Privacy Policy

This Privacy Policy describes how ExtraSphere Media LLC (“we,” “us,” or “our”) collects, uses, and shares information in connection with the ClarityPoint County Market Reports website and digital products (the “Service”).

1. Who we are

The Service is operated by ExtraSphere Media LLC. Contact: service@claritypoint.com.

2. Information we collect

• Order information: email address, county/report purchased, payment status, and delivery metadata. Payment card details are processed by Stripe; we do not store full card numbers on our servers.
• Optional email requests: email address, the purpose you selected (research updates or a county brief notice), county and FIPS code if applicable, the permission wording and privacy version you saw, request time, and pending or withdrawn status. We record these choices separately. A request does not create an account or order.
• Technical data: hosting and security services may process IP addresses, request details and timestamps for security and reliability. Signup abuse controls use keyed hashes of an email address and network address; the signup request table does not store a raw IP address. Our optional first-party measurement records a random browser-tab identifier, an allowlisted campaign code, searches/previews/sample-click events and linked checkout outcomes. It excludes email, IP address, search text, full URLs, referrers and download tokens.
• Cookies and similar technologies: essential site cookies (e.g., preview gate session, theme preference, cookie consent) and optional measurement in session storage only after you accept. We honor DNT and GPC for that measurement. See our Cookie Policy.

3. Information we do not collect

We do not knowingly collect patient health information (PHI), medical records, or patient-level CMS claims data. Our reports use public provider and designation datasets only. We do not sell personal information.

4. How we use information

• Fulfill orders and deliver PDF and CSV download links
• Provide customer support and prevent fraud/abuse
• Record your optional request and, once our mailing service launches, ask you to confirm your email before sending the updates you requested
• Operate, secure, and improve the Service
• Comply with law and enforce our Terms

5. Service providers

We use trusted processors, including (as configured):

• Stripe — payment processing
• Resend — email delivery where configured
• Vercel — website hosting
• Supabase — database and file storage for orders and report files, and optional email requests
• Perplexity and Firecrawl — staff research of public sources. Our research workflow does not send buyer records, payment information or patient data to these services. Staff research questions, source content and conversation state may be processed and retained under the applicable provider terms.

Flowdesk is our internally developed mailing-list platform. Its ClarityPoint integration is not yet active. Requests are stored by ClarityPoint as pending confirmation; submitting a form does not send an email or activate a subscription. When the integration launches, we will use the recorded purpose and permission to request confirmation. We do not combine a county notice with general marketing consent.

These providers process data under their own privacy terms and our instructions.

6. Data retention

We retain order and delivery records as needed for accounting, support, fraud prevention, and legal obligations. Download tokens may expire or be rotated. Pending email requests are retained while we prepare the requested service, unless you withdraw or request deletion. Contact us to withdraw a pending request or request deletion of subscription data. Signup rate-limit records older than two days are removed during subsequent signup processing. We retain suppression records as needed to honor unsubscribe requests and prevent unwanted email. Optional raw measurement and its checkout attribution expire after 90 days; order and accounting records are separate.

7. Security

We use industry-standard measures appropriate to a digital goods site (HTTPS, hashed download tokens, private storage for paid files). No method of transmission or storage is 100% secure.

8. Your choices

• Withdraw a pending request by emailing support. Once email updates are active, unsubscribe through the link in each update
• Change optional measurement through “Privacy choices” in the footer; Essential only also requests removal of this tab’s linked measurement records
• Request access or deletion of personal data we hold by emailing service@claritypoint.com

9. Children

The Service is directed to business and professional users and is not intended for children under 13 (or under 16 where applicable). We do not knowingly collect personal information from children.

10. International users

The Service is operated from the United States. If you access it from elsewhere, your information may be processed in the U.S. and in locations used by our service providers, which may have different data-protection rules. This policy does not limit rights available under applicable law.

11. Changes

We may update this policy. The effective date above will change when we post material updates. We will request any additional permission required by applicable law before using your information for a new purpose.

12. Contact

ExtraSphere Media LLC
Privacy: service@claritypoint.com
Support: service@claritypoint.com