Privacy Policy

Effective date: October 10, 2026

RECO Data LLC (“RECO Data,” “we,” “us”) operates the PEN Report™ website at penreport.co and the PEN Report app at app.penreport.co (together, the “Services”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to visitors, account holders and anyone who orders or receives a PEN Report.

Information we collect

Information you give us

• Account information: first name, last name, email address and password when you create an account.
• Property requests: the addresses you search and the reports you order.
• Purchase information: the plan you buy, the amount and the date. Payments are processed by our third party payment processor. We do not receive or store your full card number.
• Sample report requests: your name and email when you request a sample report.
• Communications: messages you send us by email or through the chat on our site, and your marketing preference (whether you opted in to news and updates).

Information collected automatically

When you use the Services we and our service providers collect device and usage information, such as IP address, browser and device type, pages viewed, links clicked, the page that referred you, and approximate location derived from your IP address. We collect this through cookies, pixels and similar technologies (see “Cookies and similar technologies” below).

Information about properties and other people

PEN Reports are built from public records and licensed property data. Depending on the report, this can include information about a property’s current or past owners, such as names on recorded deeds, mortgages, liens and permits. We obtain this information from government sources and licensed data providers; we do not collect it from you. If you believe information about you in a report is inaccurate, contact us at support@recodata.co.

How we use information

We use information to:

• create and manage your account and deliver the reports you order;
• process payments and send receipts and service messages;
• respond to support requests;
• send news and updates if you opted in (you can unsubscribe at any time);
• measure and improve the Services, including which pages and features are used;
• show relevant ads for PEN Report on other sites and measure their results;
• protect the Services, prevent fraud and abuse, and verify that sign ups come from people, not bots;
• comply with law and enforce our Terms of Use.

How we share information

We do not sell your personal information for money. We share information only as follows:

• Property data providers: to generate a report, we send the property address you requested to our licensed property data providers.
• Service providers who work on our behalf under contract, including hosting, payment processing, email delivery, customer support and chat (Help Scout), bot protection (Cloudflare), analytics (Google) and advertising measurement (Meta).
• Legal and safety: when required by law, subpoena or court order, or to protect the rights, property or safety of RECO Data, our users or others.
• Business transfers: if RECO Data is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
• With your direction: reports you download are yours to share. We are not responsible for how others use a report you share.

Cookies and similar technologies

We and our partners use cookies and similar technologies for these purposes:

• Essential: keeping you signed in, security and bot protection (Cloudflare Turnstile).
• Analytics: understanding how the site is used (Google Analytics through Google Site Kit, and our hosting provider’s site analytics).
• Advertising: measuring and improving our ads on Meta platforms (Meta Pixel).
• Features: the support chat (Help Scout) and the sample report viewer (Elfsight).

You can block or delete cookies in your browser settings; some features may not work without them. You can opt out of Google Analytics with Google’s browser add-on at tools.google.com/dlpage/gaoptout, and manage Meta ad preferences in your Facebook or Instagram settings. Our site does not currently respond to browser “Do Not Track” signals. Where required by law, we honor Global Privacy Control signals as a request to opt out of targeted advertising.

Some U.S. state laws treat the use of advertising cookies, such as the Meta Pixel, as “sharing” or “targeted advertising.” You can opt out of this at any time by emailing support@recodata.co with the subject “Opt out of targeted advertising.”

How long we keep information

We keep account information and order history for as long as your account is open and as needed to provide reports you purchased, meet tax and accounting obligations, resolve disputes and enforce our agreements. Sample report requests and marketing data are kept until you unsubscribe or ask us to delete them. When information is no longer needed, we delete or de-identify it.

Security

We use reasonable administrative, technical and physical safeguards to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your password private and tell us right away if you think your account has been accessed without permission.

Your choices and rights

• Marketing emails: use the unsubscribe link in any marketing email, or email us.
• Account information: you can update your name and email in your account, or ask us to.
• Access, correction and deletion: you can ask us for a copy of the personal information we hold about you, to correct it, or to delete it, by emailing support@recodata.co.

State privacy rights. Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with privacy laws), you may have the right to know what personal information we collect and how we use it, access it, correct it, delete it, get a portable copy, and opt out of targeted advertising or “sharing.” We do not use personal information to make decisions that produce legal or similarly significant effects about you.

To make a request, email support@recodata.co. We will verify your request by confirming it from the email address on your account. You may use an authorized agent; we may ask for proof of the agent’s authority. We will not discriminate against you for exercising your rights. If we deny your request, you may appeal by replying to our decision email with the subject “Appeal,” and we will respond within the time required by your state’s law.

Children

The Services are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

Where we operate

RECO Data is based in the United States and the Services are intended for users in the United States. Information is stored and processed in the United States.

Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will post the new Policy here with a new effective date and, where appropriate, notify you by email or in the app.

Contact us

RECO Data LLC
New York, NY
support@recodata.co