Privacy Policy

1. Introduction & scope

This Privacy Policy explains how Big Red Value LLC(“we,” “us,” or “our”) collects, uses, shares, and protects information about you when you visit bigredvalue.com or use our software, content, and services (collectively, the “Service”). This policy applies to information about visitors, registered users, and individuals whose property records are looked up through the Service.

Your use of the Service is also governed by our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms.

2. Information we collect

2.1 Information you provide directly

• Account information: name, email address, and authentication credentials when you create an account via our authentication provider.
• Property information:the property address or parcel number you enter, and any answers you provide about the property’s condition, features, or history.
• User Content: photographs, voice recordings, transcripts of voice recordings, written notes, and any documents you upload to support your protest. Photographs may include metadata (such as GPS coordinates) embedded by your device; you can strip this metadata before upload if you prefer.
• Payment information: if you select the $149 flat option or are invoiced for a contingency fee, you provide payment information (cardholder name, billing address, payment method). Full card numbers are submitted directly to our payment processor and are not stored on our servers.
• Communications: messages you send us via email or support channels.

2.2 Information collected automatically

• Device & usage data: IP address, browser type and version, operating system, device identifiers, referring URLs, pages viewed, links clicked, time spent, and similar interaction telemetry.
• Cookies & similar technologies: see Section 8.
• Approximate location: derived from your IP address. We do not collect precise geolocation from your device unless you explicitly grant it (for example, to autofill your property address).

2.3 Information from third parties & public records

• Douglas County public records: we retrieve publicly published assessor records (assessed value, square footage, year built, sale history, ownership, parcel characteristics) for properties you look up.
• Sales data: we use historical Douglas County sales records and MLS-derived comparable-sales data to generate analyses. This data is not personally identifiable to a visitor unless that visitor enters a property they own and that property appears in the dataset.
• Authentication and payment providers: we receive identifiers and verification data from Clerk and Stripe in connection with account creation and payment.

2a. Referral & affiliate program data

If you participate in the Big Red Value LLC referral or affiliate program (see Terms of Service § 8a), we collect and process the following additional categories of information.

2a.1 Program account data

• Your referral code (a six-character identifier we generate), the date it was issued, and which of your packets it is linked to.
• Reward and milestone records: the dollar amount, payout method, and status of each reward you earn, plus an audit record of the referee whose payment triggered each tier.
• Future-year credit balances tied to your account, intended for redemption against a future protest packet.
• For affiliates only: your Stripe Connect Express account identifier, the display label you provided, and per-year sums of commissions paid to support IRS Form 1099-NEC reporting. Stripe collects and holds the underlying identity, banking, and tax-form data directly under its own terms.

2a.2 Referral attribution data

When a visitor arrives at the Service with a referral code in the URL (the ?n=CODE or ?a=CODE query parameter), we set an HttpOnly cookie named bigredvalue_referral on their browser that stores the validated code for up to 90 days. If the visitor later checks out for a protest packet, the cookie’s value is recorded on the resulting packet record as the referring code. The cookie is overwritten if the visitor later arrives with a different code (most-recent-attribution wins).

We also capture a PostHog product-analytics event named referral_code_attributed with the validated code, the attribution source (neighbor or affiliate), and the code type, so we can measure program effectiveness.

2a.3 Fraud-detection metadata

To detect self-funded or collusive referrals, we periodically compare referrer-referee pairs against the following identifiers attached to each packet:

• The street address of the protested property (from public records).
• The Stripe customer identifier associated with the payment.
• The Stripe payment-method identifier associated with the payment.

Matches are flagged for review by our operations team and may result in the affected code being suspended or a reward being held, reversed, or denied. We retain the audit trail of these checks for the duration of the program cycle plus a reasonable period for dispute resolution.

2a.4 What referrers see about referees

The referrer dashboard shows the count of paid referrals tied to a code and, for each referral, the street name (not the house number) of the referred property along with a status indicator (such as “filed” or “pending BOE outcome”). The referee’s name, email address, account identifier, exact address, and payment information are never disclosed to the referrer.

2a.5 What referees see about referrers

When a visitor arrives with a valid referral cookie set, a banner on the landing page displays a generic, factual statement that other homeowners in their area are filing protests. The referrer’s identity, name, address, and account information are not disclosed to the referee.

2a.6 Program emails

If you have a referral code, we may send you transactional emails about the program: a notice when your code is issued, a notice when each reward tier is earned, and (during the active protest window) up to two reminder emails encouraging additional referrals. These are transactional messages tied to your account; standard unsubscribe-from-marketing controls do not apply to them. You may opt out of further program emails by replying to any such email or by emailing hello@bigredvalue.com; opting out does not affect your account or any rewards already earned.

3. How we use information

We use information to:

• Provide the Service, including running the analysis, generating the protest packet, and delivering output to you;
• Calculate and process fees under your selected pricing option;
• Authenticate your account and prevent unauthorized access;
• Communicate with you about your protest, account, or fees;
• Improve the Service and train and evaluate our models on historical, aggregated, and de-identified outcomes (see Section 3.1);
• Maintain security, detect fraud, and enforce our Terms;
• Comply with applicable law and respond to lawful requests.

3.1 Use of data for model improvement

We may use historical protest outcomes, comparable-sales data, and de-identified property and evidence data to evaluate and improve our statistical models and the quality of generated packets. Where we use User Content for this purpose, we either aggregate it or remove direct identifiers (such as your name and email) before incorporating it into evaluation or training datasets. We do not use your personal contact information to train models.

