Privacy Policy

The short version

Verifund is software that property managers and landlords use to keep track of properties, tenants, leases, rent, expenses, maintenance, reserves and investor distributions. Tenants they invite can see their own records in the Verifund renter app.
Verifund is in free early access. Access is by invitation after a demo request. Nothing is charged, and we do not collect card or other payment information. If paid plans start, we will update this policy and email organization admins at least 30 days before, and no one is moved onto a paid plan unless an admin chooses one at checkout (section 1.4).
If you are a tenant, your landlord or property manager controls the records they keep about you in Verifund. We store and process those records for them. Ask your manager first if you want to see, fix or delete them (section 13.3).
We do not sell personal information, and we do not use or share it for targeted advertising. Our website and web app do not use advertising or analytics trackers. The one thing we tell an advertising service is that a demo request happened, when the person reached us from one of our ads (section 4.1).
If you request a demo, we keep the details you send, email them to our founder, and send you to Calendly to book a time (section 3.1).
The AI portfolio assistant sends a summary of a manager's portfolio, which can include tenant names and balances, to Anthropic to write an answer. Anthropic's terms do not allow it to train its models on that data, and we have not given it permission to (section 5). AI answers can be wrong.
We use a short list of named service providers, such as Supabase, Railway, Resend, Google, Calendly and Anthropic, and we tell organization admins in advance before we add one that will receive their records (section 6.2).
Online rent payment is not currently offered. Rent amounts in Verifund are records that managers enter. Verifund does not receive, hold or move tenants' or landlords' money.
Verifund does not send text messages today. If we start sending text messages, you can reply STOP to opt out or HELP for help, and message and data rates may apply. We never share mobile numbers or text message consent for marketing (section 7).
Anyone can ask us for a copy of their information, or ask us to correct or delete it, by emailing chasemcdonald@verifundsolutions.com. Exporting an organization's records, deleting an organization, and deleting a manager, staff or investor login are also done on request by email. Renters can delete their own login in the renter app. If a property manager entered the information, we pass the request to that manager, who decides, and some records we must keep (section 13).

1. Who we are and what this policy covers

Verifund Technologies LLC ("Verifund," "we," "us," "our") is a South Dakota limited liability company based in Sioux Falls, South Dakota. We make software for property managers and landlords, their staff, and the investors they work with. This policy applies to:

our website at verifundsolutions.com, including the demo request form;
the Verifund web app at www.verifundsolutions.com/verifund;
the Verifund renter app for iPhone and Android; and
the emails we send, and any text messages we send in the future

(together, the "Service").

1.1 People this policy covers

Website visitors who browse our website.
Demo requesters who fill out our "Request a demo" form or book a call with us.
Account holders who create a Verifund account after we approve their sign-up or an organization invites them, and the organizations they create (our "customers").
Organization members an organization invites as admins, members or viewers.
Investors an organization invites to see property finances, and whose ownership shares and distributions it records.
Tenants and renters who are invited to or use the renter app, and tenants, co-tenants, prospective renters on a waitlist, vendors and other people whose information an organization enters into Verifund, even if they never use Verifund themselves.

1.2 What this policy does not cover

This policy does not cover services run by other companies, even when we link to them, such as Calendly's booking pages, the App Store and Google Play, and, if paid plans start, Stripe's checkout and billing pages. Their own privacy policies apply. It also does not cover what a landlord or property manager does with information outside of Verifund, such as in their own email, files or other software.

1.3 How this policy relates to our other documents

Our Terms of Service set the rules for using Verifund, including the acceptable use rules, and our Refund Policy explains that nothing is charged during early access. This Privacy Policy explains our information practices. It is a notice of those practices, not a contract. It does not add to or change the Terms of Service or any other agreement, and it does not make anyone a third-party beneficiary of those agreements. Nothing in it limits any right you have under the law.

1.4 Free early access

Verifund is currently offered as free early access. Property managers and landlords request a demo, and if we approve their sign-up, they can create an account. People an organization invites, such as staff, investors and renters, can also create an account. There is no charge, no free trial and no subscription during early access, and we do not collect card or other payment information.

We plan to offer paid plans later. Before any paid plan starts, we will update this policy and email the admins of every organization using Verifund at least 30 days in advance. No one is moved onto a paid plan, or charged, unless an admin chooses a paid plan and accepts its terms at checkout. If paid plans start, Stripe will process payments (section 6.2).

