Privacy Policy

Effective date: October 6, 2026

Last updated: October 12, 2026

This Privacy Policy explains how PropertyLayer collects, uses, shares, and protects personal information. It covers two different groups of people:

1. People who use our website and services: visitors to propertylayer.com, people who contact us, free and paid account holders, API and MCP users, and people at companies that buy from us.
2. People who appear in our property data: property owners whose names and mailing addresses appear in public county property records that we collect and license.

Part A covers the first group. Part B covers the second group. Part C covers rights, retention, security, and other topics that apply to everyone.

Who we are

PropertyLayer is operated by Property Layer, LLC, a Wyoming limited liability company, with its registered address at 30 N Gould St Ste R, Sheridan, WY 82801, USA ("PropertyLayer", "we", "us", or "our"). PropertyLayer was previously called BuyParcelData. In September 2026, BuyParcelData's products were renamed PropertyLayer. This policy applies to both names and to the websites and services operated under them.

Property Layer, LLC is responsible for the personal information described in this policy, except where we say that we act on a customer's behalf. Our services are offered to business customers in the United States.

You can reach us about privacy by email at privacy@propertylayer.com, or by mail at Property Layer, LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA.

Summary

• We license property data to businesses and government organizations. We do not offer our data to consumers.
• Our property data comes from public records published by county and county equivalent offices, plus a small number of clearly labeled enrichments such as FEMA flood zone labels and building footprints.
• Property records can include an owner's name and mailing address, because counties publish them. If you own property and want your name and mailing address suppressed from our products, you can ask us by email. See Part B.
• PropertyLayer is not a consumer reporting agency. We do not provide tenant screening or employment screening, and customers may not use our data for either.
• Our website uses Google Tag Manager, Google Analytics, Google Ads, and PostHog to measure traffic and advertising. You can control these through your browser, Global Privacy Control, and the choices described in A3 and C2.
• We do not sell the personal information of our website visitors or customers for money. Some advertising activity may count as "sharing" or "targeted advertising" under US state laws, and you can opt out.

Part A: Website visitors, users, and customers

A1. Information we collect

Information you give us

• Contact and sales requests: your name, work email, company, phone number (if you give it), the product you are interested in, the geography you need, expected volume, timeline, intended use, and anything you write in the message.
• Pilot applications: the same details as a sales request, plus your delivery preferences and any information you share on a call.
• Account information: your name, email address, company, login credentials or single sign on identity, and account settings.
• Billing information: billing name, billing address, tax identifiers where needed, and purchase history. Card details are collected and stored by our payment processor. We do not store full card numbers.
• Support requests: messages, screenshots, files, or sample records you send us so we can help.

You do not have to give us personal information, but we need some of it, such as your email address and billing details, to create an account, process a purchase, or answer a request. If you do not provide it, we may not be able to do those things.

Information collected when you use the services

• Device and log data: IP address, browser type, device type, operating system, language, pages viewed, referring page, and the date and time of each request.
• API and MCP usage data: account identifier, API key identifier, endpoint called, request parameters (for example an address, coordinate, parcel identifier, polygon, or field filter), response status, number of properties returned, credits used, and diagnostic events.
• Security data: signals from our bot protection service (Cloudflare Turnstile) and records of failed logins, suspected abuse, or rate limit events.
• Cookie and similar technology data: see A3.

Information from other sources

• Advertising platforms: when you click one of our Google ads, Google adds a click identifier (GCLID, GBRAID, or WBRAID) to the link. We store it with any campaign tags (UTM parameters) so we can tell which ad or campaign led to a sign up, application, or purchase.
• Sign in providers: if you sign in with a third party identity provider, such as a Google account, we receive basic profile information (your name, email address, and, if available, profile image) and use it only to create and secure your account. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
• AI assistants: if you connect PropertyLayer to an AI assistant through our MCP server, we receive your sign in and consent, and the tool requests the assistant sends to us. See A5.
• Business information: we may look up publicly available information about a company that contacts us, such as its website and industry, to route and answer the request.

