Privacy Policy
Last updated: February 28, 2026 | Effective: February 28, 2026
RiskBeforeBuy ("we," "us," or "our") is a product of Smart Technology Investments LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit riskbeforebuy.smarttechinvest.com (the "Site") or use our risk intelligence services. Please read this carefully. If you do not agree with its terms, please do not access the Site.
1. Information We Collect
Information you provide directly:
- Email address (if you sign up or contact us)
- ZIP codes or addresses you query
- Payment information (processed by our payment processor; we do not store card numbers)
- Communications you send us
Information collected automatically:
- IP address and approximate geolocation (country/region level)
- Browser type, operating system, device type
- Pages visited, time on page, referring URL
- ZIP codes queried (anonymized after 90 days)
2. How We Use Your Information
- To deliver the risk intelligence services you request
- To process payments and manage your account
- To send transactional emails (receipts, reports, account notices)
- To send product updates and marketing communications (with your consent; you may opt out at any time)
- To analyze usage patterns and improve the product
- To detect and prevent fraud or abuse
- To comply with legal obligations
3. Data Sources We Use
Our risk models are built on federal and publicly available datasets including FEMA, USGS, NOAA, USFS, FBI UCR, and U.S. Census Bureau data. We do not collect personal data about individual property owners. All location queries are matched to census tract aggregates, not individual parcels or individuals.
4. Cookies and Tracking Technologies
We use essential cookies necessary for the Site to function. With your consent, we also use analytics cookies (Vercel Analytics) to understand how visitors use the Site. You may reject non-essential cookies via our cookie banner.
5. Third-Party Services
- Cloudflare -- CDN, DDoS protection, Workers API hosting, and D1 database
- Stripe -- Payment processing (PCI-DSS compliant)
- Vercel -- Hosts and delivers our web application
These services have their own privacy policies. We have data processing agreements in place where required.
6. Data Retention
- Account data: retained for the life of your account plus 2 years
- Query logs: anonymized after 90 days
- Payment records: retained as required by law (typically 7 years)
- Marketing consent records: retained until opt-out or account deletion
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to processing or withdraw consent
- Data portability
- Lodge a complaint with a supervisory authority (EU/UK users)
To exercise any of these rights, email us at privacy@smarttechinvest.com. We will respond within 30 days.
8. California Privacy Rights (CCPA / CPRA)
California residents have specific rights under the California Consumer Privacy Act. We do not sell or share personal information with third parties for their direct marketing purposes. To submit a CCPA request, email privacy@smarttechinvest.com with "CCPA Request" in the subject line. See also our Do Not Sell My Info page.
9. Data Security
We implement industry-standard technical and organizational measures to protect your data, including TLS encryption in transit, encrypted storage at rest, access controls, and regular security reviews. No system is perfectly secure; we will notify you of any breach as required by applicable law.
10. Children's Privacy
The Site is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will promptly delete it.
11. International Transfers
Our services are operated from the United States. If you access the Site from outside the U.S., your information may be transferred to and processed in the U.S. We rely on Standard Contractual Clauses for transfers from the EEA/UK.
12. Changes to This Policy
We may update this policy periodically. We will post the revised policy with an updated "Last updated" date. For material changes, we will provide additional notice (e.g., email or prominent Site notice). Continued use after changes constitutes acceptance.
13. Contact Us
Smart Technology Investments LLC
Email: privacy@smarttechinvest.com
Website: riskbeforebuy.smarttechinvest.com