Early access can end. Except after a breach of our Terms of Service, we will email the organization's admins at least 30 days before it does, as section 21.3 of those Terms describes, so they can ask us for an export first.

2. Property managers control the records they enter

When a property management organization uses Verifund, the organization decides what information to enter about its tenants, prospective renters, investors, vendors and staff, who in the organization can see it, how long to keep it, and when to change or delete it. For those records, we act on the organization's behalf. We store and process them to provide Verifund to that organization, as our Terms of Service describe. We also use them in the limited ways this policy explains and our Terms of Service allow, such as keeping the Service secure, preventing fraud and abuse, and meeting legal obligations.

Verifund provides software only. We are not a landlord, property manager, real estate broker or agent, lender, bank, escrow or trust account, consumer reporting agency or tenant screening company, and we are not a party to any lease. We do not set rent, fees or deposits, decide who may rent, or collect, hold or pay out money.

2.1 What organizations are responsible for

An organization that enters information about other people is responsible for:

having the right to collect that information and put it in Verifund;
giving tenants, investors and others any privacy notice the law requires, and getting any consent the law requires, including, if we offer text message invitations, consent to receive one;
keeping the information accurate;
answering requests from the people the information is about; and
deciding which records it must keep under landlord-tenant, tax, trust account and other laws, and keeping its own copies, for example by asking us for an export, before leaving Verifund.

We do not ask for Social Security numbers, driver's license or other government ID numbers, bank or card account numbers, or health, disability or immigration details, and organizations should not enter them into Verifund, except as part of a signed lease or other document the organization must keep. We recommend blacking out ID and account numbers before uploading a document. If an organization uploads this kind of information anyway, we process it only to provide the Service to that organization. We never sell it or use it for advertising.

2.2 If you are a tenant or renter

Your relationship is with your landlord or property manager. They are responsible for how they collect and use your information, for any notice or consent they owe you, and for your lease and rent balance. Questions about what your manager recorded about you, and requests to see, correct or delete it, should go to your manager first. Section 13.3 explains how we help.

3. Information we collect, by source

3.1 Information you give us directly

If you request a demo:

Your full name, email address, phone number, location (city and state) and number of rental units.
Technical details that help us stop spam and abuse: the website address the form was sent from, your browser's user agent (its name and version), and the date and time. We do not save your IP address with your request. We save only a scrambled code made from it with a secret key (a keyed hash), used to limit how many requests can come from one connection. Our hosting providers' technical logs may still record your IP address (section 3.3).
Where your request stands: whether we approved or declined it, when it was sent to our founder, and when we emailed you a link to create your account.
Which ad or link brought you, when there was one. If you reach the demo page from an advertisement, a campaign link or a shared link that carries tracking tags, we keep those tags with your request so we know which ones bring people to us. Most of them describe the link rather than you, such as the campaign name. One does not: the advertising service's click identifier belongs to your particular click, which is why we treat it as personal information and say in section 4.1 exactly what we do with it. If you reached us by typing our address or following a plain link, there is nothing to keep.

If you book a call on Calendly: our website links to our Calendly booking page, and after you send the demo form we send you there with your name and email filled in. Because your name and email are part of that link, they may also be saved in your browser history. Calendly collects the details you enter there, such as your name, email, the time you choose and any answers you give, under Calendly's own privacy policy, and shares them with us. Our Calendly account adds bookings to the Google calendar our founder uses for demos.

If you create an account:

Your name, email address and password. You must confirm your email address before you can use your account. Supabase, our sign-in provider, stores passwords only in scrambled (hashed) form, and we do not see them.
A record of the version of our Terms of Service and this Privacy Policy in place when you checked the agreement box after confirming your email, the date and time, and your browser's user agent.
The organizations you belong to, your role in each (admin, member, viewer, investor or renter), and the one you last had open.

Payment information: none during free early access. We do not collect card, bank or other payment information, and there is no billing, trial or subscription. If paid plans start, we will update this policy before collecting billing information from organizations that choose to subscribe. Card details would then be collected and stored by Stripe, not by Verifund (section 1.4).

