1. Scope and operator
This Privacy Policy applies when you visit ADU.zone, use a property qualification or cost tool, communicate with the AI Advisor, request a report or consultation, create or use an account, or otherwise interact with us. It does not govern third-party websites or services that publish their own privacy notices.
The site operator is ADU California Inc. / ADU.zone. Contact details are listed in the Contact section below.
2. Notice at Collection
At or before a public form or AI interaction collects information, we provide a concise notice describing the categories, purposes, retention criteria, and sale or sharing status. Read the full Notice at Collection.
3. Information we collect
| Category | Examples | Primary purpose |
|---|---|---|
| Identifiers and contact details | Name, email, phone, account ID, session ID | Respond, authenticate, deliver requested services, maintain records |
| Property and project information | Address, city, parcel and public-record data, coordinates, project type, budget, plans, messages | Property screening, reports, design and consultation workflows |
| Account and commercial records | Portal profile, proposals, project records, documents, support history | Operate customer and project services and comply with legal obligations |
| AI and communications content | Prompts, responses, current and recent public page paths, property-qualification progress, selected property context, requested consultation details, email or support correspondence | Generate and personalize responses, avoid repeated questions, suggest a relevant public next step, and support continuity, safety, and follow-up |
| Internet and device activity | Page, referrer, browser, device type, approximate region, IP-derived security data, error logs | Security, rate limiting, diagnostics, and aggregated analytics |
| Inferences | Preliminary project fit, likely next steps, model or service interests | Tailor requested planning guidance; never represent a permit decision |
Public real-estate and parcel records may not be personal information under some laws, but we still handle address-linked records according to this policy. We do not intentionally collect government identifiers, financial account credentials, health information, biometrics, or precise device geolocation through public forms.
4. Sources of information
- Directly from you, including forms, AI prompts, account activity, calls, and email.
- From your browser or device through essential storage, including recent public page paths and interface preferences, security logs, and privacy-focused analytics.
- From public government records and parcel, zoning, hazard, map, and address-data providers.
- From service providers supporting hosting, authentication, databases, AI, maps, communications, and diagnostics.
- From authorized representatives, project professionals, or business partners involved in a request.
5. How we use information
- Provide property screening, reports, cost planning, AI responses, consultations, portals, and project services.
- When contextual AI help is on, use current and recent public page paths, property-qualification progress, and selected property context to avoid repeated questions and suggest a relevant public next step.
- Verify addresses, query property sources, distinguish verified, preliminary, missing, and review-required data.
- Respond to requests and communicate about a requested service or active business relationship.
- Protect the site, enforce rate limits, prevent abuse, troubleshoot errors, and maintain service reliability.
- Improve workflows and measure aggregated site usage without sending form contents to analytics.
- Comply with law, preserve records, resolve disputes, and enforce agreements.
We do not use personal information for materially incompatible purposes without providing additional notice where required.
6. When we disclose information
We may disclose only the information reasonably needed to the following categories of recipients:
- Infrastructure and database providers: Vercel and Supabase support hosting, delivery, authentication, storage, and databases.
- AI provider: OpenAI processes prompts and conversation content and, when contextual help is on, current and recent public page paths, property-qualification progress, and selected property context used to generate a tailored AI Advisor response.
- Maps and property-data providers: Google Maps Platform, public agencies, Regrid, and configured parcel providers process address or location queries needed for a requested property screen.
- Communications and professional services: email, document, support, legal, accounting, design, engineering, surveying, permitting, and construction providers when needed for a requested service.
- Legal and safety recipients: regulators, courts, law enforcement, insurers, or advisers when reasonably necessary to protect rights, comply with law, or address security and fraud.
- Business transaction recipients: a successor or transaction adviser in a merger, financing, reorganization, or sale, subject to appropriate safeguards.
Service providers may process information under their own contracts and privacy notices. Relevant notices include OpenAI, Google, Vercel, and Supabase.
7. AI Advisor and automated processing
The ADU California Advisor is an AI system. Your prompt and relevant conversation content are sent to OpenAI to generate a response. Contextual help is on by default. When it is on, the request may also include a list of up to six recent public page paths from this browser session, including the current page, your most recent property-qualification step and completed steps, selected model or goals, and the selected property address, city, state, and verification status. We use this context to avoid repeated questions and suggest a relevant public next step.
