Privacy Policy | RedRightBuyer

RedRightBuyer.com is operated by Felted Whale LLC, doing business as RedRightBuyer ("Company," "we," "us," or "our"). We respect your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, RedRightBuyer.com, and our mobile applications (together, the "Services").

By using the Services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

A. Information You Provide

You are not required to provide personal information to browse the Services. We collect information you choose to provide, including:

Account information: your email address, username, and password when you create an account. Passwords are stored by our authentication provider in hashed form.
Community activity: comments, replies, votes, thumbs, reports, saved businesses and titles, and users you block.
Membership information (businesses): contact names, titles, email addresses, and phone numbers; business and mailing addresses; company name, categories, description, hours, photos, logos, menus, FAQs, testimonials, keywords, and social media URLs; political lean self-identification; and, for Church & Charity applicants, the organization's Employer Identification Number (EIN).
Unfinished signups: if you start a membership signup but do not finish it, we keep the information you entered (such as name, business name, email address, and phone number) and may email you reminders to finish.
Messages you send to a member through a profile contact form: your name, email address, optional phone number, and message.
Contact forms, correction requests, requests to add a company or title, and emails you send us.
Payment information: payments are processed by Stripe, which collects your card and billing details. We do not receive or store full card numbers.

B. Information Collected Automatically

Device and usage information such as IP address, browser type, device type, operating system, pages visited, referring website, and general location derived from IP address. We record IP addresses with form submissions and certain account actions to prevent spam, fraud, and abuse.
Site statistics: our website hosting provider records basic page-view statistics for us using a randomly generated identifier stored in your browser.
Visitor statistics: Cloudflare, which delivers and protects our website, gives us privacy-focused visitor statistics, such as pages viewed, referring website, country, and device and browser type. These statistics do not use cookies or browser storage and do not track you across other websites.
Website analytics, only with your consent: if you accept analytics cookies through our cookie banner, Microsoft Clarity records how you interact with website pages, such as clicks, scrolling, and page navigation, including session replays.
App analytics: our mobile apps use PostHog to understand how the apps are used. PostHog receives the screens you view, the items you tap, your device type, operating system, and app version, and a random identifier for your device. If you sign in, we link this activity to your account using an internal account number and your membership status. We do not send PostHog your name, email address, or phone number, and we do not make screen recordings of app sessions. Our apps do not contain advertising tools and do not track you across other companies' apps or websites.
Error reports: when our website or apps run into an error, Sentry receives a technical report about it, including the page or screen, browser or device type, operating system, and app version. We use these reports only to find and fix problems, and they do not include your name, email address, or phone number. We set Sentry and PostHog not to store your IP address.
Push notifications: if you allow notifications in our app, your device gives us a push token, a random address for your device. We store it with your account and device type, and deliver notifications through Expo, Apple Push Notification service, and Google Firebase Cloud Messaging. We only send notifications you control in the app's Settings, such as replies to your comments and activity on your business profile. You can turn them off in the app or in your phone's settings, and signing out removes the token.
Member profile statistics: we count views of Certified Member profiles and clicks on their website, phone, social media, and menu links, and show those daily totals to the member. We present these statistics to members as totals and do not give members information identifying individual visitors.
Spam protection: our website forms use Google reCAPTCHA, which collects device and interaction information and is subject to Google's Privacy Policy and Terms of Service.

C. Information From Other Sources

Public information about businesses, such as news reports, company websites and social media, public filings, and campaign-finance records, which we use to research and publish editorial content. These sources may include the names and business contact details of owners, officers, and employees as they appear in those sources.
Business contact information from public directories and business websites, which we may use to invite businesses to list on the Services. If you ask us not to contact your business, we keep a do-not-contact record so we can honor that request.
The IRS public list of tax-exempt organizations, which we use to confirm Church & Charity eligibility.

2. Cookies, Analytics, and Advertising

We use cookies and similar technologies (including browser storage) that are needed to keep you signed in and to remember your preferences. Analytics and advertising-measurement cookies, including Microsoft Clarity, the Google Ads tag, and the Meta Pixel, load only if you accept them through our cookie banner. See our Cookie Policy for details.

We do not display third-party advertisements on the Services. Some links may be affiliate links; see our Affiliate Disclosure.

Movie and TV trailers and trailer images are loaded from YouTube. YouTube (Google) may collect information when those images load or when you play a trailer, under Google's Privacy Policy.

You can disable cookies through your browser settings; however, some features of the Services may not function properly if cookies are disabled.

3. How We Use Your Information

We use information to:

Operate, maintain, and improve the Services
Publish business listings and community content
Verify email addresses and phone numbers with one-time codes
Process payments and manage memberships
Send service emails, such as verification codes, welcome and setup messages, billing and renewal notices, and notices about activity on your profile (you can turn off optional notifications in your account settings)
Send marketing emails to people who opt in, and membership invitations to businesses whose contact information is publicly listed; every marketing email lets you opt out
Screen messages sent through member contact forms using automated tools, including a third-party artificial intelligence service, and moderate comments
Respond to inquiries and correction requests
Detect and prevent spam, fraud, abuse, and security incidents
Understand website use and measure our advertising, with your consent
Find and fix errors, and understand how our apps are used
Comply with legal obligations and enforce our Terms of Use and Certified Member Agreement

We do not sell your personal information. We do not share your personal information, including phone numbers or any SMS opt-in data, with third parties or affiliates for marketing or promotional purposes.

