Privacy Policy

Areal (“we”, “us”) is a real-estate market-analysis web app operated by the Areal team. Legal entity name and postal address: [Your legal entity name and mailing address — replace before publishing].

Questions about this policy or your personal data: hello@areametrics.com.

Account information. If you create an account: your email address, an optional display name, and an authentication token. If you sign up with Google, Google shares your email address and name with us.

Inputs you type into our tools. The ZIP codes, addresses, prices, rents, and assumptions you enter to run analyses or save to your Watchlist. These stay attached to your account so your saved reports work.

Purchase records. If you buy a subscription: which plan you bought, the charge amount and date, and the order identifier. Card details never touch our servers — payment is handled by our payment processor (see section 6).

Usage information. Basic, aggregated event counts (e.g., “an analysis was run”, “an account was created”) via our hosting platform. If you consent, third-party analytics cookies also run (see our cookie policy).

Messages you send us. Our contact form opens your own email app — the message goes directly from your inbox to ours; we do not collect or store it on the website itself.

What we deliberately do NOT collect: precise location tracking, contacts, advertising identifiers from your device, or sensitive categories of personal information. We do not ask for your phone number, date of birth, or Social Security number.

To create and secure your account, run and save the analyses you request, process subscription payments and grant access to paid features, respond to support questions, understand (in aggregate) which features are used, and meet legal obligations.

We do not sell your personal information. We do not share it with data brokers, and we don't use it to build advertising profiles of our own.

Performance of a contract (account, analyses, purchases); legitimate interests (security, preventing abuse, aggregate product analytics); your consent (third-party analytics/marketing cookies — withdrawable anytime via footer → Cookie settings); and legal obligation where retention or disclosure is required by law.

Essential cookies keep you signed in and remember your cookie choice; they need no consent. Analytics and marketing cookies (Google Analytics, Microsoft Clarity, Google Ads, Meta Pixel) load only after you opt in. Full details, including how to change your choice: cookie policy.

Hosting, auth, and database: our app platform (Base44) stores your account, inputs, and purchase records on our behalf.

Payments: our payment processor handles checkout and stores card data; we only receive the order outcome and plan information.

Optional analytics/marketing (only with consent): Google Analytics, Microsoft Clarity, Google Ads, Meta Pixel.

Sign-in: Google, if you choose “Continue with Google”.

Fonts and maps: Google Fonts loads our typefaces, and neighborhood map views load map tiles from OpenStreetMap. These providers receive your IP address when your browser requests the font or map image.

Market data sources (Zillow research files, U.S. Census ACS, FHFA, HUD, FBI CDE): aggregate public statistics about areas — never data about you.

Account and inputs: until you delete the account or ask us to delete it. Purchase records: kept as long as required by tax and accounting rules (typically several years). Aggregated usage statistics: kept in anonymized form. Third-party analytics data is governed by those providers' retention settings and your choice there.

UK/EEA (GDPR): access, correct, delete, restrict, object, portability, and to withdraw consent. You may also complain to your local data-protection authority.

California (CCPA/CPRA) and similar U.S. state laws: know, delete, correct, and opt out of any sale or sharing (we don't sell or share it) — plus no discrimination for exercising these rights.

To exercise any right, email hello@areametrics.com from the address on your account. We respond within 30 days.

The service is not directed to anyone under 18, and we don't knowingly collect data from children. If you believe a child has provided us information, contact us and we will delete it.

Account data is transmitted over HTTPS and stored on our platform's managed infrastructure. Only you (and our small team, for support) can see your saved inputs. No system is perfectly secure — please use a strong, unique password.

Our platform and third parties may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the UK/EU data transfer framework.

If we change this policy we'll update the date at the top; material changes will be announced on the site.