Your privacy, plainly stated
IV Locator is a business directory. Browsing needs no account, and the only form on the site is the business listing request. Here's exactly what we do and don't do with your data.
Encrypted in transit
All traffic uses HTTPS (TLS 1.3). Every connection to this site is encrypted end-to-end.
Encrypted at rest
Listing and inquiry data is stored in Supabase, AES-256 encrypted at rest.
Business details only
Our one form collects business contact details. It has no fields for personal records.
What we collect
When you browse
- Anonymous page views via Cloudflare Web Analytics (no cookies, no cross-site tracking)
- Session analytics via Microsoft Clarity (session recordings and heatmaps, sets cookies) only if you accept analytics in the cookie banner. Until you accept, Clarity does not load. You can change your choice any time with "Cookie preferences" in the footer, and declining stops Clarity and deletes its cookies on our site. Microsoft's own cookie on clarity.ms expires on Microsoft's schedule and we cannot remove it.
- Product analytics via PostHog (page views, clicks on business phone, website and booking links, form submissions; session recordings with form inputs masked, sets cookies) only if you accept analytics. Until you accept, PostHog is not loaded and no request is made to it. Declining or changing your choice in "Cookie preferences" stops capture and resets its identifier.
- We do not use Google Analytics or Facebook Pixel
- No personal information is collected just for browsing listings
If you request a business listing
The listing request form on the list your business page collects:
- Business name, city and state, phone number and website
- Your name and email, so we can reply about the listing (not displayed publicly)
- The listing tier you are interested in, and an optional free-text note
- Payment details via Stripe for featured listings; we never see or store card numbers
Business name, location, phone, website and booking details are displayed publicly on the listing. Please do not put personal details about other people in the free-text note.
Infrastructure
IV Locator is hosted on Cloudflare Pages with Cloudflare's WAF and DDoS protection active. Listing data is stored in Supabase (SOC 2 Type II certified, US-hosted PostgreSQL, encrypted at rest and in transit).
Payments
Featured listings are billed via Stripe (PCI DSS Level 1 certified). We receive a payment confirmation token; your card details never touch our servers.
Who can see your data
- IV Locator team: for support and operations only
- Supabase and Cloudflare: infrastructure, bound by their own DPAs
- Stripe: payment processing only
- No one else: we do not sell data or run retargeting
Your rights
- Access: what data we have about you
- Deletion: delete your account and associated data
- Correction: fix inaccurate information
- Opt-out: stop receiving emails from us at any time
Email us at [email protected]. We respond within 5 business days.
Questions?
Contact: [email protected]
Last updated: October 2026