1. Who we are and what this policy covers
This Privacy Policy explains how AuctionXray (“we”, “us”) collects, uses, shares and protects information when you visit our website, request a free property preview, create an account or buy a preliminary property report (“Report”). AuctionXray is the controller of the information described here, except for payment data, for which Paddle acts as an independent controller (see Section 4).
We built the Platform to need as little personal information as possible: an email address to sign in, your order history, and the technical logs that any website produces. We do not run advertising, we do not profile you, and we do not sell personal information.
2. Information we collect
Account information. Your email address, used to send you a one-time sign-in link and to deliver your Reports; a random account identifier; your credit balance, plan tier and whether you have used the first-report price.
Orders. The property you ask us to analyse (street address or Parcel ID, county, auction type and, for foreclosures, the court case number), the order status and timestamps, the Report PDF we produce for you, and the time at which you accepted the Disclaimer at checkout, kept as proof of consent.
Payment information. Payments are processed by Paddle. Your card or bank details are entered into Paddle’s checkout and never reach our servers. From Paddle we receive a transaction identifier, the plan purchased, the amount paid, your email address and the payment status, so that we can add credits to your account and avoid crediting the same payment twice.
Technical information and server logs. Like every website, our servers and hosting provider record your IP address, browser type, the pages and API endpoints you request, timestamps and error details. Your IP address is also used, for 60 seconds at a time, to limit the number of free previews requested from the same connection.
Communications. Emails you send to support@auctionxray.com and our replies.
Public records about properties. Reports are built from public government records (County Clerk, Property Appraiser, FEMA, USFWS) and third-party market data. These records describe properties and may name their owners of record; they are not information about you unless you own the property. Owner names are masked in the free preview.
3. How we use information
- To provide the service: sign you in, show previews, produce and deliver Reports, maintain your credit balance and order history, and let you download your Reports again.
- To process payments: match Paddle’s payment notifications to your account and grant credits once, and only once, per transaction.
- To protect the Platform: rate limiting, detecting abuse or fraud (for example repeated trial purchases), and investigating security incidents.
- To support you and comply with the law: answer your requests, keep tax and accounting records, enforce our Terms and keep evidence of your consent to the Disclaimer.
- To improve the service: aggregate, non-identifying statistics such as the number of previews per county.
We do not make automated decisions that produce legal or similarly significant effects about you, and we do not use your information for advertising. Where the law of your country (for example the EEA or the UK) requires a legal basis, we rely on the performance of our contract with you, our legitimate interests in running and securing the Platform, our legal obligations, and your consent where we ask for it.
6. How long we keep information
- Public-records cache: 72 hours. The records compiled for a property are cached for 72 hours so that a second buyer of the same property receives the Report instantly; after that the data is refreshed on the next order.
- Account and order history: for as long as your account is active, so that you can re-download your Reports. Deleted or anonymised on request (Section 7), except for what we must keep.
- Report PDFs: stored in a private bucket and served only through short-lived signed links generated for the account owner; kept together with the order.
- Payment records: transaction identifiers, amounts and payment notifications are kept for as long as tax and accounting law requires (generally seven years). Paddle keeps its own records as Merchant of Record.
- Disclaimer acceptance: kept with the order as evidence of consent.
- Rate-limit counters: 60 seconds.
- Server logs: a limited period, typically no more than 30 days, unless needed to investigate abuse or a security incident.
7. Your rights: access, correction and deletion
You can ask us at any time to:
- tell you what personal information we hold about you and give you a copy in a portable format;
- correct information that is inaccurate;
- delete your account and personal information — we will delete or anonymise everything except the records we must keep for legal, tax or dispute-resolution reasons;
- restrict or object to a particular use of your information.
To exercise a right, email support@auctionxray.com from the email address registered on your account, so that we can verify it is you. We answer within 30 days and never charge for a request or treat you differently for making one.
California residents. We do not sell or “share” personal information as those terms are defined in the CCPA/CPRA and have not done so in the preceding twelve months. You may exercise the rights above directly or through an authorised agent. We do not respond to “Do Not Track” browser signals because we do not track visitors across sites.
EEA and UK residents. You also have the right to withdraw consent where processing is based on it and to lodge a complaint with your local data-protection authority.
8. We do not sell your data
We do not sell, rent, trade or otherwise disclose personal information to third parties for their own marketing or commercial purposes, and we do not share it for cross-context behavioural advertising. The only third parties that receive personal information are the providers listed in Section 4, acting on our behalf, and authorities where the law requires.
9. Security
All traffic is encrypted in transit (TLS). Database access is protected by row-level security so that you can read only your own orders and credits; privileged keys are used only on our servers, never in the browser. Report files are served exclusively through short-lived signed links, payment data never touches our systems, and every payment notification from Paddle is verified by signature before credits are granted. No method of storage or transmission is completely secure; if a breach affects you, we will notify you and the competent authorities as the law requires.
10. International transfers
Our providers process data in the United States. If you access the Platform from outside the US, your information is transferred to and processed in the US, where privacy laws may differ from those of your country. Where required, we rely on the contractual safeguards offered by our providers, such as standard contractual clauses.
11. Children
The Platform is intended for adults who buy real estate at auction. We do not knowingly collect personal information from anyone under 18; if you believe a minor has given us information, contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top identifies the current version. Material changes are posted on this page before they take effect and, where appropriate, notified by email. This policy forms part of our Terms and Conditions.
13. Contact
Privacy questions and requests: AuctionXray, email support@auctionxray.com. For questions about how Paddle handles your payment data, see the Paddle privacy policy.