Draft of September 2026. Pending review by counsel.
This policy explains what we collect, why, how we protect it, and how to make us delete it. It applies to this website, operated by MF Project Solutions LLC, a Massachusetts limited liability company.
What we collect
When you use the free property check or buy a report, you give us:
- Your name, email address, and phone number if you provide one
- The property address you are asking about, and the town it is in
- What you are hoping to build, the property type, and where you are in the process
- Whether you consented to be emailed
We also record, automatically:
- Campaign parameters from the link you arrived through (utm_source and similar), so we know which outreach works
- A one-way hash of your IP address, used only to rate-limit the form. We do not store the address itself.
We do not collect payment card details. Payments go through Square, on Square’s systems. Card numbers never touch this website.
Why we collect it
To answer your question, to send you the report you asked for, to take payment, and to contact you about your project. That is the whole list. We do not use your details to build a profile, and we do not buy data about you from anyone else.
Who we share it with
We do not sell your information. Not to contractors, not to lenders, not to anyone, ever. We share it in exactly three circumstances:
- Lebra Engineering & Design, LLC — if your enquiry is one they should handle, or if you ask us to pass it on. Lebra provides the professional review behind our research and performs any engineering work that follows. This is disclosed on our About page and in the pricing table.
- Service providers we cannot operate without — our host, our email delivery service, and Square for payments. Each is bound to use the data only to provide that service.
- When the law requires it — a valid subpoena, court order, or similar.
If we ever share your details with a contractor from a paid panel, that will only happen because you asked us to, and the paid relationship will be disclosed on the page where it appears.
How we protect it
Storing Massachusetts residents’ personal information triggers 201 CMR 17.00, which requires a written information security program. We maintain one. In practice:
- Your name, email, phone number and property address are encrypted before they are written to the database, using a key held outside it. A copy of the database on its own does not reveal them.
- The whole site is served over TLS, with HSTS enabled.
- Your personal information is never placed in a web address, a server log, or an analytics event.
- Administrator accounts require two-factor authentication, and there are no shared logins.
- Every time a member of staff decrypts and views your details, that access is logged with who and when.
No system is perfect, and we will not pretend otherwise. If we ever suffer a breach affecting your personal information, we will notify you and the Massachusetts Attorney General as Chapter 93H requires.
How long we keep it
- Enquiries that do not become orders: 24 months, then deleted.
- Customers: seven years, because tax and accounting records require it.
- The report itself: kept as long as your customer record, so we can re-send it.
Deleting your information
Email us and ask. We will confirm within five business days and complete the deletion within thirty, except for records we are legally required to keep — in which case we will tell you which, and why. You do not need to give a reason, and asking costs you nothing.
Cookies and analytics
We use as few cookies as we can. Analytics tells us which pages get read and which steps of the form people abandon. No personal information is ever sent to an analytics service — not your name, not your email, and not the property address.
Children
This site is for property owners and construction professionals. We do not knowingly collect information from anyone under 16.
Changes and contact
If this policy changes materially, we will date the change at the top of this page. Questions, or a deletion request: contact us.