Privacy Policy
Effective date: November 5, 2026
Home Prep Report ("Home Prep Report," "we," "us," or "our") is operated by Home Prep Report. This Privacy Policy explains what information we collect when you use homeprepreport.com (the "Site") and buy or view a Home Prep Report (the "Report"), how we use it, who we share it with, how long we keep it, and the choices and rights you have.
The short version:
- We collect your address, household details, and equipment information so we can build your Report. That is the point of the product.
- We do not sell your personal information. We use an advertising measurement pixel (Meta) only if you opt in through our consent banner, and it never receives your address, household details, email or Report contents (see Section 6).
- Sensitive fields (powered medical devices, refrigerated medication) are optional and collected only with your explicit consent. We never ask for diagnoses or medical conditions.
- We keep Report data for 12 months by default and then delete it. You can delete it sooner, at any time, from your Report page or by emailing us.
1. Information we collect
1.1 Information you give us
| Category | Examples | Required? |
|---|---|---|
| Address | Street address, city, state, ZIP code | Required to generate a Report |
| Household composition | Number of adults, children, older adults, and pets (counts only, no names or birthdates) | Required (counts) |
| Equipment and supplies | Whether you have a generator (and fuel type), backup power, water storage, a vehicle, heating/cooling type, and similar household equipment | Optional |
| Sensitive household needs | Whether someone in the household relies on a powered medical device (for example, a device that needs electricity) and whether the household keeps medication that must be refrigerated | Optional, only with your explicit opt-in consent |
| Contact information | Email address, used to deliver your Report and receipts | Required |
| Support communications | Anything you send us when you contact support | As you choose |
What we do not ask for: We do not ask for names of household members, dates of birth, Social Security numbers, medical diagnoses, specific conditions, medication names, or health insurance information. Please do not include this kind of information in free-text fields or support emails.
1.2 Payment information
Payments are processed by Stripe, Inc. ("Stripe") through Stripe Checkout. Your card number and payment details are entered directly into Stripe's systems and are not received or stored by us. Stripe shares limited information with us, such as your email address, billing country/ZIP code (if collected), the last four digits of your card, the payment amount, and the transaction status, so we can confirm your purchase, issue refunds, and keep required business records.
1.3 Information collected automatically
- Server and security logs. Our hosting provider and our systems automatically record technical information such as IP address, browser type, the pages requested, and timestamps. We use these logs to operate, secure, and debug the Site, and we keep them for a limited period (see Section 7).
- Privacy-conscious analytics. We count page visits and steps (for example, "report created") in our own database. These records contain no name, email, street address or Report contents, and IP addresses are stored only as a one-way hash for rate limiting. We do not use a third-party analytics provider.
- Cookies. See Section 6.
1.4 Information we derive
From your address we derive geographic coordinates (latitude/longitude) and identifiers such as county, census tract, flood zone designation, and nearby facilities. We use these derived data only to build your Report.
2. How we use your information
We use personal information to:
- Generate and deliver your Report, including the web version and the PDF, and email you a link and receipt.
- Query public data sources for information about your location (see Section 3).
- Process your payment and refunds, and keep transaction records required for tax and accounting.
- Provide customer support and respond to your requests.
- Operate, maintain, secure, and improve the Site, including detecting fraud, abuse, and errors.
- Comply with law, enforce our Terms of Service, and protect our rights and the rights of others.
We use the optional sensitive fields only to tailor Report content (for example, adding backup-power planning for a powered medical device, or cold-storage planning for refrigerated medication). We do not use them for marketing, analytics, or any other purpose.
Marketing email. We will only send marketing emails if you opt in, and every marketing email will include an unsubscribe link. Emails that deliver your Report, receipts, or account/security notices are transactional and are not marketing.
Automated processing. Your Report is generated automatically by software from the information you provide and public data. We do not use your information to make decisions that produce legal or similarly significant effects about you.
3. Public data sources we query with your location
To build your Report, our servers send your address or the coordinates derived from it to the public data services below. These queries are made by our servers, not your browser, and they include only location information (an address or coordinates) and not your name, email address, household details, or sensitive fields.
| Source | What we send | What we get back |
|---|---|---|
| U.S. Census Bureau Geocoder | Your street address | Coordinates, county, census geography |
| FEMA (for example, National Flood Hazard Layer, disaster declarations) | Coordinates and/or county | Flood zone and hazard information |
| National Weather Service (api.weather.gov) | Coordinates | Forecast zone, alerts, climate-related information |
| U.S. Geological Survey (USGS) | Coordinates | Earthquake and other natural-hazard information |
| U.S. Environmental Protection Agency (EPA) | Coordinates and/or ZIP/county | Environmental and drinking-water-related information |
| OpenStreetMap via the Overpass API | Coordinates (a bounding area) | Nearby facilities such as hospitals, pharmacies, fire stations, and potential shelters |
These organizations are independent of us. They may log the requests they receive under their own policies. Because the requests come from our servers, they will see our server's network address, not yours.
