Privacy Policy

Reposition Ventures Group LLC is a Texas limited liability company. You can reach us at info@repvg.com or 800-525-9923. We are the business responsible for the data described in this policy.

Information you give us directly

• Contact form (the "Book a call" fallback form): your name, email, and optionally your phone number and a message.
• Solutions Center intake ("Describe your problem"): the problem description you type (required), and optionally your name, email and company.
• Lab tool "email me this result" and "have RVG follow up" options (AI Takeoff, Photo to Quote, HailView): an email address you type to receive your result, and if you tick the follow-up checkbox, that email plus a short note describing the tool run (which may include an address or material you entered, for HailView).
• Files you choose to upload to AI Takeoff or Photo to Quote: drawings, photos, scans, or email (.eml) files you submit for analysis.
• Our configurator ad landing page's estimator and exact-quote form (repvg.com/lp/configurators): your answers to the estimator's questions about your own catalog (always optional to continue), and - only if you request an exact quote - your name, email, company, and optionally your phone number and website.

Information collected automatically

• Your IP address, which we hash (one-way, with a private salt) before it is ever stored - we do not store your raw IP address in our database. See "How we use information" below for the one narrow exception.
• Cookies and similar technology described in our Cookie Policy.

We do not use Google Analytics or any similar general-purpose analytics script. The only usage data we keep from the Lab tools is our own first-party, aggregated counts - this data does not identify you. The one exception is the Meta Pixel and Meta Conversions API, described in the next paragraph and in "Advertising (Meta Pixel and Conversions API)" below - the Pixel loads sitewide, on every page, but only after you accept our cookie banner; before that, or if you decline, neither it nor the Conversions API ever loads or is sent anything.

If you upload a file to AI Takeoff or Photo to Quote, it is stored in a private file storage bucket that is not publicly accessible, and the file is sent to our AI provider, Anthropic, to generate your result (see "AI processing" below).

Honestly, as of this policy's last-updated date: our systems do not currently strip location or device metadata (such as embedded GPS coordinates) from uploaded image files, and uploaded files are not currently deleted automatically by our systems - they persist until we remove them manually. If a file you plan to upload contains metadata or information you do not want kept, please remove it yourself before uploading, or contact us afterward and we will delete the file by hand.

• To respond to your inquiry or booking request.
• To run the Lab tool you used and generate your result (a takeoff, a quote, a score, a configuration, a grant match, or a sketch).
• To send you a result by email, if you asked us to.
• To send an internal alert to our own team when a new lead comes in, so we can follow up with you.
• To enforce use limits and prevent abuse (see "Security" below) - this is the one purpose for which your real IP address is used, in a single server-to-server call to our CAPTCHA provider, Cloudflare, before it is discarded.
• To keep the site working and to improve it, using only aggregated, non-identifying counts.

We do not sell your personal information, and we do not share it with third parties for cross-context behavioral advertising or targeted advertising. We share information only with the service providers below, each of which processes it only to provide the specific function listed:

• Resend - sends email on our behalf: an internal lead-alert email to our own team when you submit a form, and, if you request it, a result email to the address you typed.
• Cloudflare (Turnstile) - our bot-detection/CAPTCHA provider. Receives a verification token and your IP address in a single server-side call before every form submission or Lab tool use, to confirm you are a real visitor, not a bot.
• Anthropic - our AI provider. Receives the text you submit (a Solutions Center problem description, or a HailView address/material/storm data) or a file you upload (for AI Takeoff or Photo to Quote), solely to generate the AI result shown to you. Uploaded files are removed from Anthropic's systems by our own code immediately after each result is generated. We do not control, and this policy does not describe, how Anthropic itself handles data once it receives it beyond generating that one response - see Anthropic's own privacy and API terms for that.
• Cal.com - our booking provider. When you click "Book a call," we open Cal.com's own booking popup; our code passes it only a display theme and our booking-page address, never your name or email. Anything you type directly into Cal.com's own booking form is sent to Cal.com directly, under Cal.com's own privacy practices, not ours.
• Grants.gov - the U.S. government's own public grants API. AutoApply sends it only the search text you type and the ID of a grant listing you select - never your name, email or any personal information.
• Nominatim / OpenStreetMap and the Iowa Environmental Mesonet - HailView sends these the street address you type (to look up its location and nearby storm history) - never your name or email.
• Vercel - our hosting provider, which handles every request to this site as a normal part of serving it to you.
• Supabase - our database and file-storage provider, which stores every record described in this policy on our behalf.
• Twilio - an SMS provider we have integrated for internal lead alerts to our own team, but which is not active in production today. If activated, it would receive a lead's name and email for the sole purpose of texting that alert to our own internal phone number, never to you.
• Meta (Facebook/Instagram) - our advertising partner. If you accept our cookie banner, the Meta Pixel loads on every page of this Site; two additional events tied specifically to our configurator ad landing page (repvg.com/lp/configurators) are described below. See "Advertising (Meta Pixel and Conversions API)" below for exactly what is sent.

We may also disclose information if required by law, subpoena, or legal process, or to protect the rights, property or safety of RVG, our visitors, or the public.

We aim to keep information only as long as it is useful, and our database is designed with short retention windows for temporary, session-level data. In the interest of describing our systems accurately rather than aspirationally, here is what our systems currently do:

• Leads (your name, email, and message, if you contacted us) and AI usage/cost records are kept indefinitely unless you ask us to delete them.
• Temporary session data, rate-limit records, and Lab-tool-use records are designed to expire automatically after a short window (24 hours to 31 days, depending on the record), but as of this policy's last-updated date, the automatic cleanup process has not yet been scheduled to run - so this data may persist longer than its intended window until we complete that work or you ask us to delete it.
• Uploaded files are not currently deleted automatically (see "Uploaded files" above) and persist until removed by hand.

