Privacy

Last updated 6 October 2026.

What we hold

Your email address, your name, and the county and address you nominate as your area of operations. Your address is stored so the neighbourhood report can be accurate to where you actually are rather than to a county centroid.

If you would rather not have your own address on the account at all, you do not have to use it. A neighbour’s house, or any address on your street, will produce the same report — the hazards, services and sources it draws on are neighbourhood-level, not door-level — and we would sooner you were comfortable than exact.

What we do not hold

Card details. Payment is handled entirely by Stripe; we store only the customer and subscription identifiers Stripe gives us, and never see a card number.

How it is kept safe

Everything you send to Community S2 travels over an encrypted connection. The site is served over HTTPS only, and your browser is told to refuse an unencrypted one. Your password itself is never stored — what we hold is a bcrypt hash of it, which means nobody can read your password back out, including us.

Our infrastructure is SOC 2 Type II certified. The production database is not reachable from the public internet at all — it answers only on a private network inside that infrastructure.

We review the service for vulnerabilities on a regular schedule, and we have it tested by accredited cybersecurity professionals. What a review finds, we fix.

Who else sees it

Nobody buys it from us. Your address is sent to the public geocoding and hazard services that produce your report — the US Census Bureau, FEMA, the National Weather Service and similar — which is how those reports are generated.

How long

While your account exists. Ask us to delete it and we will delete the account and the address with it.

Asking

Write to us and we will tell you what we hold about you, or remove it.