Privacy policy

1. Who we are

EnvReview is a service of Levy Properties LLC (“we”, “us”). This policy covers this website and the reviews we prepare through it. Questions or requests: hello@hudenvreview.com.

2. What we collect

• Your account: your email address, your company’s name and your password. The password is stored only in scrambled (hashed) form by our sign-in provider; we can’t read it.
• Your orders: the addresses, the project details you enter (such as year built, project type and repair cost), any applicant names and application numbers you include, and your notes.
• Photos and documents you upload for an address. These may show an applicant’s home and contain personal information.
• Captions and notes you add to those files: a caption for each file and a note for each address. Please leave out applicant names, phone numbers, Social Security numbers and similar personal details.
• Payments: you enter card or bank details on Stripe’s own page; we never see or store them. We receive the payment’s status and amount and a link to the receipt.
• Messages you email us.
• Technical information: our hosting provider keeps standard request logs, such as IP addresses and the pages requested. We use cookies only to keep you signed in and to remember which company you are working in.

3. How we use it

• To prepare, check and deliver your reports.
• To run your account, including sign-in and password-reset emails.
• To take payment and keep accounting records.
• To answer your messages.
• To keep the records that the grant programs you work in, and the law, require.
• To keep the service secure and prevent misuse.

We don’t sell your information, use it for advertising, or use it to train AI models.

4. Uploaded photos and documents, and the AI step

Most photos are shrunk in your browser before upload, which removes their location (GPS) and camera details. We keep only the date a photo was taken, which can help date the site inspection. A photo your browser can’t open (some HEIC files) is uploaded as it is, and we remove those details before any AI reads it.

To prepare the review, our computer sends an address’s files to Anthropic’s Claude API, with any captions and note you added. Before sending them, we remove phone numbers, email addresses and Social Security numbers that we can recognize in your captions and notes. The AI proposes site-inspection answers, and each answer cites the file and page, or the caption or note, it came from. We don’t send the address or the applicant details you typed into the order, although a document, caption or note may itself contain them. A person checks every proposed answer before it is used.

Anthropic’s commercial terms don’t allow it to train its models on what we send. It deletes what we send within 30 days, unless it must keep something longer to enforce its usage policy or to comply with the law (see Anthropic’s retention page).

5. Who helps us

These service providers process information for us, only to provide this service:

• Supabase (database, sign-in and file storage): everything in your account.
• Google Firebase (hosts this website): requests to the site, including IP addresses.
• Stripe (payments): the payment details you enter on its page, plus the order number, the amount, your company’s name and the contact email.
• Resend (sends our sign-in and password-reset emails): your email address.
• Anthropic (reads uploaded photos and documents, as described in section 4): those files, and the captions and notes you add to them.
• Esri (suggests addresses as you type): what you type in the address field.
• The US Census Bureau (checks each address): the address.
• Public map services of FEMA, the US Fish and Wildlife Service and the US Geological Survey, and an airport map hosted on Esri’s ArcGIS Online: the property’s map location, never names.
• Cloudflare (forwards email sent to hello@hudenvreview.com to our inbox): your message.

We may also disclose information when the law requires it.

6. How long we keep it

• Uploaded photos and documents, and their captions and notes: deleted 90 days after the order’s report is delivered, along with our working copies. The photos a review cites stay with that review and its report. If an order is cancelled before delivery, its files, captions and notes stay with your account until you ask us to delete them.
• Reports and review records, including the answers proposed from your files, captions and notes: 5 years after delivery, or longer if your contract with us requires it. The Responsible Entity keeps the official environmental review record (24 CFR 58.38), federal grant records are kept for 3 years after the grant’s final financial report (2 CFR 200.334), and grant contracts often pass record-keeping duties on to vendors like us.
• Billing records: 7 years.
• Your account: while it is active. Ask us and we will delete it, keeping only what the periods above still require.

7. Security

Connections to the site are encrypted. Files are kept in private storage, each company’s users can reach only that company’s orders and reports, and only we can see the work behind a review. No system is perfectly secure, but we limit who and what can reach your information.

8. Your choices

Email hello@hudenvreview.com to ask for a copy of your information, to correct it, or to delete it. We will do so unless the law or the periods in section 6 require us to keep it. If you are an applicant whose information was submitted by a program or organization, please contact them; we will help them answer you.

9. Children

This service is for organizations and is not directed at children.

10. Changes

We may update this policy. The date at the top shows the latest change. The Terms of service and the Refund policy also apply.