Privacy Policy

REDOS runs on your device first. If you never make an account, your deals, properties and expenses stay in your browser and never reach our servers at all. Making an account turns on cloud sync so the same data follows you between devices — that is the only reason we hold it.

We do not sell your data. We do not share it with advertisers. There are no tracking pixels on this site.

• Your account — email address and an encrypted password, so you can sign in. Handled by Supabase.
• Your REDOS data — deals, properties, contacts, expenses, tasks and reports, only once you are signed in and syncing. Stored in a database row locked to your user id.
• Your licence — which tier you bought, its status, and the licence key it came from.
• Your email, if you ask for the newsletter or use a free calculator that offers results by email.

We do not store your card details. We never see them — payment is handled entirely by the payment processor.

REDOS talks to these services, and only these:

• Supabase — accounts, database and file storage. Your rows are protected by row-level security, so one account cannot read another's.
• Gumroad — payment and licence verification. They handle the transaction; we only ask them whether a licence key is valid.
• beehiiv — the email newsletter, if you subscribe.
• Google Maps Platform — address autocomplete, when you type a property address.
• US Census Geocoder and FEMA — turning an address into a location and looking up its flood zone.
• Vercel — hosting. Standard server logs, including IP addresses.

The address services necessarily receive the address you type. They do not receive your purchase price, rent, rehab budget, or any other figure from your analysis.

• No advertising or marketing pixels.
• No selling or renting of personal data, ever.
• No sending of your deal financials to any third party.
• No reading of your data by us for any purpose other than supporting you when you ask.

You can export everything from Settings at any time, in a file you own. You can ask us to delete your account and everything attached to it by emailing hello@redoshq.com. We will action it within 30 days and confirm when it is done.

Deleting your account removes your synced data. Anything held only in your own browser is removed by clearing REDOS data from Settings.

Traffic is encrypted in transit (HTTPS) and data is encrypted at rest by our database provider. Access to your rows is enforced at the database level, not merely in the app.

No system is perfectly secure, and we would rather say so than imply otherwise. If you find a vulnerability, email hello@redoshq.com and we will take it seriously.

REDOS is a business tool and is not intended for anyone under 18.

If this policy changes in a way that affects what we collect or who we share it with, we will update the date at the top and tell account holders by email. We will not quietly broaden it.