A practical privacy posture
We collect the minimum data required to run the service. We do not sell data, run advertising networks, or participate in behavioral tracking infrastructure.
1. Overview
Risk Before Buy ("Platform", "we", "us") is committed to handling your personal information responsibly and transparently. This Privacy Policy explains what data we collect, how we use it, and the rights you have over it. The Platform is operated by Open Data Collective.
2. What We Collect
We collect three categories of data: (a) Address queries — when you search an address, we log the address string and associated IP hash for rate limiting and caching. We do not link address queries to personal identity without consent. (b) Email addresses — when you voluntarily provide your email to unlock additional free lookups or receive a paid report, we store your email address and the context in which it was provided. (c) Payment data — Stripe processes all payments. We do not store credit card numbers. We receive a Stripe session ID, customer email, and order amount from Stripe's secure webhooks.
3. Lookup Caching
To improve performance and reduce redundant API calls to federal sources, we cache lookup results for a period of 30 days. Cached results are keyed to a hash of the normalized address string — not to any personal identifier. Cached records expire automatically and are not used for any purpose other than serving repeated lookups for the same address.
4. How We Use Email Addresses
Email addresses are used exclusively for: (a) delivering paid PDF reports to the address provided at checkout; (b) transactional order confirmations; (c) opt-in product update communications, from which you can unsubscribe at any time. We do not sell, rent, trade, or broker email addresses to any third party. We do not transmit email addresses to insurance carriers, real estate platforms, or data brokers.
5. Third-Party Services
We use a limited set of third-party services to operate the Platform: Stripe (payment processing), Supabase (database hosting), Vercel (infrastructure), and Resend (transactional email delivery). Each of these providers processes data under their own privacy policies and applicable data protection agreements. We do not use third-party advertising networks or behavioral tracking tools.
7. Your Rights
You have the right to request access to, correction of, or deletion of any personal data we hold about you. To exercise these rights, email privacy@riskbeforebuy.com with "Privacy Request" in the subject line. We will respond within 30 days. California residents have additional rights under CCPA. EU/UK residents have rights under GDPR. Please contact us for jurisdiction-specific requests.
8. Data Retention
We retain order records for 7 years for accounting and legal compliance purposes. Email addresses from lead capture are retained indefinitely unless you request deletion. Lookup cache records expire after 30 days. Payment records are retained by Stripe under their own data retention policies.
9. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be announced on the Platform. The current version was last updated in 2024.