Privacy Policy

1. Information We Collect

When you use MoldRiskIQ, we collect the following categories of information:

• Account Information: Name and email address provided during registration.
• Property Data: Addresses you search and assess, along with associated property characteristics retrieved from public records and third-party data providers (ATTOM, Regrid, Census Bureau, NOAA, FEMA, USGS, and others).
• Payment Information: Payment details are processed securely by Stripe. We do not store your credit card number, CVV, or full payment credentials on our servers. We retain transaction records including amount, date, and Stripe transaction ID.
• Uploaded Documents: If you upload seller disclosures, inspection reports, or other documents for analysis, we store these documents securely for the purpose of generating your report.
• Consultation Data: If you book a consultation (Pro tier), we collect scheduling information through our booking system (Google Calendar integration).
• Usage Data: Pages visited, features used, reports generated, and interaction patterns to improve the Service.
• Device Information: Browser type, operating system, screen resolution, and IP address for security, analytics, and fraud prevention.

2. How We Use Your Information

We use the information we collect to:

• Generate property risk assessments and reports
• Maintain your user account and saved property history
• Process payments and maintain billing records
• Schedule and facilitate consultation appointments (Pro tier)
• Send risk insights, maintenance reminders, product recommendations, and service updates (with your consent)
• Improve our algorithms, scoring models, and overall service quality
• Detect and prevent fraud, abuse, or unauthorized access
• Comply with legal obligations and respond to lawful requests

3. Data Sharing

We do not sell your personal information. We may share data in the following limited circumstances:

• Service Providers: Third-party services that help us operate the platform, including hosting and infrastructure (Vercel, Railway, Supabase), payment processing (Stripe), email delivery, and property data providers (ATTOM, Regrid). These providers are contractually obligated to protect your data.
• Affiliate Partners: If you click on product recommendations in your report, the affiliate partner may receive referral information (such as a click ID). Your personal data (name, email) is never shared with affiliate partners without your explicit consent.
• Analytics: We use Meta Pixel for conversion tracking and audience analytics. This may share anonymized interaction data with Meta. You can opt out of Meta tracking through your browser settings or by using an ad blocker.
• Consultation Facilitators: If you schedule a Pro tier consultation, your name, email, and report data may be shared with the consultation professional to prepare for your session.
• Legal Requirements: If required by law, subpoena, court order, or government request.
• Business Transfers: In connection with a merger, acquisition, or sale of company assets, your data may be transferred as part of the transaction.

4. Data Retention

We retain your data as follows:

• Account Data: Retained for as long as your account is active.
• Property Reports: Retained indefinitely so you can access previously purchased reports.
• Uploaded Documents: Retained for the purpose of report generation and subsequent access. You may request deletion at any time.
• Payment Records: Retained for 7 years to comply with tax and financial reporting obligations.
• Usage Analytics: Retained in aggregated, anonymized form for algorithm improvement and business analysis.

If you request account deletion, we will remove your personal data within 30 days. Anonymized assessment data may be retained for algorithm improvement. Payment records required for legal compliance will be retained per applicable law.

5. Cookies & Tracking Technologies

We use the following tracking technologies:

• Session Cookies: Essential cookies to maintain your authentication state and session. These are required for the Service to function.
• Meta Pixel: A tracking pixel from Meta (Facebook) used for conversion tracking, audience building, and advertising optimization. This pixel may collect data about your browsing behavior on our site.

The Meta Pixel does not load until you accept advertising cookies. Session cookies are strictly necessary to keep you signed in and are always active. We use no other third-party tracking. You can change your choice at any time below, or clear cookies already set through your browser settings.

6. Security

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission (TLS/SSL) for all communications
• Secure, encrypted database storage
• Bcrypt password hashing — we never store passwords in plaintext
• Role-based access controls for internal data access
• Secure payment processing through PCI-DSS compliant Stripe infrastructure

However, no system is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated personal data
• Request deletion of uploaded documents
• Opt out of marketing communications at any time
• Request a copy of your data in a portable format

To exercise these rights, contact us at privacy@moldriskiq.com. We will respond to your request within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and share
• The right to request deletion of your personal information
• The right to opt out of the "sale" of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise your CCPA rights, contact us at privacy@moldriskiq.com.

9. Children's Privacy

MoldRiskIQ is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

10. Third-Party Links

Our Service may contain links to third-party websites, products, or services (including affiliate product recommendations). We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with a revised date and version number. Material changes will be communicated via email to registered users. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact

For questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@moldriskiq.com.