Privacy Policy

This Privacy Policy (this "Policy") is a binding agreement entered into by and between JK Tiger Ventures LLC, a North Carolina limited liability company ("Riggs Built," "we," "us," or "our"), and you, the individual accessing or using the Riggs Built application and website (the "App") ("you," "your," or "User"). This Policy is incorporated by reference into, and forms part of, our Terms of Service (the "Agreement"), and capitalized terms not defined in this Policy have the meanings given in the Agreement. Riggs Built is a classic vehicle rebuild tracker that helps you log expenses, identify parts, scan receipts, and manage your build history. This Policy explains what data we collect, how we use it, and your rights regarding that data.

By creating an account or accessing or using the App, you acknowledge, agree, and covenant that you have read and understood this Policy, and you agree and covenant to all provisions of this Policy. If you do not agree to all provisions of this Policy, do not access or use the App.

• Account information — your name and email address, collected when you create an account via Supabase Auth.
• Vehicle information — year, make, model, and build details you enter manually or inferred from information provided manually.
• Expense records — parts, labor, costs, vendors, categories, and notes you log in the expense tracker.
• Receipt images and documents — photos and PDF (Portable Document Format) files you upload for receipt scanning or document storage.
• Usage data — which AI (Artificial Intelligence) features you use and how often, used to enforce plan limits.
• Payment information — subscription billing is handled entirely by Stripe. We never see or store your credit card number.

To provide the App features you've signed up for; to enforce usage limits based on your subscription plan; to process subscription payments and manage billing through Stripe; and to send transactional emails (account confirmation, billing receipts).

Your data is stored using a third-party database and hosting provider (see "Third-Party Providers" below) on infrastructure located in the United States. Receipt images and uploaded documents are stored in private storage accessible to you via time-limited signed URLs (Uniform Resource Locators). Connections between your browser and our servers use HTTPS (Hypertext Transfer Protocol Secure). We do not store your password — authentication is handled by our third-party authentication provider. API (Application Programming Interface) keys for our service providers are never exposed to your browser — all third-party API calls are made through our server-side functions.

To operate the App, we use the third-party service providers named below (collectively with the third parties described in the Agreement, "Third-Party Providers"). We do not control these providers, and we make no representation or warranty of any kind regarding their data practices, security measures, terms, policies, or performance. Each provider maintains its own terms, policies, and guidelines, which are available on that provider's own website and which may change from time to time.

You represent, warrant, agree, and covenant that you have read and understood the applicable terms, policies, and guidelines of each Third-Party Provider named below — not limited to their terms of service and privacy policies — that you will continue to review the most recent versions of those documents on an ongoing basis, and that you will comply with all such terms, policies, and guidelines as they may be updated from time to time. It is your responsibility to locate and review the most current versions on each provider's website. The description next to each provider reflects only how we use it, and is not a characterization of that provider.

• Supabase — we use it for our database, authentication, and file storage.
• Stripe — we use it for subscription billing and payment processing. Your card details are provided directly to Stripe; we do not receive or store your full card number.
• Anthropic (Claude) — we use it to power AI features such as receipt scanning, part identification, parts pricing, and document Q&A (Questions and Answers). Receipt images, part photos, and documents you submit to those features are transmitted to Anthropic for processing. Under Anthropic's commercial API terms, content submitted through the App is not used to train Anthropic's models and is deleted from Anthropic's systems in the ordinary course, typically within about 30 days.
• Replicate — we use it for certain AI image-processing features. Photos you submit to those features are transmitted to Replicate for processing.
• Vercel — we use it to host the App and run its server-side functions.
• Resend — we use it to deliver transactional email (account confirmation, billing receipts, and service notices). It processes your email address, display name, and the contents of those messages.
• Cloudinary — we use it to host and process video you upload to the Media feature.
• Sentry — we use it for error and performance monitoring; it may receive your account identifier and technical diagnostic data.
• Google / YouTube — the How-To Videos feature uses YouTube API Services. By using that feature you agree and covenant to be bound by the YouTube Terms of Service and acknowledge that data collected by Google is handled under the Google Privacy Policy, each available on the respective provider's website; those documents may change, and it is your responsibility to locate and review the current versions. We store only video identifiers and basic metadata (title, channel, thumbnail); videos play through YouTube's embedded player.
• Amazon Associates and the eBay Partner Network — some "find this part" and buy links are affiliate links. If you click one and make a purchase, Riggs Built may earn a commission at no additional cost to you. As an Amazon Associate, we earn from qualifying purchases. These programs may set their own cookies when you click a link, governed by their own policies as described above.

Riggs Built includes optional public features — a community feed and shareable public build pages. These are off by default. Your content becomes public only when you choose to (a) mark a build as public, and (b) opt in, per photo, to share it to the community.

When a build is public, the following may be visible to anyone — including on search engines, as public build pages are indexed: your display name; the vehicle's year, make, model, and the specs you enter; your build description and photo captions; your cover photo and any photos you opt in to share; and the name or part number of parts you choose to surface.

We never make public your expense amounts, costs, or the vendor you purchased from. You stay in control — you can make a build private or remove a shared photo at any time (search engines may take time to drop cached copies).

You agree and covenant that you are responsible for removing personal or sensitive information — such as license plates, VINs, faces, addresses, or documents — from your photos before you make a build or photo public. We offer an optional blur/redaction tool as a convenience, but it is manual and does not automatically detect or remove such information; you must apply it yourself and confirm the result before sharing. Riggs Built is not responsible for personal or sensitive information you choose to make public or fail to redact.

Access — view all your data at any time via the App and account page. Export — export your expense data as a CSV (Comma-Separated Values) file from the expense tracker. Deletion — delete your account and all associated data at any time from the account page; all data is permanently deleted within 30 days.

For GDPR (General Data Protection Regulation) requests: privacy@riggsbuilt.com. For CCPA (California Consumer Privacy Act) requests: privacy@riggsbuilt.com.

Active accounts — your data is retained for as long as your account is active. Deleted accounts — all personal data is permanently deleted within 30 days of account deletion. Receipt images — deleted immediately when you delete the associated expense record or your account. We reserve the right, at our sole discretion, to delete, remove, or disable access to any data or content at any time, with or without notice, for any reason or no reason.

You represent, warrant, agree, and covenant that you are at least 18 years of age and that you have the legal capacity and authority to enter into and be bound by this Policy and the Agreement.

The App is not directed to, and we do not knowingly collect personal information from, anyone under the age of 18. If you believe that someone under 18 has provided us with personal information, please contact us at privacy@riggsbuilt.com and we will take steps to delete it.

You agree and covenant that we may update this Policy at any time, and that you will review and comply with the most recent version of this Policy. We may, but are not obligated to, notify you of any changes, and we do not guarantee that we will provide any such notice. It is your responsibility to review this Policy periodically for updates. The "Last updated" date at the top reflects the most recent version. Changes are effective when posted, and your continued access to or use of the App after changes are posted constitutes your acceptance of, and your agreement and covenant to comply with, the updated Policy.

For privacy-related questions or requests, contact us at privacy@riggsbuilt.com.