A2. How we use this information

Submitting a sales form does not add you to an email marketing list. We use those details to route and answer your request and, as described in A3, for ad measurement and Customer Match unless you opt out or, where consent is required, unless you have consented.

We do not use personal information to make decisions that have legal or similarly significant effects on you based solely on automated processing.

A3. Cookies, analytics, and advertising

We use cookies, localStorage, pixels, and similar technologies on propertylayer.com. Some are necessary for the site to work. Others help us measure traffic and advertising.

How Google uses data. Google Analytics and Google Ads collect information such as your IP address, device details, and the pages you visit when our pages load their tags. Google may use cookies to measure our ads and, where we use Google Ads audiences, to show our ads to you on other sites based on your past visits to our site. You can learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.

Enhanced conversions. When you submit a form or create an account, our Google tag may take the email address (and name or phone number, if you gave them) that you entered, convert it into a one way hashed code, and send that code to Google. Google uses it to match the conversion to a signed in Google account that clicked our ad. Google does not receive the readable email address from this process, and we use it only for ad measurement.

Customer Match. We may upload hashed email addresses of customers, account holders, and people who have asked us about our products to Google Ads. Google uses them to show our ads to those people or to stop showing ads to people who are already customers. Google matches the hashed list against its own accounts and deletes unmatched data according to its policies. Where the law requires consent for Customer Match, we include you in a Customer Match list only if you have given it. You can ask to be excluded from Customer Match at any time by emailing privacy@propertylayer.com.

Your choices.

• Consent where required: where the law requires consent for non essential cookies and similar technologies, such as analytics and advertising cookies, we ask for it. You can withdraw consent at any time by deleting our cookies in your browser, using the browser controls below, or emailing privacy@propertylayer.com.
• US opt out: to opt out of advertising cookies and Customer Match, see C2.
• Global Privacy Control: we treat a Global Privacy Control (GPC) signal from your browser as a request to opt out of sale, sharing, and targeted advertising for that browser.
• Google settings: you can manage personalized ads from Google at adssettings.google.com and install the Google Analytics opt out browser add on at tools.google.com/dlpage/gaoptout.
• Browser controls: you can block or delete cookies and clear localStorage in your browser settings. Some parts of the site, such as login, will not work without necessary cookies.

We do not currently respond to "Do Not Track" browser signals, because there is no common standard for them. We do respond to GPC as described above.

A4. How we share information

We share personal information only as described here.

• Service providers that process information for us under contract, including providers of cloud hosting and storage, authentication, payment processing, customer relationship management (CRM), email and productivity tools, bot protection (Cloudflare), maps and address search (Mapbox), product analytics (PostHog), web analytics and tag management (Google), and advertising (Google Ads). A current list is available on request at privacy@propertylayer.com.
• Advertising partners: Google receives cookie data, click identifiers, hashed contact details for enhanced conversions, and hashed Customer Match lists as described in A3.
• AI assistant providers you choose: when you use our MCP server, results are returned to the AI assistant you connected. That provider handles them under its own terms and privacy policy.
• Legal and safety: when we believe in good faith that disclosure is required by law, subpoena, or court order, or is needed to protect the rights, property, or safety of PropertyLayer, our customers, property owners, or others, including investigating prohibited uses of our data.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, subject to this policy.
• With your consent or at your direction.

We do not sell the personal information of website visitors or customers for money. Under some US state laws, using advertising cookies, enhanced conversions, and Customer Match may be considered "sharing" for cross context behavioral advertising or "targeted advertising". You can opt out as described in C2.

