Privacy Policy

Last updated: May 10, 2026

This Privacy Policy describes how Turbolytics LLC ("Company", "we", "us", or "our") collects, uses, and shares information about you when you use OpenPlanning ("Service") at openplanning.io.

The planning records discoverable on OpenPlanning come from public municipal sources (agendas, staff reports, minutes, code books). Those records are not personal information about you, they are records of municipal government activity. This policy covers only information we collect about you, not the public records we surface.

1. Information we collect

Information you provide

• Account information. Email address (and optional name) when you sign up. Authentication is handled by WorkOS AuthKit; we never see or store your password.
• Digest preference. The single municipality you select to receive the Monthly Happenings digest about.
• Communications. Anything you tell us through the contact form or by email.

Information collected automatically

• Usage data. Search queries, pages viewed, and similar interaction telemetry used to operate and improve the Service.
• Device information. Browser type, operating system, and IP address.
• Log data. Access times, request paths, and error logs.
• Cookies. Session cookies for authentication; Google Analytics cookies for aggregate usage measurement.
• Rate limit counters. Search request counts keyed by user id (authenticated) or IP address (anonymous), used solely to enforce per-tier rate limits.

2. How we use your information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Send the Monthly Happenings digest for the municipality you selected, if any.
• Enforce per-tier rate limits and prevent abuse.
• Send technical notices, security updates, and support replies.
• Monitor usage trends and diagnose problems.
• Comply with legal obligations.

3. Information sharing

We do not sell your personal information. We share information only with:

• Service providers acting on our behalf (see "Third-party services" below).
• Legal or governmental authorities when required by law, subpoena, or to protect rights and safety.
• Other parties only with your explicit consent.
• An acquiring entity in connection with a merger or acquisition.

4. Data retention

We retain your account information while your account is active. Search query logs are retained for a limited period for operational and security purposes. You can request deletion of your account and associated personal information at any time by emailing the address below.

The public planning records surfaced on OpenPlanning are part of the public record and are retained as part of the Service. They are not personal information about you and are not affected by an account deletion request.

5. Data security

We use industry-standard technical and organizational measures to protect information, including encryption in transit, access controls on our infrastructure, and regular review of our dependencies and configurations. No method of transmission or storage is 100% secure.

6. Your rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and associated personal information.
• Export your data in a portable format.
• Opt out of certain data processing.

Email [email protected] to exercise any of these rights.

7. Cookies

We use essential cookies for authentication and session management, and Google Analytics cookies to understand aggregate usage. You can control cookie behavior through your browser settings; disabling essential cookies will prevent sign-in.

8. Third-party services

OpenPlanning relies on the following third-party services:

• WorkOS (AuthKit). Identity and authentication.
• Google Analytics. Aggregate usage analytics.
• Render. Application hosting.
• Cloudflare R2. Document object storage (public records only).

Each of these providers operates under its own privacy policy.

9. Children's privacy

OpenPlanning is not intended for users under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

10. International data transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. Where required, we put appropriate safeguards in place for such transfers.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Last updated" date. Material changes will be communicated to users with active accounts.

12. Contact us

Turbolytics LLC
Email: [email protected]