Privacy Policy

REDOS runs on your device first. If you never make an account, your deals, properties and expenses stay in your browser and never reach our servers at all. Making an account turns on cloud sync so the same data follows you between devices — that is the only reason we hold it.

We do not sell your data. We do not share it with advertisers. There are no tracking pixels on this site.

• Your account — email address and an encrypted password, so you can sign in. Handled by Supabase.
• Your REDOS data — deals, properties, contacts, expenses, tasks and reports, only once you are signed in and syncing. Stored in a database row locked to your user id.
• Deals you choose to share by link — when you are signed in and create a share link, we store a snapshot of that one deal (its address, strategy and the figures you entered) so the link can be opened. Anyone holding the link can read that snapshot, by design — that is what sharing means. You can turn any link off in Settings, which stops it working immediately. Links shared from the free calculators, or while signed out, are not stored at all: those carry their figures inside the link itself.
• Your licence — which tier you bought, its status, and the licence key it came from.
• Your email, if you ask for the newsletter or use a free calculator that offers results by email.

We do not store your card details. We never see them — payment is handled entirely by the payment processor.

REDOS talks to these services, and only these:

• Supabase — accounts, database and file storage. Your rows are protected by row-level security, so one account cannot read another's. The single exception is a deal you deliberately share by link, which is readable by whoever holds that link until you turn it off.
• Gumroad — payment and licence verification. They handle the transaction; we only ask them whether a licence key is valid.
• AppSumo — only if you bought through them. When you redeem a code we exchange it with AppSumo for your licence key, and they tell us when your licence changes or is refunded. They receive no deal data — only the fact that a licence was redeemed.
• beehiiv — the email newsletter, if you subscribe.
• Google Maps Platform — address autocomplete, when you type a property address.
• US Census Geocoder and FEMA — turning an address into a location and looking up its flood zone.
• Vercel — hosting. Standard server logs, including IP addresses.
• PostHog — anonymous product analytics, so we can see which screens get used and where people get stuck. It receives a random id generated in your browser, the name of the event, and your IP address (unavoidable for any web request). It does not receive your name, your email, your account id, or any figure or address from a deal.

The address services necessarily receive the address you type. They do not receive your purchase price, rent, rehab budget, or any other figure from your analysis.

On analytics specifically: the page URL is never sent, because REDOS puts deal ids in the address bar. We send a pattern such as /deals/[id] instead. The only details attached to an event are which tier you are on, which strategy or calculator you used, whether the action succeeded, and that route pattern — the list is fixed in our code, and anything not on it is discarded before the event is sent rather than filtered afterwards.

• No advertising or marketing pixels.
• No selling or renting of personal data, ever.
• No sending of your deal financials to any third party.
• No reading of your data by us for any purpose other than supporting you when you ask.

You can export everything from Settings at any time, in a file you own. You can ask us to delete your account and everything attached to it by emailing hello@redoshq.com. We will action it within 30 days and confirm when it is done.

Deleting your account removes your synced data. Anything held only in your own browser is removed by clearing REDOS data from Settings.

Traffic is encrypted in transit (HTTPS) and data is encrypted at rest by our database provider. Access to your rows is enforced at the database level, not merely in the app.

No system is perfectly secure, and we would rather say so than imply otherwise. If you find a vulnerability, email hello@redoshq.com and we will take it seriously.

REDOS is a business tool and is not intended for anyone under 18.

If this policy changes in a way that affects what we collect or who we share it with, we will update the date at the top and tell account holders by email. We will not quietly broaden it.