A5. AI assistants and the MCP server

Our MCP server at api.propertylayer.com/mcp lets you query PropertyLayer from an AI assistant that supports the Model Context Protocol. When you connect it:

• You sign in to PropertyLayer and approve access. We receive your account identity and a connection token. We do not receive your AI provider password.
• We receive the tool requests the assistant sends on your behalf, such as an address, area, or field query, and we log them as API usage data. We do not receive your full conversation with the assistant.
• The property results we return become part of your conversation with the AI provider. The AI provider's own privacy policy and data retention settings apply to that conversation.
• Results returned through MCP are subject to the same Terms of Service and prohibited uses as API results.

You can disconnect PropertyLayer from your AI assistant at any time in that assistant's settings. To revoke a connection from the PropertyLayer side, email support@propertylayer.com.

A6. Information our customers send us

When a customer sends us addresses, parcel identifiers, or lists to look up, we process those inputs to return results, bill usage, and investigate service problems. We do not use a customer's lookup lists to market to the people or addresses on them, and we do not sell them. Where a law treats us as a processor or service provider for that information, we process it on the customer's instructions. A data processing agreement is available to business customers on request at privacy@propertylayer.com.

Part B: People who appear in our property data

B1. What our property data contains

PropertyLayer collects property records published by county and county equivalent offices across the United States, including assessors, tax collectors, recorders, and GIS offices. We standardize those records into one documented format and license them to businesses.

A property record describes a parcel of land, not a person. Depending on what the county publishes, a record can include:

• Ownership fields: owner names exactly as they appear on the county record, owner roles and shares, whether the owner is a trust or company, the owner's mailing address, and owner occupancy flags.
• Property fields: the property address, parcel identifiers, parcel boundaries, land use, acreage, legal description, buildings, and zoning.
• Valuation and tax fields: assessed, market, and taxable values, tax bills, levies, exemptions, and delinquency status.
• Transfer fields: recorded sale dates, prices, parties, and instrument references.
• Enrichments: a small number of added fields that we label separately from county fields, such as FEMA flood zone labels, USDA cropland classifications, elevation, building footprints, and the total contiguous acreage held by the same owner.

Our property data does not include phone numbers, email addresses, Social Security numbers, dates of birth, credit scores or credit reports, bank account numbers, driver's license numbers, or health information. Depending on what a county publishes, a record can also include other public record details connected to the property, such as the names of buyers, sellers, taxpayers, and tax lien purchasers, the type of a tax exemption (for example a homestead, senior, or veteran exemption), references to recorded mortgages, manufactured home serial or title numbers, and assessor photographs of buildings.

Most records are owned by companies, trusts, governments, and other organizations. Where a record names an individual, that name and mailing address are personal information under some laws, and this Part B explains how we handle it.

Source of the data. We obtain this information from publicly available government records published by county and county equivalent offices, and enrichments from public government and other sources that we identify in our documentation. We do not collect it from property owners directly.

B2. Why we process property data and our legal basis

Counties publish property records so that the public can see who owns land, what it is worth, and how it is taxed. Our customers use standardized versions of these records for purposes such as:

• planning and siting renewable energy, transmission, pipelines, and other infrastructure;
• oil, gas, and mineral research;
• utility and right of way work;
• agricultural and land lending;
• government planning and public administration;
• insurance exposure analysis;
• title, legal, and research work; and
• real estate and property technology products.

Where a law requires a legal basis for this processing, we rely on our legitimate interests and those of our customers in using publicly available property records for these business purposes. We have weighed those interests against the rights of property owners. To protect owners, we limit the data to what counties publish plus labeled enrichments, we license it only to businesses under contract, we prohibit harmful uses (see B3), and we offer suppression (see B4). This policy is also our notice to people whose information we did not collect directly from them.

B3. Who receives property data and what they may not do

We license property data only to business and government customers who accept our Terms of Service or sign an order. Customers may not use our data:

• for tenant screening or employment screening;
• to stalk, harass, threaten, intimidate, or locate a person in order to harm them;
• to find or publish the home address of a judge, law enforcement officer, domestic violence survivor, or other protected person in violation of law;
• for skip tracing, debt collection, or marketing that violates the law, including the Fair Debt Collection Practices Act, the Telephone Consumer Protection Act, and do not call rules;
• to discriminate unlawfully, including in violation of fair housing laws; or
• for fraud, including deed fraud and misleading offers to property owners.

