Privacy.

When you use Family Home Finder, we store:

• The chat conversation — metro, budget, school preferences, the texture of your family — and the structured fields the intake agent extracts from it.
• The generated report itself, plus a hashed version of the IP address that placed the order (for fraud and abuse prevention only).
• Your email, but only if you complete checkout — Stripe collects it and we receive it via the payment webhook so we can send you the report link.

• Credit card numbers — those go straight to Stripe and never touch our servers.
• Your name, phone number, address, or anything else we don’t explicitly ask for in chat.
• Your raw IP address — we hash it before storing.
• Your chat is never used to train AI models — neither by us nor by Anthropic, whose commercial API terms prohibit training on customer prompts.

To run the service, we send minimal slices of data to:

• Anthropic (Claude)— generating research and report copy. Chat messages are sent to Anthropic’s API. Anthropic does not train on this data. Anthropic’s privacy policy.
• Braintrust— LLM observability — we log chat messages and model outputs there so we can debug and improve the agents. Used internally only. Braintrust’s privacy policy.
• PostHog— product analytics — pseudonymous funnel events (chat started, intake completed, payment succeeded) so we can see where the product breaks. No cross-site tracking, form inputs are masked from any session recording. PostHog’s privacy policy.
• Stripe— payment processing. We never see or store credit card numbers. Stripe’s privacy policy.
• Resend— emailing your report link when it’s ready, once you’ve completed checkout.
• Vercel— hosting for the website and chat API.
• Railway— hosting for the Postgres database and the report-generation worker.

• Chat sessions that never reach checkout: deleted after 30 days.
• Generated reports and the chat that produced them: kept for 5 years so the link in your inbox keeps working. Email us any time to delete sooner.
• Braintrust traces: kept for 90 days for debugging, then expire automatically.
• PostHog events: anonymous funnel data kept for 12 months, then aggregated.