3.2 Automated decision-making

The Service produces automated estimates (success probability, expected reduction, case-strength score, recommended-for-filing flag). These estimates are informational and do not produce legal or similarly significant effects on you without human review — you decide whether to proceed, file, or pay. As described in our Terms of Service, these estimates are not guarantees of outcome.

4. When we share information

We share information only as described below:

• Sub-processors: with the vendors listed in Section 5, under contractual obligations to use the information only to provide services to us.
• As you direct: when you ask us to generate, transmit, or share a packet or document on your behalf.
• Compliance & protection: when we believe in good faith that disclosure is required by law, legal process, or governmental request, or is necessary to protect our rights, property, safety, or that of our users or the public.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case the acquirer will be bound by terms at least as protective as this policy.
• With your consent: for any purpose disclosed at the time you provide your consent.

5. Sub-processors

We use the following third-party service providers to operate the Service. Each is bound by contractual data-protection obligations. We update this list when it changes materially.

6. We do not sell your personal information

We do not sell your personal information for money, and we do not “share” your personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA). If this changes, we will update this policy and provide the required notice and opt-out mechanism.

7. Cookies & analytics

We and our sub-processors use cookies, local storage (including IndexedDB for offline support), and similar technologies to: (a) keep you signed in and remember your preferences; (b) measure how the Service is used so we can improve it; (c) detect and prevent fraud and abuse; (d) record referral attribution as described in Section 2a.2. You can control cookies through your browser settings; if you disable cookies, parts of the Service may not function correctly. [VERIFY] If you adopt a third-party advertising provider (Google Analytics, Plausible, ad pixels, etc.), list each here and provide an opt-out path.

The bigredvalue_referral cookie is an HttpOnly, first-party cookie with a 90-day maximum lifetime. Its only purpose is to record which referral code (if any) brought you to the Service so that a subsequent packet purchase can be credited to the referrer. You can clear it via your browser’s cookie controls; doing so means no referral credit will attach to a future purchase you make.

8. Data retention

We retain account information and protest data for as long as your account is active and for a reasonable period thereafter to support recordkeeping, dispute resolution, fee invoicing, regulatory compliance, and model quality evaluation. Photographs and voice recordings tied to a closed protest are retained no longer than necessary for those purposes. You may request deletion of your account and associated data at any time (see Section 10), subject to legitimate retention requirements (such as records of completed transactions for tax and accounting purposes).

9. Security

We implement administrative, technical, and physical safeguards designed to protect the information we hold, including encryption in transit, encryption at rest for sensitive fields, access controls, and least-privilege principles. The offline-first portion of the Service stores in-progress evidence locally on your device in encrypted browser storage until it syncs. No method of transmission or storage is 100% secure, and we cannot guarantee the absolute security of your information.

10. Your rights & choices

Depending on where you live, you may have the right to:

• Request access to the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal information, subject to legitimate retention requirements;
• Request export of your data in a portable format;
• Object to or restrict certain processing of your data;
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email us at hello@bigredvalue.com. We may need to verify your identity before fulfilling certain requests. We will not discriminate against you for exercising your rights.

10.1 How to request deletion of your data

To delete your account and the personal information associated with it, email hello@bigredvalue.com from the email address on your account with the subject line “Data deletion request” and include the parcel number(s) of any properties you have looked up through the Service. We will confirm receipt within five (5) business days and complete deletion within thirty (30) days, except for records we are legally required to retain (such as completed-transaction records for tax and accounting purposes). Once deletion is complete, your account, in-progress flow sessions, evidence photos, voice recordings, transcripts, generated narratives, and any generated packets stored server-side will be removed. Referral-program data tied to your account (your code, attribution links to other packets, milestone records, and future-year credit balances) will also be deleted; any rewards already paid out as Stripe refunds or transfers remain in our financial records for the period required by tax and accounting law, and any 1099-NEC issued to you remains on file for the IRS-mandated retention period. Aggregated or de-identified data that no longer identifies you may be retained for model evaluation as described in Section 3.1.

If you only want to delete a specific item (a single photo, a single property session, a single packet), describe it in your request and we will scope the deletion accordingly. No account is required to make a deletion request — if you used the Service anonymously, send us the parcel number you looked up and the approximate date so we can locate and delete any server-side records tied to that lookup.

11. State-specific rights

California residents (CCPA/CPRA): you have the rights described in Section 10, plus the right to know the categories and specific pieces of personal information we have collected, the sources, the business purposes for collection, and the categories of third parties with whom we share information (all described in this policy). We do not sell or “share” personal information for cross-context behavioral advertising.

Other U.S. states (CO, CT, VA, UT, OR, TX, MT, and others): residents of states with comprehensive privacy laws may have similar rights of access, correction, deletion, portability, and (where applicable) opt-out of targeted advertising or profiling. Contact us using the address in Section 14 to exercise these rights.

12. Children

The Service is intended for adults (18+) who own or are authorized to act on behalf of the owner of a Douglas County, Nebraska property. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, contact us and we will take appropriate steps to delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice (such as an in-product notice or an email). Your continued use of the Service after the effective date of an updated policy constitutes your acceptance of the updated policy.

14. Contact

Questions about this Privacy Policy or your information? Contact us at hello@bigredvalue.com.