Privacy Policy
Last updated: February 16, 2026
Overview
BMKB (“we,” “us,” or “our”) operates the website at bmkbdev.com and the TractFi compliance platform. This Privacy Policy describes how we collect, use, and protect your information when you use our services.
We take data privacy seriously — especially because our customers handle sensitive compliance data. We are committed to transparent data practices and minimal data collection.
Information We Collect
Account Information
When you create an account or use our services, we may collect your email address, name, and organization name. This is used to provide our services and communicate with you.
Compliance Data (Uploaded Files)
When you upload CSV files for geocoding, we process the address data to perform census tract assignment and generate compliance reports. Account holders get persistent, secure storage with year-over-year access — your data stays available as long as your account is active. Free trial users’ data is retained for 30 days, then automatically deleted.
Usage Analytics
We use Google Analytics 4 (GA4) to understand how visitors interact with our website. This includes page views, session duration, and general geographic region. GA4 does not collect personally identifiable information by default.
Contact Information
If you contact us through our website form or email, we collect your name, email address, and message content to respond to your inquiry.
How We Use Your Information
- To provide and maintain our compliance services
- To process your uploaded files and generate reports
- To communicate with you about your account and services
- To send transactional emails (job completion, report delivery)
- To improve our website and services based on usage patterns
- To respond to your inquiries and support requests
Third-Party Services
We use the following third-party services to operate our platform:
- Stripe — Payment processing. Stripe collects payment information directly; we do not store credit card numbers.
- Auth0 — Authentication. Manages login credentials and session security.
- Vercel — Website hosting and deployment.
- Render — Backend API and worker hosting.
- Resend — Transactional email delivery.
- Google Analytics — Website usage analytics.
Each of these services has their own privacy policies governing how they handle data.
Data Retention
- Uploaded compliance data (account holders): Persistent storage with year-over-year access while account is active; deleted upon account closure or request
- Uploaded compliance data (free trial): Retained for 30 days, then automatically deleted
- Account information: Retained while your account is active; deleted upon request
- Analytics data: Retained per Google Analytics default settings (14 months)
- Contact form submissions: Retained as needed to resolve your inquiry
What We Do Not Do
- We do not sell your personal information or compliance data to third parties
- We do not share your data with third parties for marketing purposes
- We do not use your compliance data to train AI or machine learning models
- We do not retain free trial data beyond the 30-day window; account holders get persistent access
Cookies
We use essential cookies for authentication and session management. Google Analytics may set cookies to measure website usage. You can control cookie preferences through your browser settings.
Your Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect about you
- Request deletion of your personal information
- Opt out of the sale of your personal information (we do not sell data)
- Not be discriminated against for exercising your privacy rights
To exercise any of these rights, contact us at support@bmkbdev.com.
Security
We implement industry-standard security measures to protect your data, including HTTPS encryption, secure authentication, and access controls. Compliance data is processed in isolated environments and automatically deleted after delivery.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date.
Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at support@bmkbdev.com.