Privacy Policy

When you browse or look up a ZIP code. Our hosting provider records the usual server logs: your IP address, browser type, the pages you request, and timestamps. We use them to run the site, cache responses, and stop abuse, including the rate limits described in our Terms. We do not use advertising cookies or trackers. The site sets no cookies of its own.

When you request a token. We collect the name, work email, company, use case, and any details you enter, plus the IP address and browser string of the submission so we can tell real requests from automated ones. This information is emailed to our team and kept in our mailbox and token records.

When you use a token. The MCP connector at mcp.crimescore.info logs which token made which request and when. That is how tokens are metered, secured, and revoked if they leak.

We do not knowingly collect information from anyone under 16, and the site is not directed at children.

• To provide the site and the score lookups you ask for.
• To respond to your token request and provision, support, meter, and secure tokens.
• To protect the service from abuse, fraud, and excessive automated traffic.
• To understand aggregate usage, such as which ZIP codes are looked up most, in a form that does not identify you.
• To meet legal obligations.

We do not use your information to build advertising profiles, and we do not use it to make automated decisions that have legal or similarly significant effects on you.

We do not sell personal information and have not sold it in the preceding twelve months. We do not share it for cross-context behavioral advertising. We share information only with:

• Service providers that host and run the site and deliver email on our behalf, under contracts that limit them to those purposes.
• Authorities when the law requires it or to protect the rights and safety of users and the public.
• A successor if ReportSee, Inc. is acquired or merges, in which case this policy continues to apply.

Crime scores themselves contain no personal information. They describe ZIP codes and counties, not people.

Server logs are kept for a short rolling window, typically up to 90 days. Token request details are kept for as long as you hold a token and for a reasonable period afterward so we can answer questions about the account. You can ask us to delete your request information at any time.

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) gives you the following rights, subject to the limits in that law:

• Right to know what personal information we collect, use, and disclose about you, and the categories of sources and recipients.
• Right to delete personal information we collected from you.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of, and we honor Global Privacy Control signals as an opt-out preference.
• Right to limit use of sensitive personal information. We do not collect sensitive personal information as defined by the CPRA.
• Right to non-discrimination for exercising any of these rights.

The categories of personal information we collect, as listed in California Civil Code section 1798.140, are identifiers (name, email, IP address), professional information (company and use case), and internet activity (pages requested). Our purposes are the ones described above.

To exercise a right, email feedback@spotcrime.com with the subject line “California privacy request”. We will confirm receipt within 10 business days and respond within 45 days, extendable once by 45 days with notice. We verify requests by matching the email address to the one used in your token request. An authorized agent may submit a request on your behalf with your signed permission.

California “Shine the Light” (Civil Code section 1798.83): we do not disclose personal information to third parties for their own direct marketing, so no such disclosures exist to report.

If you are outside the United States, we process your information in the United States on the basis that it is necessary to provide the service you asked for and for our legitimate interest in running and protecting it. You may have rights to access, correct, delete, or object under your local law. Use the same contact address.

The site is served over HTTPS. API tokens are stored server-side and never sent to your browser. Access to token request records is limited to the people who handle them. No system is perfectly secure, so if you believe your token or information has been exposed, tell us and we will revoke and reissue.

We will post any changes here with a new effective date. Material changes to how we use information already collected will be announced on the site before they take effect.

ReportSee, Inc. (SpotCrime)
feedback@spotcrime.com

SpotCrime's separate privacy policy for spotcrime.com and its mobile apps is at spotcrime.com/privacy.