed above.
• Object storage for listing logos, listing photos, and profile photos. Files uploaded for a public listing are served from public URLs.
• We do not sell your personal information, and we do not share it with advertisers or data brokers.

Retention and deletion

• Account and listing data is kept while your account is active.
• Deleting your account performs a soft delete: your account is deactivated and your reviews, replies, and favorites are removed from public view immediately.
• Password reset tokens expire one hour after they are issued. Sign-in sessions expire after seven days.
• Rate-limiting records are keyed to a one-way hash, hold no personal detail, and are cleared automatically.
• To request permanent erasure of the underlying records, email jesse@skyeranchprofessionals.com from the address on the account.

Your choices

• View and edit your profile, address, and photo at any time from your dashboard.
• Edit or delete any review you have written.
• Delete your account from your profile settings.
• Request a copy of the data associated with your account, or ask us to correct it, by emailing jesse@skyeranchprofessionals.com.

Children

Changes to this policy