4. Sharing of Information

We do not share your personal information with third parties or affiliates for their marketing or promotional purposes. We share information only as follows:

Publicly: your username appears with your comments and replies, and information a member submits for its listing (including business contact details the member provides) is displayed on the Services.
With a member you contact: when you send a message through a member's profile contact form, we deliver your name, email address, phone number (if provided), and message to that member.
With service providers who help us operate the Services, limited to the information each needs to perform its service for us: Supabase (database, authentication, and file storage); our website hosting provider; Cloudflare (website delivery, security and bot protection, and cookie-free visitor statistics); Stripe (payments); Twilio (verification codes by text message or email); Resend (email delivery); Anthropic (automated screening of messages sent through member contact forms; it receives the sender's name and message, not the sender's email address or phone number); Google (reCAPTCHA, our business email, and, with your consent, Google Ads measurement); Microsoft (Clarity analytics, with your consent); Meta Platforms (Meta Pixel advertising measurement, with your consent); Sentry (error reports from the website and apps); PostHog (app usage analytics); Expo, Apple and Google (delivering app push notifications); and the U.S. Census Bureau and OpenStreetMap Nominatim (converting business addresses to map coordinates). We do not give these providers your information for their own marketing or promotional purposes.
With Apple and Google, which distribute our mobile apps under their own privacy policies.
To comply with legal obligations, lawful requests, court orders, or government investigations.
To protect the rights, safety, or property of RedRightBuyer, our users, or others.
In connection with a business transfer (for example, a merger, acquisition, or sale of assets), in which case any successor entity will be bound by the same data-handling commitments described in this policy.

5. Data Retention

We retain personal information only as long as necessary to:

Fulfill the purposes described in this policy
Comply with legal obligations
Resolve disputes
Enforce agreements

5.1 Phone Numbers

Phone numbers are used to send one-time verification codes. A phone number a member provides as a business contact may also be displayed on the member's listing. We keep a member's phone numbers while the membership record exists, including while a listing is deactivated so it can be reactivated, and delete them when the member account is permanently deleted or sooner on request.

5.2 Member Account Deletion

When a Certified Member's account is permanently deleted, we delete the member account, the member's contact information, and the content the member submitted, including business profile details and social media URLs. We may keep (a) information we independently gather or publish from public sources, including an editorial profile of the business; (b) comments and other content posted by users about the business, which represent the speech of those users; and (c) records we must keep for billing, tax, legal, dispute-resolution, or fraud-prevention purposes, such as payment records held by Stripe.

5.3 User Account Deletion

You can delete your account at any time in the app or as described on our Delete Account page. Deleting your account deletes your account information and your comments, replies, votes (including Top 10 ballots), thumbs, reports, saved items, and blocked-user list. If your account is linked to a membership, the business listing is handled under Section 5.2. We may keep a record of a deletion request, which may include the email address and IP address, for security purposes.

5.4 Backups and Logs

Standard system backups and operational logs may retain copies of data for a limited additional period as part of disaster recovery and security operations. Such retained data is not used for active services.

5.5 SMS and Phone Number Usage

RedRightBuyer.com does not send marketing, promotional, or notification SMS messages. The only text messages we send are one-time verification codes, delivered when you request them, through Twilio's identity verification service. We do not share phone numbers, SMS opt-in data, or verification consent records with third parties or affiliates for marketing or promotional purposes under any circumstances.

6. Your Choices and Privacy Rights

You can update your account and listing information in your account, turn off optional notification emails in your account settings, turn off app notifications in the app's Settings or your phone's settings, opt out of marketing emails using the link or instructions in the email, decline analytics and advertising cookies through our cookie banner, and delete your account as described in Section 5.3.

Depending on your state of residence, you may also have rights regarding your personal information, which may include:

Requesting access to your personal information
Requesting correction
Requesting deletion
Opting out of certain data uses

To make a request, contact: Admin@RedRightBuyer.com

We may verify your identity before fulfilling certain requests. We will respond within the time required by applicable law. If we deny your request, you may appeal by replying to our response, and we will review the appeal and tell you the result.

7. California Privacy Rights (If Applicable)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including:

The right to know what personal information is collected
The right to request deletion
The right to opt out of certain data sharing

We do not sell personal information as defined under the CCPA.

8. Children's Privacy

The Services are intended for adults 18 and older and are not directed to children. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected such information, we will take appropriate steps to delete it.

9. Data Security

We implement reasonable administrative and technical safeguards to protect your information.

However, no internet transmission or storage system can be guaranteed to be 100% secure.

10. Third-Party Links

The Services may contain links to third-party websites.

We are not responsible for the privacy practices of third-party sites. We encourage users to review their privacy policies.

11. Do Not Track and Global Privacy Control Signals

Some browsers offer "Do Not Track" (DNT) signals. There is no uniform standard for DNT signals, and we do not currently respond to them.

Some browsers and browser extensions also send a "Global Privacy Control" (GPC) signal, which is a more recent standard recognized under California privacy regulations and several other state privacy laws as a valid opt-out preference signal. Where applicable law requires it, we treat a GPC signal received from your browser as a request to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes.

Because we do not sell personal information and do not share personal information with third parties for cross-context behavioral advertising, the practical effect of a GPC signal on our processing is limited. We honor the signal as a matter of policy regardless. When your browser sends a GPC signal, we also treat it as declining analytics and advertising cookies on the website.

12. International Users

The Services are operated in the United States. If you access the Services from outside the U.S., your information may be transferred to and processed in the United States.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date. For material changes, we will also post a notice on the Services or notify account holders by email before the changes take effect.

Your continued use of the Services after changes take effect constitutes acceptance of the revised policy.

14. Contact Information

If you have questions regarding this Privacy Policy, please contact:

Felted Whale LLC, doing business as RedRightBuyer

624 S Denver Ave, Suite 404

Tulsa, OK 74119-1039

Email: Admin@RedRightBuyer.com