Privacy Policy

This Privacy Policy explains how Reeeally, LLC (“Reeeally”, “we”, “us”, “our”) collects, uses, shares, and protects personal information when you use waf (waf.reeeally.ai), the waf API, and related services (the “Service”), and when you contact support.

Reeeally is the controller of the personal information described here. This Policy is part of our Terms of Service and does not cover third-party sites or services linked from the Service.

Information you provide: account details such as your name, email address, password or single sign-on identifier; content you submit through the Service; billing and subscription records (payment card details are collected and processed by Stripe — we do not receive or store full card numbers); and communications with support.

Information we collect automatically: usage data such as pages and endpoints used, searches performed, records served, and timestamps; device and connection data such as browser, operating system, and IP address; log and diagnostic data such as requests, errors, and security events; and cookies and similar technologies.

Information from third parties: if you sign in with Google we receive your name, email address, and an account identifier; our payment processor provides transaction confirmations and fraud signals; and our data providers supply the parcel and property records described in Section 5.

• Provide, operate, secure, and meter the Service, including account management and billing.
• Generate parcel records and coverage responses you request.
• Improve and develop the Service, including troubleshooting, testing, and aggregate analytics.
• Communicate with you about the Service, including transactional messages, security alerts, and changes to our terms.
• Send marketing where the law permits and, where required, with your consent.
• Detect and prevent fraud, abuse, and security incidents, and enforce our Terms of Service.
• Comply with legal obligations and respond to lawful requests.

We do not use your account content to train our own machine-learning models. We may use aggregated or de-identified statistics that do not identify you.

We do not sell personal information. We share it only with service providers acting on our behalf (cloud hosting and storage, data providers, payment processing through Stripe, email delivery, analytics, support, and security) under contracts that restrict their use of it; with third parties at your direction or with your consent; in a business transfer; and to comply with law, enforce our terms, or protect rights, property, and safety.

To provide parcel data, the Service compiles information from public records (county assessor and recorder records, parcel data, and government datasets) and from licensed providers. That information may include the names and mailing addresses of property owners as they appear in those sources.

We use this information only to provide parcel research and analysis to our users. We do not sell it, we do not use it to make decisions about the individuals concerned, and we do not provide consumer reports under the Fair Credit Reporting Act. If your information appears in the Service and you want it removed or corrected, email privacy@reeeally.ai with the property address and the information at issue; information that comes from public records may remain available from those sources.

We keep personal information for as long as needed for the purposes described here, then delete or de-identify it. Account data is kept for the life of your account; billing and tax records up to 7 years; logs and security data for 12 to 18 months; and support communications for up to 3 years. After you delete your account we delete or de-identify your personal information within a reasonable period, typically 90 days, except where we must keep it for legal, tax, security, or dispute purposes.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit and at rest where appropriate, access controls, logging and monitoring, and vendor due diligence. No system is completely secure. Use a strong, unique password or single sign-on, and tell us promptly at privacy@reeeally.ai if you suspect unauthorized access.

We use cookies and similar technologies for strictly necessary purposes such as authentication, sessions, security, and preferences, and for analytics. You can block or delete cookies in your browser settings, which may affect some features. Where the law requires, we obtain your consent before setting optional cookies.

We send transactional and service messages such as receipts, security alerts, and changes to our terms; you cannot opt out of these while you have an account. We may send marketing messages where the law permits and, where required, with your consent. You can opt out at any time using the unsubscribe link or by emailing privacy@reeeally.ai.

Depending on where you live, you may have the right to access the personal information we hold about you, receive a copy in a portable format, correct inaccurate information, delete your information, restrict or object to certain processing, withdraw consent, and opt out of marketing. Email privacy@reeeally.ai or use the controls in your account. We will verify your identity and respond within the time the applicable law requires. If you are in California, the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction with a privacy law, you have the rights that law provides, including the right not to be discriminated against for exercising them.

waf is a US service. Personal information is stored and processed in the United States and may be accessed from other countries where we or our service providers operate. Where the law requires safeguards for international transfers, we rely on measures such as adequacy decisions, Standard Contractual Clauses, and similar mechanisms, together with technical and organizational safeguards.

We may update this Policy and will post the revised version with a new “Last updated” date. For material changes we will give notice by email or in-product notice before the change takes effect. Continued use after the effective date means the revised Policy applies.