Privacy Policy

1. Who We Are

Riding Hood Solutions LLC ("RHS," "we," "us," or "our") is a digital executive protection company based in Clarksville, Tennessee. We provide digital vulnerability assessments, ongoing monitoring and data removal services, and cyber safety training.

2. Information We Collect

We collect information you provide directly to us when you:

• Complete our intake forms (name, email, phone, online accounts, assets of concern)
• Purchase services through our website
• Contact us by email or through our booking system
• Enroll in a Trail Guide protection plan

Bunker and Digital Vulnerability Assessment (DVA) intake. Each adult completes their own intake form through an individual link. The form asks for your full legal name, email addresses, phone numbers, home address, date of birth, employer and title, and social media accounts. It also asks about prior incidents and threats, your online presence, account security, data exposure, devices and home network, family and travel, and your priorities for the assessment.

Assessment findings. During a DVA and later checkups, our analysts collect information about you from publicly available sources, such as data broker and people-search listings, public records, known data breaches, social media, and public information about your home, vehicles, and online accounts. They record their findings, screenshots, and notes. You are not required to give us photographs of yourself. This can include photographs of you that our analysts find on publicly accessible websites, and limited information about family or household members (such as name, relationship, and age) where it relates to your exposure.

Bunker household records. For each Bunker household we keep each adult's name, email address, and optional phone number, the status of each onboarding step, a record of the authorizations and consents each adult has given, and the subscription's billing status.

We do not ask you for Social Security numbers, account passwords, recovery codes, or full payment-card numbers. Where a provider needs your Social Security number or identity-verification answers, you give them directly to that provider. Please do not send sensitive personal information to us by ordinary email.

We also collect limited technical data (IP address, browser type, pages visited) through standard server logs and analytics.

3. How We Use Your Information

We use the information we collect to:

• Deliver the protection services you've enrolled in
• Process payments and manage your subscription
• Communicate with you about your account and service updates
• Conduct your Digital Vulnerability Assessment
• Fulfill data removal requests on your behalf

We do not sell your personal information to third parties.

4. Data We Handle on Your Behalf

As part of our DPP services, we handle sensitive personal information about you (name, address, phone numbers, email addresses, social media accounts, and similar data) in order to find and remove that information from data brokers and public records sites. This data is handled with strict confidentiality.

Households with two adults. Each adult in a Bunker household has their own right to privacy, regardless of who pays for the subscription. Each adult completes a separate intake and receives a separate assessment. An adult's reports, individual findings, incident details, and communications with us are private to that adult by default, and we send them to that adult's own contact details. Information one adult gives us about the other is treated as private to the adult who provided it.

We share one adult's information with the other only as that adult has authorized in writing, and an unanswered or unclear choice means no sharing. Without that authorization, the household report contains only overall household service status, security recommendations that apply to both adults, and matters concerning assets or accounts the adults hold jointly. The paying adult receives billing notices, receipts, and subscription status, which do not include either adult's individual findings.

We may disclose information without authorization only where required by law, or where we reasonably believe disclosure is necessary to prevent imminent harm to a person.

5. Data Storage and Security

Our website, intake forms, and internal systems are served over encrypted connections (HTTPS/TLS). Intake and assessment records are kept in a database and private file storage that our hosting provider encrypts at rest. Access to client records is limited to authorized RHS personnel, who sign in with multi-factor authentication. Each intake form is reached through an individual link that stops working once the form is submitted.

Payment card details are entered on Stripe's payment page and stored by Stripe. We do not receive or store your full card number.

No system is completely secure, and we cannot guarantee absolute security. If a security incident involves your personal information, we will notify you as required by applicable law.

6. Third-Party Service Providers

We work with third-party providers to deliver our services, including:

• Stripe — payment processing. Stripe receives the paying customer's name and email address from us, and the card details the customer enters.
• Third-party identity monitoring and identity restoration providers — identity and credit monitoring, and identity theft resolution. We send the provider your name and email address to create your enrollment invitation. You activate your own account and give any Social Security number or identity-verification answers directly to the provider.
• Optery — removal from people-search and data broker sites. We send Optery the information it needs to enroll you, such as your name, email address, date of birth, and city, state, and ZIP code. Optery acts under a limited power of attorney that you sign yourself, and shares your name, age, and city and state with the data brokers it contacts. As administrator of your enrollment, we can view your Optery exposure results and removal status.
• Cal.com — appointment scheduling
• Hosting, email delivery, analytics, and error-monitoring providers — these process information on our behalf to run our website, intake forms, and internal systems and to deliver our emails.
• Research tools — during an assessment, our analysts use third-party breach-lookup, search, and mapping tools, which can involve entering identifiers such as your name, email address, or home address into those tools.
• Facial-search services (optional) — a facial-recognition search looks for places where photographs of your face appear online. We run one only if you have given your own separate, explicit written authorization. If you have, we submit photographs of you that our analysts found on publicly accessible websites to third-party facial-search services. Those services process the photographs under their own terms and privacy policies, and we do not control how they store or use a photograph once it is submitted. We keep the photographs we used and the search results in your private assessment record. Each adult decides for themselves, and declining does not affect the rest of your assessment.

For the Bunker password manager, VPN, and authenticator tools, you create and control your own accounts with those providers. We do not hold or ask for those account credentials.

Each provider operates under their own privacy policy and data handling agreements.

7. Your Rights

You have the right to access, correct, or delete your personal information held by us. To exercise these rights, contact us at info@ridinghoodsolutions.com.

Authorization. Each adult authorizes their own assessment on their own intake form. Data removal through Optery requires a limited power of attorney that you sign personally, and sharing your information with another adult in your household requires your own written choice. A facial-recognition search requires your own separate written authorization and is never a condition of receiving an assessment. You may change or withdraw an authorization by contacting us. Changes apply from the time we process them and do not reverse earlier authorized disclosures. Withdrawing a facial-recognition authorization stops future searches but cannot recall photographs already submitted.

Retention. We treat two kinds of records differently. Administrative records, such as signed agreements and authorizations, enrollment and service-status records, and billing records, are kept for as long as we need them for tax, accounting, legal, and dispute purposes. Sensitive assessment information, such as your intake responses, assessment reports, findings, photographs, screenshots, and analyst notes, is kept while you receive services, because we need it to deliver them. After services end, we keep it only while we have a continuing service, legal, or dispute-related need for it. We do not delete it automatically on a fixed schedule.

Deletion requests. You may ask us in writing, at any time, to delete your sensitive assessment information. We will delete it from our active systems unless the law requires us to keep it, and we will confirm to you when this is done. Copies may remain in our backups for a time afterward. Deleting this information while you receive services may limit the services we can provide to you. Each adult in a household makes their own request for their own records. Our service providers keep their own records under their own policies, and you may also contact them directly.

8. Contact

Riding Hood Solutions LLC
Clarksville, TN
info@ridinghoodsolutions.com