4. How we share information
We do not sell personal information. If you opt in to ad measurement, the Meta pixel may receive information about which pages of our Site you visit and whether you started or completed a purchase; under California and similar state laws this can be considered "sharing" for cross-context behavioral advertising. It is off unless you opt in, and you can withdraw consent at any time by clearing this site's storage in your browser or contacting us.
We disclose personal information only as follows:
4.1 Service providers (processors)
We use the following service providers to run the business. They process personal information on our behalf, under contracts that limit their use of it to providing services to us:
| Provider | Purpose | Data involved |
|---|---|---|
| Stripe, Inc. | Payment processing, fraud prevention, receipts, [sales tax calculation if Stripe Tax is used] | Payment data, email, billing location, transaction details |
| Resend | Sending transactional email (Report delivery, receipts) | Email address, email content, delivery metadata |
| Vercel Inc. | Website hosting and serverless computing | All data processed by the Site, server logs |
| Supabase | Database hosting | Report inputs, derived data, order records |
| Meta Platforms (only if you opt in) | Advertising measurement | Page visited and purchase events; no names, emails, addresses or Report contents |
| Our email provider | Customer support email | Support communications |
Stripe also acts as an independent controller for some purposes (for example, fraud prevention and compliance with financial regulations) under its own privacy policy at https://stripe.com/privacy.
4.2 Other disclosures
- Legal requirements. When we believe in good faith that disclosure is required by law, subpoena, or other legal process, or is necessary to protect the safety, rights, or property of you, us, or others.
- Business transfers. If Home Prep Report or the Home Prep Report business is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to this Privacy Policy or a policy at least as protective.
- With your direction. If you ask us to share your Report with someone, or you share your Report link yourself.
4.3 Affiliate links
The Site includes links to products on Amazon.com and possibly other retailers, and we may earn a commission from qualifying purchases (see our Affiliate Disclosure). When you click one of these links, you leave our Site, and the retailer may set its own cookies and collect information under its own privacy policy. We do not send your address, household details, email, or Report contents to Amazon or any other retailer. The affiliate link contains only our affiliate tracking ID. We do not place affiliate links in the PDF version of your Report or in our emails.
5. Sensitive information and consumer health data
The optional fields about powered medical devices and refrigerated medication may be treated as "sensitive personal information" or "consumer health data" under some state laws (for example, Washington's My Health My Data Act, Nevada SB 370, and similar provisions in Connecticut and other states).
For these fields:
- Consent. We collect them only if you check an unchecked consent box that explains what we collect and why. You can use the product without providing them.
- Purpose limitation. We use them only to tailor your Report. We do not use them for marketing, analytics, advertising, or profiling.
- No sale or sharing. We never sell them, and we disclose them only to our service providers (hosting and database) as needed to store and generate your Report.
- Withdrawal. You can withdraw consent at any time by deleting your Report (see Section 8) or emailing us. We will then delete these fields.
- Minimal detail. We store only yes/no or category values, not diagnoses, medication names, device models, or the identity of the person involved.
6. Cookies and similar technologies
We use only:
- Strictly necessary cookies and storage. These are required for the Site to work, for example to keep your Report session, protect against cross-site request forgery, remember your consent choices, and complete checkout. Stripe Checkout sets its own cookies on Stripe's pages for payment processing and fraud prevention.
- First-party analytics. We record anonymous events (such as "report created") in our own database without cookies and without personal information.
- Advertising measurement (opt-in only). If you click "OK" in our consent banner, we load the Meta Pixel, which sets Meta cookies to measure whether our ads lead to visits and purchases. It receives page addresses (which never contain your street address or answers) and, for purchases, the price. If you click "No thanks" or ignore the banner, it never loads.
We do not use session-replay tools, and we use no advertising cookies unless you opt in to ad measurement. Retailers you visit through affiliate links (such as Amazon) may set cookies on their own sites.
Global Privacy Control. We honor Global Privacy Control (GPC) and similar browser opt-out signals as a request to opt out of the sale or sharing of personal information. Because we do not sell or share personal information, no further action is needed, but we will not change that practice for users who send these signals.
