Privacy Policy
What we collect
We respect your privacy. Buyer's Leverage collects only the information needed to provide our service: account credentials (email + name), uploaded inspection PDFs, generated reports, billing details processed via Stripe, micro-survey responses, and basic operational telemetry (page views, feature clicks, error rates) used to keep the platform reliable.
How we use it
We use your data to generate your reports, process payments, send transactional emails about your account, improve the product, and respond to support requests. We do not sell your personal information. Inspection reports are private to your account and are not publicly indexable.
Your CCPA rights (California residents)
California Civil Code §1798.100–§1798.140 gives you the following rights, which we honor for every user regardless of state: • Right to know — request a copy of every category of personal information we hold on you. • Right to delete — request erasure of your account, reports, uploads, transactions, and audit log. • Right to opt out of "sale" or "sharing" of personal information — we do not sell your data, but you can lock in the opt-out at any time via the "Do Not Sell or Share My Personal Information" link in the footer or on your account privacy page. • Right to portability — download a machine-readable JSON export of every record we hold on you. • Right to non-discrimination — exercising any of these rights will not result in price changes, denial of service, or degraded quality.
Your GDPR rights (EU / UK residents)
Articles 15-21 of GDPR additionally grant the right to rectification, restriction of processing, and the right to object to processing. Contact support to exercise any of these rights — we respond within 30 days.
How to exercise these rights
The fastest path is the new "Your Privacy & Data" page in your account — one click each for data export, account deletion, marketing opt-out, and cookie-consent reset. Or email support and we'll handle it manually.
Data retention
Active accounts keep their data indefinitely so reports stay available for future reference. Deletion requests are honored within 30 days and create an audit-log entry. Backups are purged within 90 days of deletion.
Third-party processors
We use Stripe (payments), Resend (transactional email), Cloudflare R2 (encrypted backups), Google Gemini + OpenAI (report analysis & image generation), and Metricool (social-media scheduling). Each is contractually bound to GDPR / CCPA data-processor terms.
Children
The platform is not intended for users under 18. We do not knowingly collect data from minors.
Updates
We may revise this policy when product or regulatory changes warrant. Material changes will be announced via a banner at sign-in and an email to active users.