Legal document
StrollPlace Privacy Policy
Summary of changes
Clarified reviewed regional defaults for optional Google Analytics, explicit GPC choices, analytics denial during consent-service outages, Developer-site analytics separately from public embeds, and contact-form processing and retention.
Scope
Swift Agent Sites LLC, a Wyoming limited liability company (filing ID 2026-002083073), operates StrollPlace from 4283 Express Lane Suite MX8578, Sarasota, FL 34249, United States. This policy describes StrollPlace Portal, My StrollPlace, and StrollPlace Pro. Public professional profiles differ from private account information and verification evidence.
Information we use
We use account and sign-in details to authenticate you and manage access; saved research and request information to provide research and connection features; and professional and business profiles, uploaded content, and license evidence to administer professional participation. Support messages help us respond to questions. Operational, consent, and audit records support security, permissions, and accountability.
Public profiles and approved public content are visible to visitors. Private verification documents and consumer request information are not covered by the public-content promotional license.
Payments and saved payment methods
When payment features are enabled, we process purchase amounts and currency, billing address, tax information, payment-provider customer and transaction references, payment status, refunds, disputes and wallet records to fulfill purchases, administer tax, prevent fraud and resolve billing issues. Depending on the checkout, Stripe, PayPal, Paddle or Creem processes payment information under its applicable terms and privacy notice. StrollPlace does not collect or store full card numbers or card security codes.
If you choose to save an eligible payment method, we retain the provider reference, limited display details and authorization records. Optional automatic top-ups also store the owner's consent, threshold, refill amount and monthly limit. Disabling top-ups stops future funding attempts; it does not erase records needed for completed purchases, tax, fraud prevention or disputes. We retain payment records for the purposes described here and for applicable legal, accounting, fraud-prevention and dispute obligations. See Security and retained records for deletion requests and retention exceptions.
Partner links and professional invitations
Partner links may carry our public affiliate identifier and public destination context, such as a city or shopping category. Opening a link takes you to the provider, which processes the visit and any purchase under its own privacy and cookie practices. The current link modules do not load partner SDKs or transmit private move-planner entries before a click. Optional StrollPlace partner impression and click measurement follows the analytics choices described below and records provider, placement and public geographic or category context, not private planner input or payment details.
Professional invitation records include the inviter, eligible recipient, offer amounts, destination wallet, expiry and qualifying activation needed to administer rewards and prevent duplicate grants. An inviter may see invitation and reward status but not the recipient's private wallet details. The current professional invitation feature records daily-deduplicated clicks and dismissals linked to the professional profile and placement, separately from browser analytics choices. Operational eligibility and grant records are needed to administer the offer. You may use the privacy contact or privacy request form to ask about, object to, or request deletion of invitation engagement records. We assess the request under applicable law; this measurement is separate from optional browser analytics.
Professional information
Public profile information and approved public disclosures differ from private verification evidence and account information. Professional access to consumer information is scoped to authorized requests and permissions. Business owners and authorized collaborators receive only the access permitted by their roles.
Analytics and marketing choices
Privacy choices in the footer controls browser analytics separately on each app and browser.
Optional analytics, including Google Analytics where configured and enabled, may run before you make a choice only where our current reviewed regional rules allow it and we can reliably establish your applicable region. In other regions, or when your location cannot be established, optional analytics stays off until you accept. Account-linked readership always requires explicit analytics opt-in.
Rejecting or withdrawing analytics permission disables optional analytics. If the consent service or required policy wording is unavailable, optional analytics stays off.
If your browser sends a Global Privacy Control (GPC) signal, we respect your request to opt out of the sale or sharing of your personal information. With GPC active, optional analytics—including Google Analytics—stays off until you make a new, explicit choice to allow analytics, and only runs while the applicable processing review remains current.
Advertising tracking remains disabled. Allowing analytics does not override your sale or sharing opt-out. You can change or withdraw your choice through Privacy choices at any time. Disabling GPC does not automatically enable analytics.
Marketing enrollment is a separate choice.
Portal and My share consumer account preferences. Pro account preferences are separate. Changing account preferences does not replace browser cookie choices on every device or app.
Security and retained records
Access controls, encryption of designated sensitive fields, and audit records help protect information; no system is risk-free. Removing contact fields does not erase every related record or make all remaining information anonymous. Account records, consent evidence, transaction history, audit records, recipient-held copies, and backups are not automatically removed by the public lead-data deletion form. We retain active account and workspace information to provide the requested service. On a verified closure or deletion request, we assess each affected system, remove information no longer needed, and document any necessary legal, security, accounting or dispute-related retention, with a review date. Public contributions have the separate license described in Pro Terms; continued publication does not authorize retaining unrelated private evidence. A daily cleanup job erases stored lead names, email addresses and their encrypted and lookup copies once a closed, rejected or unverified outcome is more than 365 days old. It also deletes saved connection and research-tool drafts after their recorded expiry. These actions do not delete every related account, conversation or audit record. A valid rights request may require earlier action.
