Privacy Policy

SetReady operates setready.us, a public roster of land-home and manufactured-home professionals in the southeastern United States.

Mail for privacy requests: SetReady, P.O. Box 1242, Flagler Beach, FL 32136.

Account. If you sign up with email, we collect your name, email, and password. The password is handled by Neon Auth, the sign-in service. We do not ask you to send a password by email or by mail. If you continue with Google, Google handles that sign-in and returns the account identity it shares with us, which includes your email and name when Google provides them.

Session. A signed-in browser gets a session cookie so you stay logged in. That cookie is there to run the account.

API keys. If you mint a key, we show the full secret once. After that we store a short prefix, a hash of the key, the name you gave it, when it was created, when it was last used, whether you revoked it, and a daily call count. We do not keep the raw key. We use the count to enforce the daily limit.

Suggest a listing. The form collects a business or request name, category, whether you are offering or looking, a license number when that category needs one, state, counties, phone, and email. Website, contact name, trade tags, and a note about the work are optional. We store the submission so we can review it. Sending it does not publish a listing.

Project inquiry. If you submit the project-team form, we store your name, the email or phone you chose, timeline, optional parcel note, optional project notes, the providers and services you selected, and the consent you gave. If the link you opened carried utm_source, utm_medium, or utm_campaign, we store those values with the request. We do not buy marketing lists.

Public roster. A published listing can show a business name, category, city, phone, website, license number, and a Google Maps link. Some of that comes from public records and public pages. Some comes from people who asked to be listed.

Operations. The host and the database keep ordinary service logs — things like IP address, time, URL, and error traces — so the site can run and so we can fix failures. Those logs are not an advertising profile.

Sign-in uses first-party session cookies from Neon Auth. Staff tools use a separate first-party cookie to keep an operator signed in. That cookie is httpOnly. It is not an ad cookie.

This app does not include a third-party analytics script, an advertising pixel, or a marketing tracker.

A project shortlist can sit in your browser’s session storage so a refresh does not wipe the picks. That stays on your device until the browser session ends. We do not receive it unless you submit an inquiry.

In production the site registers a service worker. It caches an offline fallback page and the app icon. Document pages still load from the network. The worker does not collect analytics.

• Run the directory, accounts, and the MCP connector.
• Review listing suggestions.
• Handle a project inquiry you chose to send, including sharing it with the providers or Rising Tide coordination you authorized on the form.
• Enforce API rate limits and revoke keys.
• Keep the service secure and fix failures.
• Answer a request you mail to us.

We do not sell personal data. We do not share it for cross-context behavioral advertising. We do not rent the claim form or the account list.

The app is hosted on Vercel. Account data, the roster, listing submissions, project inquiries, API keys, and usage counts are stored in Neon (Postgres). Neon Auth handles sign-in, including Google sign-in when you choose it.

If you open a Google Maps link or a business website, that site processes whatever you do there. We do not control it.

Account data stays while the account exists. API key records, including revoked keys and daily counts, stay so limits and abuse checks still work. Listing submissions and project inquiries stay while we are reviewing them or need them for the request you made.

You can ask us to delete personal data. We will, unless we have to keep a record for a legal duty or to finish a request already sent to a provider you authorized.

To ask for a copy, a correction, or deletion, write to:

SetReady
P.O. Box 1242
Flagler Beach, FL 32136

Say which email or phone you used, and what you want. Include a return address. If you include an email and we can match it to the record, we may reply there. Revoke API keys from your account page yourself. That is faster than mail.

The roster is for businesses and for adults hiring them. We do not aim the site at children, and we do not knowingly collect personal data from anyone under 13.

If this policy changes, the effective date at the top of this page changes with it.

Same mailbox as above. The rules for using the site are in the Terms of Use.