PropertyLayer is not a consumer reporting agency.

B4. Owner choices: suppression, access, and correction

Suppression (opt out). If you are an individual named as an owner in our data, you can ask us to suppress your name and mailing address. To ask:

1. Email privacy@propertylayer.com with the subject "Suppression request".
2. Tell us your name as it appears on the county record and the property address or county parcel number. You do not need an account.
3. We may ask for information to confirm you are the owner or are authorized to act for the owner. We use it only to handle your request.

When we approve a suppression request, we will:

• remove or mask your name and mailing address in API and MCP results;
• exclude them from new bulk deliveries and updates;
• notify customers who hold the record in bulk files, through our update process or by email, and require them under our Terms of Service to apply the suppression within 30 days, or within 10 business days for a notice under New Jersey's Daniel's Law; and
• keep a minimal record of the suppression (your name, the parcel, and the date) so the data stays suppressed when the county publishes new files.

We complete suppression within 30 days of receiving a verified request. Suppression does not change the county's official record, which remains available from the county. Other property facts that are not about you as a person, such as parcel boundaries, values, and building details, remain in our data.

Protected persons. If you are a judge, prosecutor, law enforcement officer, or another person covered by a law that protects the home address of certain people (for example New Jersey's Daniel's Law or a state address confidentiality program), or if you are a survivor of domestic violence or stalking, tell us in your request. We handle these requests with priority, and we act within the time the applicable law requires. For requests under New Jersey's Daniel's Law, we act within 10 business days of receiving a valid notice. You may use an authorized agent.

Access and correction. You can ask what information about you is in our data and ask us to correct it. Because our data comes from county records, an error in the county record must be corrected by the county office that publishes it. If our processing introduced an error, we will fix it.

California and other US states. You can also use the rights described in Part C. Under the California Consumer Privacy Act (CCPA) and similar laws, information that is lawfully made available from government records is generally treated as publicly available, and some rights may not apply to it. We still honor suppression requests from owners as described above. Where the law requires it, we register as a data broker, and we process deletion and opt out requests that reach us through state data broker registries or platforms, such as the California Delete Request and Opt out Platform (DROP), within the time the law requires.

Part C: Rights, retention, and other information for everyone

C1. Your privacy rights

Depending on where you live, you may have some or all of these rights:

• Know and access: ask what personal information we have about you and get a copy.
• Correct: ask us to fix inaccurate information.
• Delete: ask us to delete your information.
• Portability: receive your information in a usable format.
• Opt out: opt out of the sale or sharing of your personal information, targeted advertising, and profiling.
• Object or restrict: where the law provides this right, object to processing based on legitimate interests, including direct marketing, or ask us to restrict processing.
• Withdraw consent: where we rely on consent, withdraw it at any time. This does not affect processing that already happened.
• Appeal: if we decline your request, you can appeal by replying to our decision. If your appeal is denied, you may contact your state attorney general.
• Complain to a regulator: where the law provides this right, you can complain to the privacy regulator or attorney general where you live.

These rights are available to residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with comparable laws, and to people in other places with comparable laws, in each case to the extent the law applies to us and to the information involved.

How to make a request. Email privacy@propertylayer.com. We will confirm receipt and respond within 45 days, or sooner where the law that applies to you requires it. We may extend these periods when the law allows and will tell you if we do. We will verify your identity before giving out, correcting, or deleting information, using information we already hold where possible, and we use verification details only for that purpose. You do not need to verify your identity to opt out. An authorized agent can make a request for you with your written permission, and we may ask you to confirm your identity or the permission directly with us.

