Legal
Privacy notice
This notice explains how [Company legal name] (“LayerPlans”, “we”, “us”) handles personal information on the layerplans.com website and in the LayerPlans application at app.layerplans.com. We collect as little as we need, never sell it, and use no advertising trackers.
1. Two kinds of information
- Information about you as a user or visitor (for example your name and email). We decide how this is used, and this notice covers it.
- Information your company puts into LayerPlans, such as tenants, residents, brokers and their contact details, leases and documents (“Customer Data”). Your company controls this data and decides what is stored; we process it only on your company's behalf to provide the Service, as described in our Terms of Service. Questions about that data should go first to the company that uses LayerPlans.
2. What we collect
- Account details: name, work email, the companies you belong to, your role and licenses. Your password is handled by our sign-in provider; we never see or store it.
- Sign-in and security records: when you sign in, your session's IP address and browser type, and two-step verification settings (the secret is stored encrypted).
- Activity history: a record of changes made in a company (who changed what and when), kept so companies can see their own history and to keep the Service secure.
- Support and billing: messages you send to support; billing contact, invoices, refunds and payment notes for your company.
- Website forms: what you type into the “Start a free trial or book a demo” form (name, work email, company, role, number and type of buildings, message), plus a one-way scrambled (hashed) form of your IP address to block abuse.
- Email preferences: whether you want alert emails and whether you unsubscribed from our news emails.
3. How we use it
- to provide the Service: sign you in, show your companies and buildings, send invitations, alerts you asked for, invoices and service messages;
- to keep the Service secure and reliable: detect abuse, investigate problems, keep backups;
- to answer support requests and website enquiries;
- to send occasional news about LayerPlans to business contacts, always with an unsubscribe link (we count opens of links in these emails to see what interests readers; service messages such as invoices and security notices are still sent);
- to meet legal and accounting obligations.
We do not sell or rent personal information, share it for cross-context behavioral advertising, or use Customer Data to train artificial-intelligence models.
4. Service providers
We share personal information only with providers that help us run the Service, under contracts that limit their use of it:
- Cloudflare: hosting, databases, file storage, backups, website protection and email delivery (United States).
- WorkOS: sign-in and account security (United States).
- OpenStreetMap: map images on the portfolio map are loaded by your browser from OpenStreetMap's servers, which receive your IP address.
- US Census Bureau geocoder: building street addresses are sent to place buildings on the map (no personal information).
- GitHub: stores our software code (no Customer Data).
We may also disclose information if required by law, to protect rights and safety, or as part of a merger or sale of our business (under the same protections).
5. Where it is kept
LayerPlans data is stored on Cloudflare in the United States. Each company's data is kept in its own separate database.
6. How long we keep it
- Account and company data: while the account or company is active. Deleted companies can be restored for 30 days, then they are erased.
- Backups: daily backups are kept 35 days and monthly backups 12 months, so erased data disappears from backups within 12 months.
- Sign-in records (time, IP address, browser): deleted 30 days after the session expires. Website form entries: until the enquiry is handled, at most 12 months, unless you become a client.
- Invoices and payment records: as long as tax and accounting laws require.
7. Cookies and local storage
The website uses no cookies, analytics or advertising trackers. The app uses only cookies that are needed to sign you in and keep you signed in securely (lp_session, lp_wsid, lp_mfa, lp_auth_state). Your browser also remembers small preferences on your own device, such as light or dark mode and the last company you opened.
8. Security
We protect information with encrypted connections, a separate database per company, role-based access, building-level permissions, optional or required two-step verification, activity history and nightly backups. No system is perfectly secure; if a breach affects your information, we will notify you as the law requires.
9. Your choices and rights
You can see and change your account details in the app, turn alert emails on or off, and unsubscribe from news emails at any time. You can ask us to access, correct, export or delete your personal information by emailing support@layerplans.com. Depending on where you live (for example California or the EU/UK), you may have further rights, including to appeal a decision about your request; we will not treat you differently for using them. For Customer Data, we will pass your request to the company that controls it or help it respond.
10. Children
LayerPlans is a business service and is not meant for anyone under 18. We do not knowingly collect information from children.
11. Changes
We will post any changes on this page and update the date above. For important changes we will also tell account owners by email or in the app.
12. Contact
[Company legal name]
[Postal address]
support@layerplans.com