Data Collected: Address (string), email; IP address, user agent, and access metadata for logging and security.
Purpose of Processing: Generating and emailing reports; analytics and service improvement.
Third‑Party Sharing: Address/geocode shared with Google Places API; data sent to FEMA/OpenFEMA/NOAA and OpenAI via their public APIs; email sent via mail service.
Data Retention: Logs stored up to 90 days; addresses and emails deleted immediately after successful report delivery, unless otherwise required for support.
User Rights: Access, correction, deletion of personal data; objection to processing (e.g., marketing emails).
Security: HTTPS/TLS used; API keys stored in environment variables only.