Legal

Privacy Policy

Last updated September 30, 2026

Who we are

RE Underwrite Lab is operated by Gribbons Group Corp. This policy explains what we collect when you use the site, the calculators, saved deals, and PDF reports.

The governing law for this policy is the State of Colorado, except where a privacy law in your place of residence gives you rights we cannot waive.

What we collect

Account email address, and a name if you add one.

A password, stored only as a hash. We do not keep the password you typed.

A login cookie that keeps you signed in. We do not use advertising cookies.

One-time sign-in links: the email address, an expiration time, and whether the link was used.

Saved deals: the name you give a deal and the calculator inputs you enter.

If you ask for the free flip deal checklist, the email address you submit, the time you submitted it, and that the request was for that checklist.

The time you agreed to the Terms of Service and Privacy Policy, and the terms version you agreed to. Agreeing again before a calculator runs stores a new time and version on the account.

If you subscribe, a Stripe customer id and subscription status. Card numbers, CVC codes, and full payment details are handled by Stripe. They do not touch our servers.

When map features are on and you search an address, that address is sent to Google to place a map pin and load Street View. When automatic comps are on and you ask for estimated comps, the address and the beds, baths, and square feet you entered are sent to the comp provider. We store the address and the comp rows you keep on the deal.

If you create a share link, we store a copy of that investor package (deal numbers, address, comps, and the name, company, phone, and email you put on it, and any draw schedule and track record (past project addresses, prices, and dates) you add to the package) so anyone with the link can view it for 90 days. Logos and photos are not stored on the link. Deleting your account deletes your share links.

Your estimate acknowledgement is saved on your account with the time you accepted it.

Contractor contacts you add on the job desk (name, trade, email, and phone) and files you upload (contracts and other documents, up to 1 MB) are stored in your account database. Uploaded files are storage only. They are not reviewed by an attorney, and they are not emailed unless you copy them into your own email.

Analytics

We use Vercel Web Analytics, which does not use cookies, and Google Analytics, which sets cookies, to measure traffic on our public pages: the page viewed (without query strings), the referring site, browser and device type, and approximate location derived from your IP address. Google processes this data for us. Google Signals and ad personalization are off, and we do not use analytics data for advertising. Google Analytics does not run on signed-in app pages or shared investor-package links. You can decline analytics in the cookie notice, we honor your browser's Global Privacy Control signal, or you can use Google's opt-out.

Email, hosting, and the database

When email delivery is turned on, we use Resend to send the one-time sign-in link to the address you entered.

The app is hosted on Vercel. Vercel keeps standard hosting logs, which can include IP address, browser type, and the page or API path requested.

Account and deal records are stored in Turso, a hosted libSQL database.

How we use it

We use this information to create your account, run the 48-hour trial, save and reopen deals, build PDF reports, sign you in, deliver the flip deal checklist you requested, and manage a subscription ($9.99 a month, $99 a year, or $5.99 a month for a founding subscription).

We do not sell personal data. We do not share it for cross-context behavioral advertising.

How long we keep it

We keep the account, the terms-acceptance time, the terms version, and saved deals until you delete the account or ask us to delete them.

Share links expire after 90 days.

Sign-in links expire after 30 minutes. Hosting logs follow Vercel's retention. Stripe keeps payment records under Stripe's own policy.

Google Analytics event data is deleted after 2 months.

Deletion and access

Signed-in users can delete the account from the Account page. That removes the login and the saved deals stored in our database, and signs you out. It does not delete a file you already downloaded, and it does not by itself delete a Stripe customer record.

To ask for a copy, a correction, or deletion of anything we still hold, including a Stripe customer record if you subscribed, email contact@reunderwritelab.com. We will respond and delete or correct the account data we control, unless we have to keep a record to meet the law.

California privacy rights

If you are a California resident, you can ask us to tell you what personal information we collected, to delete it, and to correct it. You can also opt out of the sale or sharing of personal information. We do not sell personal information and we do not share it for cross-context behavioral advertising.

We will not discriminate against you for exercising these rights. Send the request to the contact email above. We may need to confirm that the email matches the account.

Children

The calculators are for adults making real estate decisions. We do not knowingly collect personal information from children under 16.

Changes

If we change this policy, we will update the date at the top of this page. Continued use after that date means the new policy applies to new activity.

Email contact@reunderwritelab.com.

Privacy Policy | RE Underwrite Lab