Privacy Policy
Effective May 15, 2026 · Last updated May 15, 2026
Plain-English summary (not a substitute for the policy below)
We collect what you give us (account details, your property address, any photos or voice notes you upload) and what your browser tells us (IP, basic device info, page interactions). We use it to run the analysis, generate your protest packet, charge you if you choose a paid option, improve the product, and stay secure. We share data with the third-party services listed below (Vercel, Supabase, Clerk, Stripe, OpenAI/Anthropic, Mapbox). We do not sell your personal information. You can ask us for a copy of your data or to delete it.
1. Introduction & scope
This Privacy Policy explains how Big Red Value LLC(“we,” “us,” or “our”) collects, uses, shares, and protects information about you when you visit bigredvalue.com or use our software, content, and services (collectively, the “Service”). This policy applies to information about visitors, registered users, and individuals whose property records are looked up through the Service.
Your use of the Service is also governed by our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms.
2. Information we collect
2.1 Information you provide directly
- Account information: name, email address, and authentication credentials when you create an account via our authentication provider.
- Property information:the property address or parcel number you enter, and any answers you provide about the property’s condition, features, or history.
- User Content: photographs, voice recordings, transcripts of voice recordings, written notes, and any documents you upload to support your protest. Photographs may include metadata (such as GPS coordinates) embedded by your device; you can strip this metadata before upload if you prefer.
- Payment information: if you select the $149 flat option or are invoiced for a contingency fee, you provide payment information (cardholder name, billing address, payment method). Full card numbers are submitted directly to our payment processor and are not stored on our servers.
- Communications: messages you send us via email or support channels.
2.2 Information collected automatically
- Device & usage data: IP address, browser type and version, operating system, device identifiers, referring URLs, pages viewed, links clicked, time spent, and similar interaction telemetry.
- Cookies & similar technologies: see Section 8.
- Approximate location: derived from your IP address. We do not collect precise geolocation from your device unless you explicitly grant it (for example, to autofill your property address).
2.3 Information from third parties & public records
- Douglas County public records: we retrieve publicly published assessor records (assessed value, square footage, year built, sale history, ownership, parcel characteristics) for properties you look up.
- Sales data: we use historical Douglas County sales records and MLS-derived comparable-sales data to generate analyses. This data is not personally identifiable to a visitor unless that visitor enters a property they own and that property appears in the dataset.
- Authentication and payment providers: we receive identifiers and verification data from Clerk and Stripe in connection with account creation and payment.
3. How we use information
We use information to:
- Provide the Service, including running the analysis, generating the protest packet, and delivering output to you;
- Calculate and process fees under your selected pricing option;
- Authenticate your account and prevent unauthorized access;
- Communicate with you about your protest, account, or fees;
- Improve the Service and train and evaluate our models on historical, aggregated, and de-identified outcomes (see Section 3.1);
- Maintain security, detect fraud, and enforce our Terms;
- Comply with applicable law and respond to lawful requests.
3.1 Use of data for model improvement
We may use historical protest outcomes, comparable-sales data, and de-identified property and evidence data to evaluate and improve our statistical models and the quality of generated packets. Where we use User Content for this purpose, we either aggregate it or remove direct identifiers (such as your name and email) before incorporating it into evaluation or training datasets. We do not use your personal contact information to train models.
3.2 Automated decision-making
The Service produces automated estimates (success probability, expected reduction, case-strength score, recommended-for-filing flag). These estimates are informational and do not produce legal or similarly significant effects on you without human review — you decide whether to proceed, file, or pay. As described in our Terms of Service, these estimates are not guarantees of outcome.
4. When we share information
We share information only as described below:
- Sub-processors: with the vendors listed in Section 5, under contractual obligations to use the information only to provide services to us.
- As you direct: when you ask us to generate, transmit, or share a packet or document on your behalf.
- Compliance & protection: when we believe in good faith that disclosure is required by law, legal process, or governmental request, or is necessary to protect our rights, property, safety, or that of our users or the public.
- Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case the acquirer will be bound by terms at least as protective as this policy.
- With your consent: for any purpose disclosed at the time you provide your consent.
5. Sub-processors
We use the following third-party service providers to operate the Service. Each is bound by contractual data-protection obligations. We update this list when it changes materially.
Vercel, Inc.
Hosting and content delivery for the website and application
Data: IP address, request logs, performance telemetry
Supabase, Inc.
Application database and storage (property data, generated packets, photos)
Data: Account identifier, property data, photos, voice recordings, generated documents
Clerk, Inc.
