Privacy
Three sections: what we collect, who gets it, how long we keep it. Every row says why the item is unavoidable. Checking a valuation needs no account. A search does leave two records, and the first row below says what they are.
What we collect
| Data | When | Why it is unavoidable |
|---|---|---|
| Address / AIN | When you search | To locate the parcel. No account needed. A search is recorded in two places. To stop bulk scraping, we keep for 7 days a record of which searches each browser session, device or IP address has made; both the search and that identifier are stored as salted one-way hashes rather than as readable text, and the record is not tied to your name. Separately, like most web servers, ours writes a request log: your IP address, the time, and the address of the page requested, which for a lookup includes the street or parcel number. |
| Name, email, phone, mailing address | When you sign up | Required fields on RP-87 and AAB-100; the county uses them to send you the decision. |
| Signature image, time of signing, IP address, browser fingerprint | When you sign the authorization | §17537.9(e) requires us to keep the original authorization for three years and produce it for inspection. |
| Evidence files you upload | When you upload them | To assemble the evidence packet. |
Who it goes to
- Los Angeles County. The application and a copy of your authorization have to go to the Office of the Assessor and the Assessment Appeals Board. That is the entire point of the service.
- Lawful demand. Under §17537.9(e), we must produce the original authorization for inspection and copying within 24 hours, without a warrant, to law enforcement, the Attorney General, a district attorney, or a city attorney. That is what the statute says, and we would rather you hear it from us. (Required disclosures)
- No one else. We do not sell your data, rent it, or share it for advertising.
How long we keep it
- Original authorization and signature: at least 3 years, required by law, and not deletable during that period.
- Case files: 4 years after the case closes, matching the longest authorization term. After that we will delete them on request.
- Searches: the hashed anti-scraping record described above is kept for 7 days and then dropped. The web server's request log is a separate record and is not covered by that 7-day limit.
Your rights
California residents have rights to know, access, correct, delete, and limit under the CCPA/CPRA. One exception: an original authorization we are required by law to retain cannot be deleted during the retention period. To exercise a right, write to Not provided.
Cookies
Two cookies, both our own. A session cookie (p8) remembers how far you've gotten in a multi-step flow and which case you're signed in to. If you create an account, a sign-in cookie (p8s) keeps you signed in until you sign out or it expires. No ad tracking, no third-party analytics scripts.
Security
Case files sit on the server's own disk, not in public object storage. Signature originals, generated authorization PDFs, and files you upload are kept in separate directories.
Last updated 2026-10-04 · Questions to Not provided