Privacy policy

1. Who we are

Handler Labs LLC operates Recoupe at getrecoupe.com. For questions about this policy or your data, contact support@getrecoupe.com.

2. The free calculator sends nothing

This is worth stating first because it is unusual. The diminished value calculator runs entirely in your browser. Your vehicle, accident and repair answers are computed locally and saved to your own device's local storage so you can leave and come back. They are not transmitted to us unless and until you press the button to save your estimate or buy a packet.

You can clear them at any time using "Start over" in the calculator, or by clearing your browser's site data. They expire on their own after 30 days.

3. What we collect, and when

When you save an estimate

• Your vehicle details, accident details, repair figures and any comparable listings you entered
• The calculated result
• The page you came from and the host of the referring site

No name, address, email or phone number is collected at this stage. The estimate is reachable only through an unguessable link, and we store only a cryptographic hash of that link's token, not the token itself, so a copy of our database would not yield working links.

When you buy a packet

• Your name, postal address, email address and (optionally) phone
• The at-fault insurer's name, the adjuster's name, the claim number and any mailing address you supply
• Order records from Stripe: the payment identifier, amount, currency and status

We collect these for exactly one reason: they appear on the demand letter and valuation report we generate for you. We do not use them for anything else.

Payment information

We never see your card details.Payment is handled entirely by Stripe on Stripe's own checkout page. We receive only a payment identifier, the amount and whether it succeeded. Stripe's handling of your payment data is governed by Stripe's privacy policy.

If you contact us

Your email address and whatever you write. Kept while we deal with it and for a reasonable period afterwards in case you follow up.

4. What we do not do

• We do not sell or rent your data. Not to insurers, not to law firms, not to appraisers, not to anyone.
• We do not run advertising or cross-site trackers. There is no Meta pixel, no Google Ads remarketing tag, and no third-party advertising cookie on this site.
• We do not send marketing email unless you explicitly ask us to.
• We do not put personal data in URLs. Packet links contain a random token and nothing about you.

5. How long we keep it

Deletion of expired records runs automatically on a daily schedule. It is not a manual process we might forget.

6. Who we share it with

Only the service providers needed to run the product, and only what they need:

• Supabase, database hosting for your estimate and order records
• Stripe, payment processing
• Resend, sending your packet link and receipts
• Vercel, application hosting, delivery and aggregate page analytics (Vercel Analytics: page URL, referrer, device type and country, collected without cookies and without any identifier that follows you across sites; never the contents of anything you type)

We may also disclose information where we are legally required to. We will tell you if that happens unless we are prohibited from doing so.

7. Cookies

We do not use advertising or analytics cookies, which is why you are not seeing a consent banner. Our page analytics (Vercel Analytics) is cookieless and aggregate: it counts visits without storing anything on your device or identifying you. The only browser storage we use is:

• Your calculator answers, in local storage, on your device
• Your light/dark theme preference
• A Stripe cookie set on Stripe's own checkout page during payment

8. Your rights

Whatever your jurisdiction, we will honour these for anyone who asks:

• Access, a copy of what we hold about you
• Correction, fix anything inaccurate
• Deletion, erase your data, subject only to records we must keep for tax and accounting
• Portability, your data in a machine-readable format
• Objection. Tell us to stop processing your data

Email support@getrecoupe.com and we will respond within 30 days. We will not ask you why, and we will not make you complete a form.

California residents: we do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not process sensitive personal information for inferring characteristics. You may exercise the rights above without discrimination.

9. Security

• All traffic is encrypted in transit (HTTPS, HSTS enforced).
• Database access is deny-by-default at the row level; anonymous and signed-in roles have no read path to other people's records.
• Packet links use 256 bits of random entropy and are stored only as a keyed hash.
• Documents are generated on demand rather than stored, so there is no repository of PDFs containing customers' names and addresses.
• A strict Content-Security-Policy is enforced on every page.

No system is perfectly secure. If you become aware of a vulnerability, please write to support@getrecoupe.com. We will take it seriously and we will not threaten you for reporting it.

10. Children

Recoupe is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes

If we change this policy materially we will update the effective date and, where we hold your email address in connection with an active packet, tell you.

See also our terms of service, refund policy and legal disclaimer.