Effective April 2026 | Updated August 2026
1. INTRODUCTION
HOA Risk Insights is a service of Compliance Review Solutions (“Company,” “we,” “our,” or “us”), a California-based HOA document review service. This Privacy Policy describes how we collect, use, disclose, and protect information when you use our website at www.HOARiskInsights.com, submit documents for review, or purchase any of our report products (Report A, Report B, or Report C).
By accessing our website or submitting an order, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our services.
2. INFORMATION WE COLLECT
– Name (buyer, seller, or agent)
– Property address
– Email address
– Phone number
– Payment information (processed through Stripe; we do not store card numbers)
– HOA documents uploaded for review (PDF files)
– Any other information included in order intake forms
2.2 Information Collected Automatically
When you visit our website, we may automatically collect:
– IP address and browser user agent string
– Pages visited and time spent on our site
– Referring URLs
– Device type and operating system
– Cookie identifiers and analytics and advertising identifiers (see the Cookies, Website Tracking, and
Advertising Technologies section below)
2.3 HOA Documents and Third-Party Data
As part of our service, you upload HOA disclosure documents, reserve studies, financial statements, and related materials. These documents may contain personal information about homeowners, association members, and other individuals. We process this information solely to produce the report you have ordered. We do not use document contents for any purpose beyond report generation and quality review.
3. HOW WE USE YOUR INFORMATION
We use the information we collect for the following purposes:
- To process and fulfill your report order
- To communicate with you regarding your order status, missing documents, or report delivery
- To process payments through Stripe
- To improve our services and report quality
- To respond to inquiries, support requests, or feedback
- To send order confirmations and transactional communications
- To comply with applicable laws and regulations
- To protect the security and integrity of our services
- Improve our website and tailor it to your needs
- Measure the performance and effectiveness of our website and our advertising
- Detect and prevent fraud or unauthorized activity
We do not use your personal information to train AI models or sell it to third parties. We use website analytics and advertising technologies as described in the Cookies, Website Tracking, and Advertising Technologies section below.
4. HOW WE SHARE YOUR INFORMATION
4.1 Service Providers
We work with trusted third-party vendors to operate our business, including:
– Stripe — payment processing
– Bluehost — website hosting and email services
– Anthropic (Claude AI) — AI-assisted document analysis for report generation, accessed via the Anthropic
API
– Amazon Web Services (AWS) — cloud infrastructure and AI model access via Amazon Bedrock, which may be used as an alternative or supplement to the Anthropic API for report generation
– WordPress / Formidable Forms — online intake forms
– Analytics and advertising providers, including Google Analytics and the Meta (Facebook) Pixel (see the Cookies, Website Tracking, and Advertising Technologies section below)
These providers are contractually required to protect your information and may only use it to perform services on our behalf, except that analytics and advertising providers may process certain online identifiers as described in the Cookies, Website Tracking, and Advertising Technologies section below.
4.2 Cross-Context Behavioral Advertising (“Sharing”)
We use advertising technologies, including the Meta (Facebook) Pixel, that may share information about your activity on our website with advertising partners so that we can measure our advertising and show relevant ads to people who have visited our site. Under California law, this may be considered “sharing” of personal information for cross-context behavioral advertising. We do not sell your personal information in exchange for money. You have the right to opt out of this sharing — see Sections 6 and 7.
4.3 Legal Compliance
We may disclose information if required by law, court order, subpoena, or government request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
4.4 Business Transfers
In the event of a merger, acquisition, or sale of business assets, your information may be transferred as part of that transaction. We will notify you of any such change and your options regarding your information.
4.5 With Your Consent
We may share your information for any other purpose with your explicit consent.
5. HOA DOCUMENTS AND CONFIDENTIALITY
Documents you upload for report generation are treated as confidential. We use them exclusively to produce your ordered report. Uploaded documents are not shared with third parties except as described in Section 4.1 (service providers processing data on our behalf).
Reports produced by Compliance Review Solutions are intended solely for the use of the ordering party. Our reports carry a copyright notice and are not to be reproduced, shared, or redistributed without written permission. See the copyright notice on each report for full terms.
Document files are retained for a limited period following report delivery to allow for quality review and any necessary corrections. Files are deleted in accordance with our standard data retention schedule. Contact us at website contact form to request earlier deletion.
6. CALIFORNIA PRIVACY RIGHTS (CCPA / CPRA)
As a California-based service, we are committed to compliance with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). California residents have the following rights:
6.1 Right to Know
You have the right to request that we disclose what personal information we have collected about you, the categories and sources of that information, the purposes for which it is used, and the categories of third parties with whom it is shared.
6.2 Right to Delete
You have the right to request deletion of personal information we have collected about you, subject to certain exceptions (such as information needed to complete a transaction or comply with a legal obligation).
6.3 Right to Correct
You have the right to request correction of inaccurate personal information we hold about you.
6.4 Right to Opt Out of Sale or Sharing
We do not sell your personal information for money. However, our use of advertising technologies such as the Meta (Facebook) Pixel may be considered “sharing” of personal information for cross-context behavioral advertising under California law. You have the right to opt out of this sharing. To opt out, you may:
– use the “Do Not Sell or Share My Personal Information” link on our website;
– enable a Global Privacy Control (GPC) signal in your browser, which we honor as a valid opt-out request; or
– contact us using the information below.
6.5 Right to Non-Discrimination
We will not discriminate against you for exercising any of your privacy rights. Exercising your rights will not affect the quality or price of our services.
6.6 How to Exercise Your Rights
To submit a privacy rights request, contact us at:
- Submit a request via our website contact form
- Phone: (925) 940-7625
We will respond to verifiable requests within 45 days. We may need to verify your identity before processing your request. If you request a password reset, your IP address will be included in the reset email.
7. COOKIES, WEBSITE TRACKING AND ADVERTISING TECHNOLOGIES
We use cookies and similar tracking technologies — small files placed on your device — to operate our site, understand how visitors use it, deliver a better experience, and measure our advertising.
Types of Cookies We May Use
- Essential cookies — required for the website to function (e.g., form session cookies)
- Analytics cookies — help us understand how visitors interact with the site
- Advertising cookies – used to measure our advertising and show relevant ads (see below)
- Preference cookies — remember your settings and choices
Cookie Consent
When required, we display a cookie consent banner that lets you accept or decline non-essential cookies and manage your preferences. You can change your choices at any time using the cookie settings control on our website. For a detailed list of the cookies we use, see our Cookie Policy.
Google Analytics (GA4)
We use Google Analytics, a web analytics service provided by Google LLC, to collect information about how visitors interact with our website — including pages viewed, time spent on the site, links and buttons clicked, and general location, browser, and device information. This information is aggregated and helps us measure site performance and improve our services. Google’s use of this data is governed by the Google Privacy Policy. You can opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.
Meta (Facebook) Pixel
We use the Meta Pixel, a tracking technology provided by Meta Platforms, Inc. (which operates Facebook and Instagram). The Meta Pixel collects information about your activity on our website — such as the pages you visit and actions you take — and shares that information with Meta. This may include your IP address, browser and device information, and the pages and features you use. We use this information to measure the effectiveness of our advertising, understand which ads bring visitors to our website, and show relevant ads on Facebook, Instagram, and the Meta network to people who have visited our website (a practice known as retargeting). Meta’s use of the information collected through the Pixel is governed by the Meta Privacy Policy, available at facebook.com/privacy/policy.
Your Advertising Choices
You can control how your information is used for advertising:
- Facebook / Instagram: Adjust your ad preferences at facebook.com/adpreferences.
- Industry opt-out tools: Opt out of interest-based advertising from participating companies through the Digital Advertising Alliance at optout.aboutads.info and the Network Advertising Initiative at optout.networkadvertising.org.
- California residents: Use the “Do Not Sell or Share My Personal Information” link on our website, or enable a Global Privacy Control (GPC) signal in your browser (see Section 6).
You may also refuse cookies by adjusting your browser settings. Doing so will not prevent you from using our website, though some features may not function properly.
8. DATA SECURITY
8. DATA SECURITY
We implement reasonable technical and administrative safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encrypted data transmission (SSL/TLS)
- Access controls limiting who can view uploaded documents and order data
- Use of reputable, security-certified third-party processors (Stripe, Bluehost, Anthropic)
- Internal policies governing handling and retention of client documents
No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately through our website contact form.
9. PAYMENT INFORMATION
All payment transactions are processed through Stripe, a PCI-compliant payment processor. We do not store, transmit, or have access to your full credit card number, CVV, or bank account details. Stripe’s privacy practices are governed by their Privacy Policy, available at stripe.com/privacy.
By submitting payment information, you authorize Stripe to process the transaction on our behalf in accordance with your order.
10. AI ASSISTED REPORT GENERATION
Our report products use AI language models to analyze uploaded HOA documents and generate findings. We currently use, or may use in combination, the following AI platforms:
10.1 Anthropic (Claude AI) — via the Anthropic API
When documents are processed through the Anthropic API, the content of those documents is transmitted to Anthropic’s systems in accordance with Anthropic’s API usage policies and privacy terms. Under Anthropic’s API terms, data submitted via the API is not used to train Anthropic’s models by default. For current details on Anthropic’s data practices, please review their Privacy Policy at anthropic.com/privacy.
10.2 Amazon Web Services (AWS) — via Amazon Bedrock
We may also access AI models (including Anthropic’s Claude models) through Amazon Bedrock, AWS’s managed AI service. When documents are processed through AWS Bedrock, the content of those documents is transmitted to Amazon Web Services in accordance with AWS’s data privacy commitments. AWS does not use customer data submitted through Bedrock to train underlying AI models. For current details on AWS data practices, please review the AWS Privacy Notice at aws.amazon.com/privacy and the Amazon Bedrock service terms.
10.3 Our Commitment Regardless of Platform
Regardless of which AI platform processes your documents for a given order, the following commitments apply:
- Your documents are transmitted solely for the purpose of automated data extraction in order to generate your ordered report.
- Your data is not used for AI model training by either provider under their current API/enterprise terms.
- All reports are subject to quality review by Compliance Review Solutions before delivery. The final report represents the work product of Compliance Review Solutions, not an automated AI output.
11. CHILDREN’S PRIVACY
Our services are intended for adults engaged in California real estate transactions. We do not knowingly collect personal information from individuals under the age of 18. If we learn that we have inadvertently collected information from a minor, we will delete it promptly. If you believe we have collected information from a minor, please contact us through our website contact form.
12. LINKS TO THIRD-PARTY WEBSITES
13. DATA RETENTION
To request deletion of your information prior to the end of our standard retention period, contact us through our website contact form.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the Effective Date at the top of this document and, where appropriate, notify you by email or a notice on our website.
Your continued use of our services after the updated policy is posted constitutes your acceptance of the changes. We encourage you to review this policy periodically.
14. CONTACT US
If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:
Business Name: Compliance Review Solutions
Website: www.HOARiskInsights.com
Submit via website contact form
Phone: (925) 940-7625
This Privacy Policy is provided for informational purposes and does not constitute legal advice. For questions about your specific legal rights under California law, consult a licensed California attorney.