Privacy policy
Effective November 10, 2026. This policy covers Woodpecker, operated by Redstone Castle LLC.
What we collect
Your name, email and phone; your building's address; owner, officer and managing agent details you give us; numbers you give us for the bed bug report; files you upload; and payment details, which Stripe handles and we never see in full.
Why
To prepare, mail and track your filings, to contact you about them, and to bill your plan.
Who processes it for us
Stripe (payments), Supabase (database and file storage), Resend (email), PostGrid (printing and mailing) and Vercel (hosting, and page-view counts without cookies, never on private pages). For advertising measurement only, and only on our public pages: Google (Google Ads), Microsoft (Microsoft Advertising and Microsoft Clarity) and OpenAI (ChatGPT ads), as described below. We do not sell your information.
Cookies and tracking
The site itself needs no cookies to work. Our public pages (the home page, pricing, guides, the building check and the payment confirmation) can load three advertising and analytics tags:
- Google Ads tag: counts whether a visit that started from one of our Google ads ended in a paid plan, and lets Google show our ad again to people who visited. Google sets its own cookies for this.
- Microsoft Advertising tag: the same for our ads on Bing. Microsoft sets its own cookies.
- Microsoft Clarity: records how pages are used (clicks, scrolling, where a page is left) so we can fix what confuses people. Text on the page is masked, nothing typed into a form is recorded, and it never runs on your private status pages.
If you reach us from an ad in ChatGPT, the link carries a click reference. We keep that reference in your browser for 30 days and, if you buy a plan, store it with your order and report the order to OpenAI so the ad is counted. No name, email or other detail goes with it. The tags send Google and Microsoft only the page address with everything but ad parameters removed, never a private link, a building code or a Stripe session.
None of these tags load on your private status pages, your building details form, the operator console or for anyone who turns them off below.
Your privacy choices
If your browser sends a Global Privacy Control signal, the tags stay off without any step from you. We treat that signal, and the button above, as an opt-out of the "sharing" of personal information for advertising under California law. We do not sell personal information.
Public records
Building facts on our site come from NYC Open Data, which the city publishes.
Your information
Email support@woodpecker.help to see, correct or delete your information, subject to records we must keep. We keep order and filing records for as long as your plan is active and for the time New York tax and business law requires after that.
Changes
If this policy changes, the date at the top changes with it, and a change that affects how we use your information is announced by email to current customers.