We will not discriminate against you for using your privacy rights, for example by denying services or charging different prices. We do not offer financial incentives in exchange for personal information.

C2. Do Not Sell or Share My Personal Information

We do not sell the personal information of website visitors or customers for money. Our use of Google advertising cookies, enhanced conversions, and Customer Match may count as "sharing" for cross context behavioral advertising or "targeted advertising" under US state laws. You can opt out in either of these ways:

• Email: send a message to privacy@propertylayer.com with the subject "Do Not Sell or Share". You do not need an account. We will stop using your information for these advertising purposes and remove you from Customer Match lists as soon as feasible, and in any case within the time the law requires (15 business days under California law).
• Global Privacy Control: turn on GPC in your browser or extension. We treat it as an opt out for that browser.

Property owners who want their name and mailing address removed from our property data should follow the suppression steps in B4.

C3. California notice

This section adds details required by the CCPA for California residents. It also serves as our notice at collection.

Categories of personal information we collect from visitors and customers, and have collected in the last 12 months: identifiers (name, email, phone number, IP address, account and API key identifiers, click identifiers); customer records (billing name and address, tax identifiers); commercial information (plans, purchases, and usage); internet and network activity (pages viewed, API requests, cookie data); professional information (company and role); and inferences about product interest drawn from site and product use. Sources, purposes, and recipients are described in A1 through A4. In the last 12 months we disclosed each of these categories for business purposes to the service providers described in A4.

Sensitive personal information: we collect account login credentials only to provide secure access. We do not use or disclose sensitive personal information for any purpose that would give you a right to limit its use under the CCPA, and we do not use it to infer characteristics about you.

Sale and sharing: we do not sell visitor or customer personal information for money. In the last 12 months, our use of Google advertising cookies, enhanced conversions, and Customer Match may have been "sharing" of identifiers and internet activity with Google for cross context behavioral advertising. You can opt out as described in C2. We do not knowingly sell or share the personal information of anyone under 16.

Property data: the property records described in Part B come from government records and are licensed to business customers. See B1 through B4.

Retention: see C5.

Shine the Light: we do not disclose personal information to third parties for their own direct marketing purposes.

C4. International transfers

Property Layer, LLC is a United States company. Our services are hosted in the United States and are intended for business customers in the United States. If you use our website or services from outside the United States, your information will be transferred to and processed in the United States and other countries where our service providers operate. Where the law requires safeguards for these transfers, we use appropriate safeguards, such as standard contractual clauses. You can ask for more information by emailing privacy@propertylayer.com.

C5. How long we keep information

We keep personal information only as long as we need it for the purposes in this policy, then delete or anonymize it.

We may keep information longer when needed to resolve disputes, enforce our agreements, or meet a legal obligation.

C6. Security

We protect personal information with administrative, technical, and physical measures suited to the risk, including encryption in transit, access controls, credential protections, and logging. API keys and passwords should be kept secret, and you should tell us immediately at support@propertylayer.com if you think one has been exposed. No system is perfectly secure, so we cannot guarantee absolute security. If a security incident affects your personal information, we will notify you, our customers, and regulators as the law requires.

C7. Children

Our services are for businesses and for people 18 and older, and are not directed to children. We do not knowingly collect personal information from anyone under 16 through our website or services. If you believe a child has given us personal information, contact us and we will delete it.

C8. Links to other sites

Our site links to other sites, such as county sources, documentation hosts, and AI assistants. Their privacy practices are governed by their own policies.

C9. Changes to this policy

We may update this policy as our products, providers, or legal obligations change. We will post the new version on this page and update the "Last updated" date. If a change is material, we will give notice on our website or by email before it takes effect.

C10. Contact us

• Contact form (sales and general questions): propertylayer.com/contact
• Email (privacy requests, suppression, and opt outs): privacy@propertylayer.com
• Email (account and technical support): support@propertylayer.com
• Mail: Property Layer, LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA