Privacy Policy

How we handle your information

Last updated October 21, 2026

Privacy is not paranoia. It is protection. This is how we treat your information, on both of our sites (ibgfortified.com and bestfortifiedpay.com):

What changed on October 21, 2026. An earlier version of this policy said our own servers kept access records and a security log. Both sites now run on Cloudflare's network. We no longer run web servers, so we no longer keep either one, and the sections below now describe how Cloudflare and our email provider handle your information. We collect less than before, not more.

This policy covers bestfortifiedpay.com, operated by Best Pay LLC ("Best Pay," "we," "us"), including the Watertight Integrity marketplace it fronts. It explains what we collect, why, and how you can control it. Our evidence site, ibgfortified.com, follows the same principles above and the same shared sections below, with additions of its own.

What this site collects

Products that are paused

Online checkout, the Verifier Kit download page, Membership and License subscriptions, countersigning and Evidence Export are paused while the site moves, so none of the information those services used to collect is being collected now. If you buy one of them from us by email, we keep the details of your order, which are your name, your email address, what you bought, the amount and the payment record from Stripe. We use them to deliver what you bought and for accounting, tax and legal records.

How we use it

What Best Pay does not currently do

Best Pay does not hold customer funds in a wallet, act as a payment intermediary between a homeowner and a contractor, or process peer-to-peer transfers. When you pay Best Pay, it is for Best Pay's own products and services, or for Watertight Integrity's own service fee. See our Terms of Service for the current scope of what is live.

Data retention

We keep what you email us for as long as we need it to answer you and to run Watertight Integrity and Best Pay, or until you ask us to delete it. Order and payment records are kept for as long as we need them for accounting, tax and legal purposes. If we ever seal a record in our evidence ledger, it is append-only by design and cannot be altered or deleted once written; that is what makes it tamper-evident. We do not keep server records of our own.

Who handles your request

Both sites are delivered through Cloudflare. When you open a page, your request goes to Cloudflare's network, which sends our pages back to you. To do that, and to protect against attacks and abuse, Cloudflare necessarily sees your IP address, the time, the page you asked for and your browser type, and it keeps records of connections under its own policies, which we do not control. The networks your request passes through may do the same.

We do not run a web server of our own, we do not keep access records, and we do not run any logging, analytics or tracking of our own. Cloudflare's dashboard shows us totals, such as how many requests a site received and roughly which countries they came from, and it can show us a security event, for example a blocked request, which may include an IP address. We look at these only to see whether our sites are working and to protect them, and we do not use them to identify or follow visitors.

Cloudflare's security systems may, rarely, ask a visitor who looks like an automated or attacking program to pass a check, and that can involve a cookie that Cloudflare sets. Our own pages never set one.

Sharing

We do not sell personal information, we do not buy it, and we do not share it with advertisers or for marketing. We share it only with the companies that help us run our sites, and only so they can do that:

We may also disclose information if a law, a court order or a valid legal request requires it, or to protect our rights, our systems or other people from harm.

Security

Our sites are served over secure HTTPS connections. No system is perfectly secure, and we cannot promise that nothing will ever go wrong. If you find a security problem on either site, please tell us at ibg@bestfortifiedpay.com before you tell anyone else, and we will respond as soon as we can. Our security contact is also published at /.well-known/security.txt on each site.

Your choices and your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete what you have sent us, by writing to ibg@bestfortifiedpay.com from the address in question. We will answer within 45 days. We will do what you ask unless we are required to keep the information, or need it to keep an accurate record (for example, order and payment records we must keep for tax and legal reasons, and sealed records, which cannot be edited entry by entry). Cloudflare and our email provider hold their own records under their own policies, and you would need to ask them about those. If you live in Texas or another state with a privacy law that gives you rights, write to us and we will honor the rights that law gives you.

Because our own pages do not track you, there is nothing of ours to opt out of, and a "Do Not Track" or Global Privacy Control signal changes nothing on them.

Children

Our sites are not directed at children, and we do not knowingly collect information from children.

Changes

If we change this policy we will change the date above and post the new version here. If a change means we collect more, or use what we hold in a new way, we will say so at the top of this page.

Contact

Best Pay LLC, Fort Worth, Texas. ibg@bestfortifiedpay.com. See also our Terms of Service.

← Back to Watertight Integrity