What we collect, why, who processes it, how long we keep it, and how to delete it. We record a lot about how the product is used so we can make it
better. We never sell it.
Last checked against the product and our processors on .
We don’t sell or rent your data, and we don’t use it for advertising.
Your territory is private to your account. Schools, USAC and other providers never see it.
We record sessions in full, including what you type and the page’s network requests. Passwords, sign-in codes and other secret fields are masked.
Card numbers go to Stripe, never to us.
The app and its data run in the US (Northern Virginia); analytics and session replays are stored in the EU (Frankfurt).
Ask and we delete it, within 30 days.
What we collect, and why
erateradar is run by Helios One. This covers erateradar.com, app.erateradar.com and the emails we send.
Your email address
Plus your name or company if you give them. When you enter your email to download a list, we store it with the territory on screen, your visit source, your browser and IP address.
Why: To sign you in, send your weekly list and account emails, and reply to what you send us.
Kept in: Convex, Resend
Your territory
The ZIP, city or SPIN office you set or search, and the list built for it.
Why: To build your list.
Kept in: Convex
How you found us
Your first and latest visit source: UTM tags, referring site, landing page. Stored on your account.
Why: To learn which pages and emails bring people in.
Kept in: Convex, PostHog
Usage analytics
Pages viewed, clicks, searches, device and browser, IP address and the approximate location it implies, page speed, errors. Automated and bot traffic is recorded and labelled.
Why: To see what works and fix what doesn’t.
Kept in: PostHog
Session replay
A recording of the page while you use it: mouse movement, scrolling, clicks, and what you type into fields such as ZIP and email. Passwords, sign-in codes, tokens and other secret fields are masked. Browser console messages and the network requests the page makes are recorded too, with their headers and contents; PostHog removes sign-in headers, cookies and password- or token-like fields from them.
Why: To watch where people get stuck, and to reproduce bugs.
Kept in: PostHog
Server events
Account milestones: trial started, list exported, weekly email sent and opened, subscription started or cancelled. The weekly email has a small tracking image so we know it was opened.
Why: To run your account and measure the product.
Kept in: Convex, PostHog
What you send us
Wrong-record reports, feedback (with an optional screenshot) and call requests, stored with details of the visit such as page, browser, IP address and a link to the session replay. Each one is emailed to a co-founder, and so is each new sign-up.
Why: So a co-founder reads and answers it.
Kept in: Convex, Resend
Billing
If you buy a plan: the plan, its status, and Stripe’s customer and subscription IDs. You type card details on Stripe’s page; they stay with Stripe and never reach us.
Why: To bill you and unlock paid features.
Kept in: Stripe, Convex
Web server logs
IP address, browser user agent and the page requested, for each request.
Why: To keep the site running and spot abuse.
Kept in: Fly.io
We hold no student data. The school records in your list are public USAC filings about what a school or library wants to buy.
Cookies and browser storage
Name
What it holds
Lasts
er_did
A random visitor ID, so analytics connect your visits to erateradar.com and the app.
400 days
er_touch
Your first and latest visit source (UTM tags, referring site, landing page).
400 days
ph_…_posthog
PostHog’s copy of the visitor ID and session state (cookie and local storage).
Set by PostHog
er_exit, er_exo_seen
That we already showed you the “take the list with you” offer, so it never shows twice.
400 days
er_capture_pending
This device only (local storage): an email you entered, with the area and visit source sent with it, when sending it failed (for example offline). We try again on your next page views and delete it once it is sent.
Up to 7 days
er_internal
Only on our own team’s browsers, so our visits are filtered out.
400 days
The app also keeps your sign-in session in your browser. We use no advertising cookies and no ad networks.
Where it runs
App backend and database: Convex, in AWS us-east-1 (Northern Virginia, US). Accounts, territories, reports, feedback, call requests and copies of our emails are stored there.
Website and app pages: erateradar.com and app.erateradar.com are served by Fly.io from Ashburn, Virginia (US).
Our daily data pipeline: Fly.io, Ashburn, Virginia (US). It reads only public USAC records.
Email: sent through Resend on Amazon SES in us-east-1 (Northern Virginia, US).
Analytics and session replays: PostHog EU Cloud, Frankfurt, Germany.
Payments: Stripe. Card details are entered on Stripe and never reach our servers.
Checked against each provider’s settings on .
Who processes it
These services hold personal data for us, only to run erateradar:
Account email, territory, visit sources, reports, feedback, call requests (with browser and IP address), server events, copies of emails we send, billing status
Card details and billing address (entered on Stripe), plan and invoices
Each name links to that company’s privacy policy; a location links to the page that states it (read ).
How long we keep it
Account data (email, territory, visit sources, reports, billing status, copies of emails we sent you): while your account exists, and until you ask us to delete it.
Session replays: deleted automatically after 30 days.
Analytics events: up to 7 years (our PostHog plan’s limit), unless you ask us to delete them.
Web server logs: kept by Fly.io under its own log retention. We don’t copy them elsewhere.
Billing records: Stripe keeps what it must keep by law.
The replay and analytics periods are our PostHog project and plan settings, read on .
Who can see your territory
You, and the people you invite to your account.
The people at Helios One who run erateradar, to support you and check what you report.
The services above, only to run erateradar.
Never other customers, schools, USAC or other providers. We don’t publish, share or sell territories or searches. The numbers on our site come from
USAC data, not from customers.
Delete, export or stop emails
Stop the weekly email: use the unsubscribe link in any email from us. One click.
Delete everything: reply to any email from erateradar, or book a call and write “delete my data” in the note.
We delete your account, territory and reports from our database, and your profile, events and recordings from PostHog, then confirm by email within
30 days.
Get a copy of what we hold about you: ask the same way.
How we protect it
HTTPS everywhere, with strict transport security. erateradar.com and the app send a content security policy, and other sites can’t frame them.
Sign-in uses a one-time code or a sign-in link sent to your email, so there is no password for us to store or leak.
Download links for exported lists are signed and expire after 24 hours.
Keys and passwords live in a secrets vault, never in our code.
Customer data is open only to Helios One and the services listed above.
Found a security problem? Reply to any email from us or book a call. Both reach a co-founder’s inbox.
Contact
Helios One 3075 Clay St San Francisco, CA 94115
Reply to any email from erateradar, or book a call with a co-founder.