You can turn contextual help off or back on inside the AI Advisor. When it is off, the contextual payload described above is omitted from later requests; your prompt and chat history are still sent. Turning it off does not remove information you typed into a prompt or context already sent with an earlier message. The contextual-help preference is stored for the browser session.
Contextual help does not collect or send device GPS, query strings, URL fragments, protected account or proposal paths, parcel coordinates, site geometry, budget, timeline, or the raw qualification draft. We may retain conversation records for continuity, safety, troubleshooting, and requested follow-up. OpenAI states that API data is not used to train its models by default unless the API customer opts in, and default abuse-monitoring logs may be retained by OpenAI for a limited period under its platform data controls.
AI outputs may be incomplete or wrong. We do not use the public AI Advisor to make a final legal, lending, permit, or eligibility decision about you. Do not include confidential or sensitive data in a prompt. Review the AI Advisor terms.
9. Retention criteria
We keep each category only as long as reasonably necessary for the disclosed purpose:
- Contact, consultation, and lead records: while responding, evaluating a project, conducting reasonable follow-up, and preserving ordinary business records.
- Property and report data: while producing the requested screen or report and while it remains relevant to a lead, customer, project, dispute, or legal obligation.
- AI conversation records: while needed for conversation continuity, safety, troubleshooting, follow-up, and applicable recordkeeping.
- Account, proposal, contract, and project records: for the relationship and afterward as required for warranty, tax, insurance, dispute, and other legal obligations.
- Security, rate-limit, analytics, and diagnostic data: for the shortest period reasonably needed to detect abuse, maintain reliability, and analyze aggregated usage.
- Device storage: until the applicable browser session, reset action, expiration, or user deletion.
We may retain a limited record longer where required by law, needed to establish or defend legal claims, or necessary to prevent fraud and abuse.
10. Sale, sharing, and targeted advertising
We do not sell personal information for money or other valuable consideration and do not share personal information for cross-context behavioral advertising as those terms are defined by California law. We have no actual knowledge that we sell or share personal information of people under 16. If our practices change, we will update this policy and provide required opt-out methods, including recognition of applicable browser-based preference signals.
11. California privacy rights
Depending on the law that applies to us and your request, California residents may have rights to know, access, delete, or correct personal information; receive information about categories, sources, purposes, and disclosures; opt out of sale or sharing; limit certain uses of sensitive personal information; and receive equal service without discrimination for exercising a right.
Submit a request by emailing ADUcaliforniainc@gmail.com, calling (650) 400-7606, or writing to the address below. Use the subject “Privacy Request” and identify the right you wish to exercise. We may request information reasonably necessary to verify identity and authority. An authorized agent may submit a request with signed permission or other legally sufficient authority.
Some records cannot be deleted or disclosed because of legal obligations, security, privilege, active contracts, fraud prevention, or the rights of others. We will explain an applicable denial. We voluntarily use this request process even if a particular statutory requirement or right does not apply to the business or request.
Learn more from the California Attorney General’s CCPA resource.
12. Do Not Track and Global Privacy Control
Browsers may offer Do Not Track (DNT) or Global Privacy Control (GPC). Because we do not sell or share personal information for cross-context behavioral advertising, a GPC signal does not change that practice. We will honor legally valid opt-out preference signals if our practices become subject to such an opt-out. The site does not currently respond differently to legacy DNT signals. Third-party links and embedded services may apply their own tracking choices.
13. Security
We use administrative, technical, and organizational measures designed to protect information, including access controls, server-side credentials, validation, rate limits, and encrypted network transport. No system is completely secure. You are responsible for protecting account credentials and for avoiding sensitive information in public forms and AI prompts.
14. Children
The site is intended for property owners and adults considering ADU services, not children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child submitted information so we can review and delete it where appropriate.
15. Changes to this policy
We may update this policy as services, providers, and laws change. We will post the revised policy with a new “Last updated” date and provide additional notice if legally required. California privacy disclosures are reviewed at least annually and when practices materially change.
16. Contact us
Privacy questions and requests may be sent to ADU California Inc. / ADU.zone, 1724 Junction Ave, Unit D, San Jose, CA 95112; email ADUcaliforniainc@gmail.com; phone (650) 400-7606.