What we collect, and what we do with it.
Last updated: August 29, 2026
Garrison Risk Review ("Garrison," "we," "us") provides a flat-fee, independent underwriting risk review for VA home loan buyers. This policy explains what information we collect when you use our website and purchase a report, why we collect it, and how it's handled. We've tried to write it in plain English rather than legal boilerplate.
Information you give us
When you fill out our intake form after purchasing a report, we collect the details needed to run your underwriting analysis: your name, email, phone number, current duty station, PCS timeline, VA disability rating status, prior VA loan history, the property address and characteristics, financing terms, local tax details, and expense and rent estimates you provide.
If you contact us by email or through the contact form, we keep that correspondence so we can respond and maintain a record of the conversation.
Payment information
All payments are processed by Stripe. We never see or store your full card number, expiration date, or CVC — that information goes directly to Stripe, which is PCI-compliant and handles it under its own privacy policy. We receive confirmation that a payment succeeded, the amount, and the email address you provided at checkout.
How we use your information
- To generate your VA Home Underwriting Report (PDF) and supporting workbook.
- To research publicly available property, tax, and rental market data relevant to the address you submit.
- To email you your report, respond to questions, and send necessary transactional updates about your order.
- To detect and prevent fraud or misuse of the service.
We do not sell your personal information, and we do not use it for advertising or marketing to third parties.
Third-party services we rely on
We use a small number of third-party services to operate the business, each of which processes a limited slice of your information solely to perform its function for us:
- Stripe — payment processing.
- Resend — delivering your report and account emails.
- Vercel — hosting the website and application.
- Anthropic (Claude) — researching publicly available property, tax, and market information used to complete your report. We do not send your name, email, or payment details to this service — only the property-level details needed to complete the research.
How long we keep your information
We retain intake form submissions and generated reports for as long as needed to deliver the service, respond to follow-up questions about your report, and comply with our own tax and accounting recordkeeping obligations. If you want your information deleted sooner, email us at review@garrisonriskreview.com and we will honor reasonable deletion requests, except where we're required to retain records (for example, payment records for tax purposes).
Your rights
Depending on where you live, you may have the right to request access to, correction of, or deletion of your personal information, or to object to certain uses of it. To exercise any of these rights, email review@garrisonriskreview.com and we'll respond promptly.
Cookies and analytics
Our website may use basic, privacy-respecting analytics to understand traffic and improve the site. We do not use cross-site advertising trackers, and we do not sell browsing data.
Security
We use industry-standard safeguards (encrypted connections, access controls, and reputable third-party infrastructure) to protect your information. No method of transmission or storage is 100% secure, but we take reasonable steps to protect what you share with us.
Changes to this policy
If we make material changes to this policy, we'll update the date at the top of this page. Continued use of the site after changes means you accept the updated policy.
Contact us
Questions about this policy or your information? Email review@garrisonriskreview.com.