7. How long we keep information
| Data | Retention |
|---|---|
| Report inputs (address, household counts, equipment, optional sensitive fields) and the generated Report | 12 months from purchase, then automatically deleted, unless you delete it sooner |
| Email address linked to a Report | Deleted with the Report, except as kept in order records below |
| Order and payment records (email, amount, date, transaction ID, billing location) | As long as required for tax, accounting, and legal purposes, generally [7] years. These records do not include your address details, household information, or sensitive fields. |
| Support emails | [24] months after the conversation ends, unless needed longer to resolve a dispute |
| Server and security logs | [30] days, unless needed longer to investigate a security incident |
| Backups | Deleted data may remain in encrypted backups for up to [30] days before being overwritten |
8. Deleting and accessing your information
Delete immediately. Your Report page includes a "Delete my Report and data" button. Using it permanently deletes your Report, inputs, and derived data from our active systems right away (backups follow the schedule above). We keep only the order record described in Section 7.
Request by email. You can also email support@homeprepreport.com to:
- get a copy of the personal information we hold about you,
- correct inaccurate information,
- delete your information, or
- ask any question about this policy.
We may need to verify your request, for example by asking you to confirm from the email address used for the purchase or to provide your Report link or order ID. We will respond within 45 days (or sooner if required by law). We will not charge a fee or treat you differently for making a request.
9. Your state privacy rights
Depending on where you live, you may have rights under state privacy laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and comprehensive privacy laws in states including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.
Applicability. These laws generally apply only to businesses that meet certain thresholds. For example, the CCPA applies to for-profit businesses that do business in California and (a) had annual gross revenues above $26,625,000 in the preceding calendar year (the CPI-adjusted figure in effect since January 1, 2025), (b) buy, sell, or share the personal information of 100,000 or more California consumers or households annually, or (c) derive 50% or more of annual revenue from selling or sharing personal information. Other states use thresholds based mainly on the number of state residents whose data is processed. As a small business, we may not currently be subject to some or all of these laws. Regardless, we honor the following rights for all users, wherever they live:
- Know/access: the categories and specific pieces of personal information we hold, the sources, the purposes, and the categories of recipients.
- Delete personal information we hold about you, subject to legal exceptions (for example, records we must keep for tax purposes).
- Correct inaccurate personal information.
- Portability: a copy of your information in a commonly used format.
- Opt out of sale, sharing, targeted advertising, and profiling. We do not sell or profile. Ad measurement runs only with your opt-in; you can withdraw it at any time.
- Limit use of sensitive personal information. We already use sensitive information only to provide the Report you requested.
- Non-discrimination. We will not deny service, charge different prices, or provide a different quality of service because you exercised your rights.
- Appeal. If we decline your request, you can appeal by replying to our decision or emailing support@homeprepreport.com with the subject "Privacy Appeal." We will respond within the time required by applicable law (generally 45 to 60 days). If you are not satisfied, you may contact your state attorney general.
Authorized agents. You may use an authorized agent to submit a request. We may ask the agent for proof of authorization and may ask you to verify your identity directly.
Categories disclosed for a business purpose (last 12 months): identifiers (email, IP address), commercial information (purchase records), geolocation-related data (address and derived coordinates), internet activity (server logs, aggregate analytics), and, only with consent, sensitive household information. These were disclosed to the service providers in Section 4.1 for the purposes in Section 2.
California "Shine the Light." We do not disclose personal information to third parties for their own direct marketing purposes.
10. Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (HTTPS/TLS), encryption at rest provided by our hosting and database providers, access controls that limit who can access production data, unguessable Report links, and limited data retention. No system is completely secure. If we learn of a security breach affecting your personal information, we will notify you and regulators as required by law.
Keep your Report link private. Anyone with your Report link may be able to view your Report. Do not post it publicly.
11. Children's privacy
The Site is intended for adults and is not directed to children under 13 (or under 16 where applicable). Only adults may buy a Report. We do not knowingly collect personal information from children. The Report asks for the number of children in a household, not any information about them individually. If you believe a child has provided us personal information, contact us and we will delete it.
12. Location of processing
We are based in the United States, the Site is intended for U.S. addresses, and our service providers process data in the United States.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and change the "Effective date" above. If we make material changes, we will provide additional notice (for example, a notice on the Site or an email to recent customers) before the change takes effect. We will not use information collected under this policy in a materially different way without your consent where the law requires it.
14. Contact us
Home Prep Report Home Prep Report Email: support@homeprepreport.com