Privacy Policy

The Short Version

We collect only what we need to generate your report and deliver it. We don't sell your personal information. We share data with a small number of service providers (payment processing, email delivery, and in some cases a licensed insurance broker) that help us operate. That's it.

What We Collect

When you purchase a Risk Ready Report, we collect:

• Your name and email address — so we can deliver your report and contact you if there's an issue.
• Property address — the subject of your report. This is the address we run through our risk analysis.
• Payment information — processed securely by Stripe. We never see or store your full card number. Stripe handles all payment data under their own PCI-compliant privacy policy.

We also collect standard server logs (IP address, browser type, pages visited) when you use our website. We use this for security, troubleshooting, and basic analytics.

What We Don't Collect

We don't collect Social Security numbers, dates of birth, or financial account details beyond what Stripe processes for payment. We don't use tracking cookies for advertising. We don't build behavioral profiles.

How We Use Your Information

We use your information to:

• Generate and deliver your Risk Ready Report
• Process your payment
• Communicate with you about your order (delivery confirmation, refund requests, error notifications)
• Improve our reports and services
• Comply with legal obligations

Who We Share Data With

We share your information only with these categories of service providers, and only to the extent necessary:

Stripe — Our payment processor. Stripe receives your payment details to process your transaction. Stripe's privacy policy governs their handling of your payment data.

Resend — Our email delivery service. Resend receives your email address to deliver your report and order confirmations.

Partner insurance broker — For reports that include a CLUE (Comprehensive Loss Underwriting Exchange) claims history check, we may share the property address with a licensed insurance broker who has authorized access to CLUE data. This broker uses the address solely to retrieve claims history for your report. They do not use it for marketing or solicitation.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

How Long We Keep Your Data

We retain your name, email, property address, and report data for two years from the date of purchase. This allows us to handle refund requests, re-deliver reports if needed, and respond to questions about past reports. Payment records are retained as required by tax and accounting regulations.

After the retention period, personal information is deleted or anonymized.

How We Protect Your Data

We use industry-standard security measures including HTTPS encryption for all web traffic, encrypted data storage, and access controls that limit who on our team can view customer data. Payment processing is handled entirely by Stripe's PCI-compliant infrastructure.

Your Rights

You can request at any time:

• A copy of the personal information we hold about you
• Correction of inaccurate information
• Deletion of your personal information (subject to legal retention requirements)

Email reports@riskmeridian.io with your request. We'll respond within 30 days.

California Residents (CCPA/CPRA)

If you're a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to Know — You can request the categories and specific pieces of personal information we've collected about you, the sources of that information, our business purpose for collecting it, and the categories of third parties we've shared it with.
• Right to Delete — You can request deletion of your personal information, subject to certain exceptions (e.g., completing your transaction, legal compliance).
• Right to Correct — You can request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing — We do not sell or share your personal information for cross-context behavioral advertising, so there is nothing to opt out of. But if this changes, we'll provide a "Do Not Sell or Share My Personal Information" link on our website.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, email reports@riskmeridian.io with the subject line "California Privacy Request." We'll verify your identity using the email address associated with your purchase and respond within 45 days.

You may also designate an authorized agent to make a request on your behalf. We may require proof of authorization.

Children's Privacy

Our services are not directed at anyone under 18. We do not knowingly collect personal information from minors. If you believe we've inadvertently collected information from a minor, contact us and we'll delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date. We encourage you to review this page periodically.

Contact

Privacy questions or requests? Email reports@riskmeridian.io.