Privacy Policy

This policy explains what FindInMyZip collects, why, who we share it with, and what you can tell us to stop. It covers consumers who use the directory, business owners who claim and manage listings, and anyone who simply visits the site.

1. Who we are

FindInMyZip is operated by Bonsai Marketing, 1275 4th St #5102, Santa Rosa, CA 95404. For any privacy question, email bryan@findinmyzip.com.

2. What we collect

Information you give us

• Consumers. When you use a "Get Matched" or quote form: name, phone number, email where provided, ZIP code, the service you need, and any notes you add.
• Business owners. When you claim a listing or manage a Premium profile: your name, email, phone, your stated role at the business, and everything you choose to publish on the listing — description, services, hours, service areas, photos, videos, links to your review and social profiles, and customer questions and answers.
• Payment. Card details are collected and stored by Stripe, not by us. We never see or hold your full card number. We keep a customer reference, the subscription status, and the renewal date.

Information we collect automatically

• IP address, browser and device type, pages viewed, referring page, and approximate location derived from IP.
• Interactions with a business listing — a call button tapped, a website or review link clicked, a video played. On Premium listings these are counted so the business owner can see engagement. We do not store your IP address alongside these events.
• Cookies and similar technologies. See the Cookie Policy.

Information from other sources

Business information — name, address, phone, category, hours, photographs, ratings and review counts — comes from the Google Places API and from what business owners publish to their Google Business Profile, as well as from public sources and from owners directly. Photographs imported from Google carry the attributions Google supplies.

3. Why we use it

• To run the directory and show accurate business information.
• To route a "Get Matched" request to relevant local businesses.
• To verify that someone claiming a listing is entitled to control it.
• To provide, bill for and support Premium subscriptions.
• To measure how the site is used and improve it.
• To market our own services — see sections 5 and 6.
• To detect fraud and abuse, and to meet legal obligations.

4. Who we share it with

• Local businesses, when you submit a matching request. Up to three, in the category and ZIP you chose. They receive what you typed on the form.
• Service providers who process data on our behalf and only on our instructions: hosting and delivery (Netlify), database (Supabase), email (Resend), payments (Stripe), analytics and tag management (Google), search and visibility tooling (Search Atlas), and — where SMS is offered — a messaging carrier.
• Advertising and analytics partners, as described in section 5.
• Legal — where we are required to by law, or to protect rights and safety.
• A successor, if the business is sold or merged. We would tell you before your information became subject to a different policy.

We do not sell your personal information for money.

5. Advertising, retargeting and analytics

We advertise our own services, and we measure whether that advertising works. To do that we use tools from advertising platforms — currently Google, and potentially others including Meta, Microsoft and LinkedIn — which set cookies or similar identifiers in your browser.

These tools let us do things like: show a FindInMyZip advertisement to someone who visited the site but did not claim their listing (retargeting); build audiences of people who behave similarly to our existing customers; and see which advertisement led to a sign-up rather than merely a visit.

Under the California Consumer Privacy Act this counts as "sharing" personal information for cross-context behavioural advertising, even though no money changes hands. We would rather tell you that plainly than rely on the fact that we are not paid for it.

You can stop it in any of these ways, and each works on its own:

• Use Do Not Sell or Share My Personal Information.
• Turn on Global Privacy Control in a browser or extension that supports it. We treat GPC as a valid opt-out request and apply it automatically.
• Block or clear cookies in your browser.

Opting out of advertising does not stop you using the site, and does not affect the transactional messages your account depends on.

6. Email and SMS

Transactional messages

Sign-in links, claim outcomes, billing and renewal notices, security notices. These are part of providing your account. They continue even if you opt out of marketing, because switching them off would lock you out of a listing you control.

Marketing email

Every marketing email carries a working one-click unsubscribe and our postal address. We act on an unsubscribe immediately and keep a suppression record so you are not contacted again by mistake. Unsubscribing from marketing does not stop transactional messages.

SMS

We send text messages only to a number you have given us for that purpose, with your express consent captured at the point you provide it. Agreeing to marketing texts is never a condition of purchasing anything. Message frequency varies. Message and data rates may apply. Reply STOP to stop, HELP for help. STOP is honoured immediately and automatically. We do not share mobile numbers with third parties for their own marketing.

7. Your rights

Depending on where you live — and in California regardless of whether you are a consumer or a business contact — you may have the right to:

• Know what we collect, use and disclose about you.
• Access a copy of it.
• Correct it if it is wrong.
• Delete it, subject to information we must keep for legal or fraud-prevention reasons.
• Opt out of sale or sharing for cross-context behavioural advertising — see here.
• Not be discriminated against for exercising any of these. We will not degrade the Service or change your price because you did.

To make a request, email bryan@findinmyzip.com. We will verify who you are before acting — usually by confirming control of the email address on the account — and respond within the time the law allows. An authorised agent may act for you with written proof.

8. How long we keep it

• Listing content — for as long as the listing is published. If a subscription lapses, the content is retained, not deleted, so it returns if you resubscribe.
• Matching requests — kept while needed to operate and support the service, then removed.
• Suppression records — kept indefinitely, because that is the only way to guarantee we never email you again.
• Business data sourced from Google — refreshed periodically and cached only as long as Google's terms allow.

9. Security

Sign-in is passwordless: we email a single-use link rather than storing a password you could have reused elsewhere. Session cookies are HttpOnly, Secure and SameSite. Sign-in tokens are stored only as a one-way hash, so a copy of our database could not be replayed to access an account. Access to business data is checked on every request against the record of who owns it, not against anything carried in your browser. No system is perfectly secure, and we will not pretend otherwise.

10. Children

The Service is for businesses and adult consumers. It is not directed at children under 16 and we do not knowingly collect their information. If you believe a child has given us information, email us and we will delete it.

11. Changes

We will update this policy as the Service changes, and revise the date above. If a change materially affects how we use information we already hold, we will tell account holders directly rather than relying on you to re-read this page.

12. Contact

FindInMyZip
1275 4th St #5102, Santa Rosa, CA 95404
bryan@findinmyzip.com · (707) 602-3487