You can ask us to delete any of the above at any time by contacting us - see "Your privacy rights" below.

Regardless of where you live, we offer every visitor the following rights over their personal information, consistent with the strongest protections in U.S. state privacy laws (including the Texas Data Privacy and Security Act, the California Consumer Privacy Act as amended by the CPRA, and Virginia- and Colorado-style consumer privacy laws) and, for visitors in the European Union or United Kingdom, the principles of the GDPR/UK GDPR:

• Right to know / access - ask what personal information we have about you.
• Right to correct - ask us to fix inaccurate information.
• Right to delete - ask us to delete your personal information, subject to limited exceptions (for example, information we are legally required to keep).
• Right to data portability - ask for a copy of your information in a portable format.
• Right to opt out - we do not sell personal information or use it for targeted advertising or profiling with legal effect, so there is nothing to opt out of in that respect; you may still ask us to stop processing your information for a given purpose, such as our own marketing follow-up.
• Right to non-discrimination - we will not deny you service, charge you a different price, or provide a different level of service because you exercised any of these rights.
• Right to appeal - if you disagree with how we handled your request, you may ask us to reconsider by replying to our response.

For visitors whose personal information we process based on consent (for example, information you type into a form) or legitimate interest (for example, a hashed IP address used only to enforce fair-use limits), you may withdraw consent or object at any time without affecting the lawfulness of processing already completed.

To exercise any of these rights, email info@repvg.com or call 800-525-9923. We will verify your request using the contact information you already gave us, and we aim to respond within 45 days (extendable once by another 45 days for complex requests, with notice to you).

Several Lab tools and the Solutions Center intake use artificial intelligence (Anthropic's Claude models) to generate results: takeoff line items, quotes, HailView narratives, and solution sketches. Here is what that means in practice:

• What is sent: the specific text you typed (a problem description, an address, a material) or a file you uploaded, only for the single tool run that needs it.
• AI output can be wrong. These results are generated by a language model, not a licensed professional, and may be inaccurate, outdated, or simply mistaken. Nothing an AI tool on this site produces is professional, engineering, financial, legal or grant-writing advice, and none of it should be relied on without your own independent review - see our Terms of Service for the full disclaimer.
• No submission without a human. AutoApply never submits a grant application anywhere on your behalf; it only prepares a draft for a person to review and, if they choose, submit themselves through Grants.gov's own system.
• Training use: this policy describes what our own systems do with your data. It does not describe, and we do not control, whether or how Anthropic itself might use data submitted through its API for purposes outside generating our requested result - please refer to Anthropic's own API terms and privacy policy for that.

If you click "Accept" on our cookie banner, the Meta Pixel loads on every page of this Site and records that you viewed a page. Two more specific events fire only on our configurator ad landing page (repvg.com/lp/configurators), where our Facebook and Instagram ads actually send visitors: that you completed our estimator, and that you submitted our exact-quote form. Nothing loads and nothing is sent, anywhere on the Site, unless you click "Accept" - clicking "Decline," or simply not choosing yet, means none of this runs. You can change your choice at any time from the "Cookie settings" link in our footer or from this page.

• What the Meta Pixel sends from your browser, only after you accept: on every page, that you viewed it; on our configurator ad landing page specifically, that you completed our estimator and that you submitted the exact-quote form - each as an anonymous event, with an event ID.
• What our server separately sends to Meta's Conversions API, only after you accept and only after you submit the exact-quote form on our configurator ad landing page and that lead is successfully saved: a Lead event carrying your email and, if given, your phone number - both one-way SHA-256 hashed before they ever leave our server, never sent as plain text - plus the same event ID the browser event used, so Meta can recognize the two as one event rather than double-counting it, and the advertising click identifiers (`fbc`/`fbp`) Meta's own script already set in your browser, if present.
• Meta Conversions API calls time out after 3 seconds and never block or delay your form submission - your lead is already saved before we attempt to tell Meta about it, and a failed or slow call to Meta has no effect on you.

To opt out, decline or withdraw consent on our cookie banner at any time - this stops both the Pixel and the Conversions API going forward. You can also use your browser's or device's own ad-tracking controls, or Meta's own ad-preferences settings, to limit how Meta itself uses advertising data across sites.

We use reasonable administrative and technical safeguards appropriate to the kind of information we collect, including:

• All traffic to this site is encrypted in transit (HTTPS).
• Your IP address is one-way hashed with a private salt before storage - we do not store it in readable form (with the single exception described above, a server-to-server verification call to Cloudflare that never touches our database).
• Our database enforces row-level security on every table with no public read or write access - only our own server-side code, using credentials never exposed to your browser, can read or write visitor data.
• Uploaded files are stored in a private file bucket, never publicly listed or accessible by URL guessing.

No system can be guaranteed 100% secure, and we cannot promise that information you send us will never be accessed by an unauthorized party. We will notify affected individuals and any regulator as required by applicable law if we learn of a breach involving personal information.

This site is a business-to-business software and services site. It is not directed to children, and we do not knowingly collect personal information from anyone under 13 years of age. If we learn that we have done so, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at info@repvg.com.

Our servers and service providers are located in the United States. If you visit this site from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your home country. By using this site, you consent to that transfer.

This site uses a small number of first-party and essential third-party cookies, described in full in our Cookie Policy. We do not use advertising or cross-site tracking cookies.

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent changes. If we make a material change to how we handle your personal information, we will update that date and, where required by law, provide additional notice.

Reposition Ventures Group LLC - info@repvg.com - 800-525-9923.