An hourly cleanup job deletes feedback entries and associated audit records older than 12 months, and feedback prompt-cooldown records older than 30 days. Aggregate daily helpfulness and experience totals may remain without identity, free text or individual references. Cleanup runs in batches, so expiry makes records eligible for the next processing run rather than guaranteeing deletion at an exact moment. Supplementary encrypted database exports retain the most recent 14 successful daily dates and four successful weekly periods; failed backup runs can leave older copies in place longer. Provider-managed recovery backups are separate from these exports. Deletion from active systems does not immediately remove existing backup copies. Restricted backup copies are not used for ordinary product activity, and any restoration must reapply fulfilled deletions and restrictions before the restored data is used.
Requests and deletion limits
Open Privacy requests from the Privacy Policy page to submit a rights request. For lead-contact deletion, we verify control of your email before erasing matching lead names, email addresses, and lead move profiles held by StrollPlace; recipient-held copies require separate follow-up. That specific erasure action does not close your account, erase all saved research or professional content, provide an access export, or correct account information. Choose the relevant broader request type for individual review and handling.
For access, correction, broader deletion, or questions about applicable privacy rights, use the privacy contact shown on that page. Use the request form for access, correction, broader deletion, objections, appeals, or content-rights concerns. Requests are tracked from receipt, with additional identity checks where necessary; email verification alone does not authorize disclosure of all account information. We use the deadline applicable to your request and location. Where an extension is legally available, we explain the reason and revised deadline within the required period. Urgent and time-sensitive requests receive separate review. Do not include passwords or unnecessary identity documents in a request.
Policy updates and contact
This policy takes effect on the date shown above. We publish revised versions when our privacy practices change and provide notice or request a new choice where required by applicable law. A policy update does not retroactively authorize optional marketing, analytics or sharing.
For questions about this policy or your information, contact the privacy address above or use the privacy request form. The Consumer Terms and Pro Terms separately govern use of the applicable service; this policy does not replace your privacy rights.
Image sources and delivery
For Wikimedia image enrichment, StrollPlace's background services send public place names and geographic coordinates to Wikimedia Commons, request file and licensing metadata, and retrieve selected image files. These requests originate from our services and do not include visitor account details, move profiles or professional-contact requests. We retain creator credits, public source and license references, and restricted review and change records to manage images and respond to rights concerns.
Imported public photographs are delivered through StrollPlace-controlled image storage and delivery endpoints, including Cloudflare R2 and its public CDN where enabled. Page views do not require a Wikimedia image or API request for these imported photographs. Our hosting and image-delivery providers process network request information, such as IP address, browser information and requested image URL, to deliver and protect the service. CDN processing can involve the provider's global network; a storage location does not promise US-only processing. This delivery is separate from optional analytics.
Staff review previews can load images directly from Wikimedia and disclose the staff browser's network request information to that service. Opening an external creator, source or license link takes you to a separate service with its own privacy practices. An attribution link does not itself load that external service before you open it.
Widgets and embeds
When a website includes a StrollPlace widget, a visitor's browser requests our scripts, stylesheets and public place or area data from our widget service. These network requests expose technical information such as the connection IP address, request time and browser request headers to StrollPlace and the hosting, delivery and security providers involved in handling them. Initial asset requests may include referrer information according to the host website's and browser's policies; subsequent widget data requests are configured not to send a referrer or cookies.
For a place card, the request identifies the selected public place. Automatic listing integrations inspect supported listing information on the host page in the browser and derive a city and state or property coordinates for an area lookup. The widget data request sends those location parameters and selected content sections, not the full street address, listing description, price, photographs, MLS records, provider credentials, lead forms or visitor contact information. Property coordinates describe the listing location; the widget does not request the visitor's device geolocation.
Widgets do not set or read sign-in cookies, write browser storage, send analytics events or collect information for advertising profiles. They do not require a visitor or publisher account. The separate configurator sends the place search terms or selected public place needed for its preview and can save its display-theme preference in browser local storage. This preference does not identify an account or authorize marketing or analytics.
The separate Developer site, including its configurator and guides, can offer optional analytics managed through StrollPlace Privacy choices. Google Analytics follows the regional rules and consent requirements described above, including the requirement for a new explicit choice when GPC is active. Advertising features remain disabled. Developer-site analytics choices do not enable analytics inside widgets embedded on other websites.
We use widget request information to deliver the requested content, protect the service, apply rate limits and investigate technical or security problems. The application uses a hashed IP-derived value in short-lived rate-limit counters with a one-minute expiry. Short-lived caches of public search and place candidates reduce repeated content lookups; they are not visitor profiles. Hosting, delivery and security services may also process request metadata under the provider, security and retention practices described elsewhere in this policy. The short application-counter expiry is not a claim that all infrastructure logs are deleted within one minute.
The website hosting the widget may collect information under its own privacy notice independently of StrollPlace. Following a link to StrollPlace opens a separate visit governed by the applicable StrollPlace privacy and consent controls. This widget section does not authorize unrelated analytics, marketing or disclosure of contact information, or change the privacy choices and request rights described elsewhere in this policy.
Contact form messages
When you use the contact form, we collect your email address, the topic and message you send and, if you choose to give them, your name, phone number and the page you are asking about. We use this information to read, answer and keep track of your enquiry.
Messages are encrypted when stored and are visible only to authorized staff, whose access is logged. We delete each message and its access log 12 months after we receive it. You can ask to access or delete a message sooner through Privacy requests.