Ground Control by PorchRocket

Your workspace.
Your information.

Effective on release of the revised pricing. This notice describes information handled by the Ground Control product at porchrocket.com/groundcontrol.

What we collect.

We collect your verified email, a password hash if you choose a password, account sessions, workspace membership, selected territory and targeting, quotes, saved drafts, orders, and credit records. A suppression upload contains addresses you ask us to exclude. Layout requests contain your instructions and header templates. Data reviews contain your notes and any evidence you choose to provide.

Optional completion texts use your phone number, recorded consent wording and time, verification state, and delivery status. Product events track steps such as order placement, list delivery, downloads, layout requests, reviews, and credit changes. Those events do not contain exported homeowner records, passwords, or verification codes.

Why we use it.

We use account information to authenticate you, apply workspace permissions, maintain your requests and credit, deliver purchased files, process support and quality reviews, and send requested transactional notifications. Uploaded exclusions prevent existing customers from being delivered within the chosen request. Prior deliveries are deduplicated within the selected workspace.

Separate product accounts.

Ground Control has a dedicated database and session cookie. It does not use your existing PorchRocket customer login, account balance, or customer workspace. Ground Control team access is defined within its own workspaces.

Storage and service providers.

Cloudflare hosts the application, database, and transactional email service. When enabled, a text-message provider handles verification and the optional completion alert. Transactional message content is encrypted while awaiting dispatch. Passwords are hashed on the server; verification codes expire and have limited attempts. Ground Control never stores payment-card details. Invoices and card payments are handled by our payment provider.

Optional marketing and feature requests.

Ground Control marketing email uses Resend and leaves from a separate marketing address. New accounts are told at sign-in that they will get a short series of onboarding emails in the first week, followed by a saved-checkout reminder, a note after a delivered order, and an occasional tip; each is sent at most once and stops when you progress or unsubscribe. Existing PorchRocket customer lists are not imported. You can unsubscribe from any campaign or change your preference in Settings. Delivery failures, complaints, and opt-outs are retained to prevent unwanted sends. Changing your account email resets marketing consent.

A feature request stores your message, category, and page context. If you request a follow-up, we also store your contact email. Feedback never changes an order or subscribes you to marketing.

Understanding the product experience.

We use Microsoft Clarity on discovery pages, signed-in ZIP and criteria selection, order workspaces, order status, monthly-order management, and help forms. Customer text, form entries, property records, and images are masked; selected fixed action labels remain readable. We send selected interaction names without customer or property details. Clarity does not load on signup, sign-in, checkout, credit purchasing, billing, file downloads, account settings, or staff screens. We respect Do Not Track and Global Privacy Control by not loading Clarity.

Analytics storage is off until you turn it on with Analytics preference in the footer. Advertising measurement follows a regional default: for visitors in the United States it is on until they opt out on Your privacy choices or in the footer, and everywhere else it is off until they turn it on. With advertising measurement enabled, Meta receives public-page events and confirmed checkout, first funding and first delivery events to measure and improve our ads. We share hashed email and account identifiers, ad click/browser identifiers, and request IP address and browser information. We do not share property lists, uploaded files, roof addresses, passwords, authentication codes or support messages. Ground Control stores encrypted matching data and campaign attribution for up to 90 days. You can withdraw permission in the footer; this stops future sharing. Global Privacy Control and Do Not Track disable optional advertising measurement. Microsoft may process cookieless interaction and device information on eligible pages while analytics storage is denied. Learn about Microsoft’s privacy practices.

Your privacy choices.

Visitors in the United States can opt out of the sharing of personal information for cross-context behavioral advertising at any time on Your privacy choices; outside the United States, advertising measurement stays off until you turn it on. We honor Global Privacy Control signals as an opt-out. Opting out stops browser-pixel sharing and server-side conversion events; it does not affect sign-in, orders, or delivery emails. PorchRocket collects and sells personal data as a data broker. Texas residents can read how to exercise their rights under Your privacy choices.

Cookies and local drafts.

A necessary, HttpOnly session cookie scoped to /groundcontrol keeps you signed in. The builder saves selected geography, criteria, and draft references on this device. Authentication codes and passwords are not stored in those drafts. You can clear local browser storage to remove them. Disabling browser storage does not prevent working in the current page.

City and ZIP lookup uses GeoNames postal-code data, adapted for this product under the Creative Commons Attribution license. The builder uses USGS hybrid map tiles and U.S. Census ZIP Code Tabulation Area outlines for geographic orientation. Some ZIPs have only a representative center. These are not property inventory or exact postal-delivery boundaries. The landing illustration remains conceptual.

Retention and access.

Purchased files, original versions, credit history, and review decisions are retained to support your workspace and account reconciliation. Authentication challenges and expired sessions are cleaned up. Ask Ground Control about accessing, correcting, or deleting your account information. Any records necessary to reconcile an accepted order or payment must be considered when handling an account request.

Communication preferences.

Email verification and order notifications support the service you request. Optional completion texts are separate from marketing. Reply STOP to opt out of texts; email and downloads continue. An inquiry or file download does not silently authorize a recurring search or marketing program.

Contact.

Use our inquiry form for privacy or account questions.