Account creation, authentication, and session management
Data: Email address, name (if provided), authentication identifiers, IP address
Stripe, Inc.
Payment processing for the $149 flat option and contingency invoicing
Data: Name, billing address, partial card details and tokens (Stripe handles full card data directly)
OpenAI, L.L.C.
Language-model generation of narrative drafts and evidence analysis
Data: Property descriptions, comparable analyses, transcribed voice notes (no direct identifiers sent where avoidable)
Anthropic, PBC
Language-model generation for narrative drafts and reasoning
Data: Property descriptions, comparable analyses, transcribed voice notes (no direct identifiers sent where avoidable)
Mapbox, Inc.
Map rendering and geospatial visualization
Data: IP address, approximate location, map interaction telemetry
6. We do not sell your personal information
We do not sell your personal information for money, and we do not “share” your personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA). If this changes, we will update this policy and provide the required notice and opt-out mechanism.
7. Cookies & analytics
We and our sub-processors use cookies, local storage (including IndexedDB for offline support), and similar technologies to: (a) keep you signed in and remember your preferences; (b) measure how the Service is used so we can improve it; (c) detect and prevent fraud and abuse. You can control cookies through your browser settings; if you disable cookies, parts of the Service may not function correctly. [VERIFY] If you adopt a third-party analytics or advertising provider (Google Analytics, PostHog, Plausible, ad pixels, etc.), list each here and provide an opt-out path.
8. Data retention
We retain account information and protest data for as long as your account is active and for a reasonable period thereafter to support recordkeeping, dispute resolution, fee invoicing, regulatory compliance, and model quality evaluation. Photographs and voice recordings tied to a closed protest are retained no longer than necessary for those purposes. You may request deletion of your account and associated data at any time (see Section 10), subject to legitimate retention requirements (such as records of completed transactions for tax and accounting purposes).
9. Security
We implement administrative, technical, and physical safeguards designed to protect the information we hold, including encryption in transit, encryption at rest for sensitive fields, access controls, and least-privilege principles. The offline-first portion of the Service stores in-progress evidence locally on your device in encrypted browser storage until it syncs. No method of transmission or storage is 100% secure, and we cannot guarantee the absolute security of your information.
10. Your rights & choices
Depending on where you live, you may have the right to:
- Request access to the personal information we hold about you;
- Request correction of inaccurate or incomplete information;
- Request deletion of your personal information, subject to legitimate retention requirements;
- Request export of your data in a portable format;
- Object to or restrict certain processing of your data;
- Withdraw consent where processing is based on consent.
To exercise any of these rights, email us at hello@bigredvalue.com. We may need to verify your identity before fulfilling certain requests. We will not discriminate against you for exercising your rights.
10.1 How to request deletion of your data
To delete your account and the personal information associated with it, email hello@bigredvalue.com from the email address on your account with the subject line “Data deletion request” and include the parcel number(s) of any properties you have looked up through the Service. We will confirm receipt within five (5) business days and complete deletion within thirty (30) days, except for records we are legally required to retain (such as completed-transaction records for tax and accounting purposes). Once deletion is complete, your account, in-progress flow sessions, evidence photos, voice recordings, transcripts, generated narratives, and any generated packets stored server-side will be removed. Aggregated or de-identified data that no longer identifies you may be retained for model evaluation as described in Section 3.1.
If you only want to delete a specific item (a single photo, a single property session, a single packet), describe it in your request and we will scope the deletion accordingly. No account is required to make a deletion request — if you used the Service anonymously, send us the parcel number you looked up and the approximate date so we can locate and delete any server-side records tied to that lookup.
11. State-specific rights
California residents (CCPA/CPRA): you have the rights described in Section 10, plus the right to know the categories and specific pieces of personal information we have collected, the sources, the business purposes for collection, and the categories of third parties with whom we share information (all described in this policy). We do not sell or “share” personal information for cross-context behavioral advertising.
Other U.S. states (CO, CT, VA, UT, OR, TX, MT, and others): residents of states with comprehensive privacy laws may have similar rights of access, correction, deletion, portability, and (where applicable) opt-out of targeted advertising or profiling. Contact us using the address in Section 14 to exercise these rights.
12. Children
The Service is intended for adults (18+) who own or are authorized to act on behalf of the owner of a Douglas County, Nebraska property. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, contact us and we will take appropriate steps to delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice (such as an in-product notice or an email). Your continued use of the Service after the effective date of an updated policy constitutes your acceptance of the updated policy.
14. Contact
Questions about this Privacy Policy or your information? Contact us at hello@bigredvalue.com.