Owed & Found Privacy Policy
DRAFT FOR LEGAL REVIEW. NOT FINAL. Prepared 2026-07-21. Counsel must review before public launch, with particular attention to Sections 7, 9, and state-specific rights.
Effective date: [EFFECTIVE DATE] Operator: [OPERATING ENTITY, INC.] ("Owed & Found," "we," "us")
1. What this policy covers
This policy explains what information we collect when you use the Owed & Found website and applications, how we use it, and the choices you have. By using the Service you agree to this policy.
2. Information we collect
Information you provide:
- Account: name, email address, password (stored as a secure hash by our authentication provider), and optional phone number.
- Search inputs: your name, name variants you add (such as a maiden name), current and prior addresses, and the states you ask us to search.
- Family search (optional): a family member's name and last known state(s), provided by you.
- Documents you upload to support claims (such as proof of address).
- Communications you send us (support requests, concierge inquiries, partner-interest forms).
We do not ask for your Social Security number to search, and no automated part of the Service collects, stores, or transmits your SSN. If a government agency's own form requires an SSN, you enter it yourself directly on that agency's site during an assisted filing session; it does not pass through or get stored by Owed & Found.
Information collected automatically: log data (IP address, device and browser type, pages viewed, timestamps), and basic usage events (scans run, claims created) used for security, error monitoring, and improving the Service. Error reports may include the route, an error message, and your user ID so we can fix problems affecting your account.
Information from public sources: the Service queries publicly available government and institutional databases using the search inputs you provide, and stores the possible matches returned so you can review and act on them.
3. How we use information
To run your searches and show possible matches; to prepare claim information and checklists at your direction; to run recurring re-scans and send you alerts if you enable them; to process subscription payments; to provide support; to send service and account emails; to monitor errors, security, and abuse; and to comply with law. We do not use your personal information to train third-party AI models.
4. How we share information
We share personal information only with:
- Service providers that operate the platform under contract: hosting and database, authentication, payment processing (Stripe receives your payment details directly; we do not store full card numbers), email delivery, and file storage. They may use your information only to provide services to us.
- Optional partner programs, only with your explicit opt-in. If you enable the option to be connected with a licensed professional or a claim-funding provider, we share only the information needed for that specific introduction, and only after your consent to it. These options are OFF by default. We do not sell your personal information, and we do not share it with data brokers.
- Legal and safety: if required by law, subpoena, or to protect the rights, safety, or property of users, the public, or Owed & Found.
- Business transfers: if we are involved in a merger, acquisition, or sale of assets, information may transfer subject to this policy's commitments.
5. Cookies and analytics
We use essential cookies and local storage for login sessions and security. If we add analytics, they will be privacy-respecting and used for aggregate product improvement; we will update this policy accordingly.
6. Data retention
We keep account information while your account is active. Search results, claims, and activity history remain available to you in your account. Uploaded documents can be deleted by you at any time in the app. If you close your account, we delete or de-identify personal information within a reasonable period, except records we must keep for legal, billing-dispute, audit, or fraud-prevention purposes (including claim approval records, which we retain as evidence of your authorizations).
7. Your rights and choices
You may access and update your profile in Settings, delete uploaded documents, export your claim information, disable re-scan alerts, and close your account by contacting concierge@owedandfound.com. Depending on your state, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain sharing. To exercise these rights, email concierge@owedandfound.com; we will verify your identity before acting and respond within the time required by applicable law. We do not discriminate against you for exercising your rights. [COUNSEL REVIEW: add state-specific sections (California, Colorado, Virginia, etc.) as applicable at launch.]
8. Security
We use industry-standard safeguards: encrypted connections (TLS), encrypted storage for documents, hashed passwords via our authentication provider, role-restricted database access, and audit records for claim approvals. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify you as required by law.
9. Family members' information
If you use family search, you provide another person's name and state. We use it only to run the search you requested and display possible matches to you. We do not contact that person, and we do not permit filing on a living adult's claim without that person's own approval and identity verification. If someone asks us to remove their information submitted by another user, we will honor it. [COUNSEL REVIEW: third-party data handling.]
10. Children
The Service is for adults 18 and over. We do not knowingly collect information from anyone under 18. If we learn we have, we will delete it.
11. Changes to this policy
We will post updates here and update the effective date. For material changes, we will notify you in the app or by email and, where required, ask for renewed consent.
12. Contact
[OPERATING ENTITY, INC.] concierge@owedandfound.com [MAILING ADDRESS]