If you use the renter app:

The name, email address and phone number you give when you set up your renter profile. These are saved to your tenant record and are visible to your property manager's organization.
Rent payments you report for your manager to review, maintenance requests you submit (including any entry instructions you add), and related notes.

If you contact us: the messages you send us by email, and any privacy request, feedback or other information you choose to include. If we start sending text messages, this will also include your replies to them (such as STOP or HELP).

3.2 Information organizations enter about other people

Property managers and their staff enter information into Verifund, often about people who never use Verifund themselves. Depending on how the organization uses Verifund, this can include:

Properties and units: names, addresses, types, and unit details such as bedrooms, bathrooms, size and asking rent.
Tenants: names, email addresses, phone numbers, status, and notes the manager writes.
Leases: rent, security deposit, late fee, due day, start and end dates, who is on the lease, and move-in and move-out dates.
Signed lease documents the manager uploads, with the file name, type, size, who uploaded it and when. Leases can contain sensitive details, such as dates of birth or ID numbers.
Rent records: rent charged each month, payments and credits the manager records, balances owed, and payments a renter reports along with the manager's review.
Money records: expenses, vendors, operating, reserve and distribution account balances and targets, and account transactions. These are bookkeeping records, not bank, trust or escrow accounts.
Investors: the investor's name and email address from their Verifund account, ownership percentages and distribution amounts.
Maintenance tickets: descriptions, priority and status, dates, entry or access instructions (which can include door or lockbox codes), vendors, costs, notes, who reported the issue and who is assigned.
Waitlist entries: names, email addresses, phone numbers, preferred move-in dates and notes about prospective renters.
Invitations: the email address of the person invited, their role, the tenant and lease a renter invitation is for, the last four characters of the invite code (the code itself is stored only in scrambled form), who created it, when it expires, and when it was accepted or revoked. Renter invite codes are created by an organization's admins in Settings. If we start sending text message invitations, we will also keep the mobile number invited and the manager's confirmation that the person agreed to receive the text, including who confirmed it and when.
Activity history: who in the organization created or changed a record, when, and a short description of the change, which can name the tenant or record involved.

Online rent payment is not currently offered. Rent and payment amounts in Verifund are records that managers enter, or payments renters report for their manager to review. Verifund does not receive, hold or move tenants' or landlords' money. If we offer payments in the future, we will update this policy first.

3.3 Information collected automatically

Sign-in and security records: when you sign in, our sign-in provider records the time, your IP address and your browser or device details, to keep your session working, to protect accounts, and to look into misuse.
Technical logs: our hosting providers keep logs of requests to our website, web app and servers, such as IP address, browser type, the address requested, the time and any errors.
AI assistant conversations: the questions you ask, the answers and the conversation titles (section 5).
AI assistant usage records: who asked a question and when, whether it was answered, and its size and cost, which we use to apply usage limits. They are deleted when the organization is deleted.
Browser storage: small pieces of information our web pages keep in your browser (section 9).
Mobile app: the renter app's version and the device details your phone sends when the app connects to our servers.

We do not use analytics, advertising or session recording tools on our website or web app.

3.4 Information from other companies

Calendly tells us about calls you book with us.
Our email provider keeps delivery records, such as whether an email was delivered or bounced, that we can look up. If we start sending text messages, our text message provider will tell us whether a text was delivered and whether a number opted out.
Stripe, if paid plans start, will tell us whether a subscription payment succeeded, failed, was refunded or was disputed, and limited card details such as the card brand and last four digits.
Apple and Google may share app install, crash and diagnostic information with us if you allow it in your device settings. We never receive your App Store or Google Play password.

Verifund does not connect to bank accounts, credit bureaus or accounting software, and we do not buy information about people from data brokers.

4. How we use information

We use information to:

Answer demo requests: review your request, contact you by email or phone call about your demo and about Verifund, decide whether to approve your sign-up, and email you a link to create your account.
Provide the Service: create and run accounts and organizations, show records to the people an organization authorizes based on their role, and show renters their own lease, rent record, signed lease and maintenance requests.
Handle invitations: create invite codes and let invited people join the right organization. If we start sending invitation emails or text messages, we will use information to send them when an organization asks us to and to honor opt-outs.
Answer questions in the AI assistant when you ask one.
Plan for paid plans: tell organization admins about any paid plan at least 30 days before it starts. If paid plans start, we will use billing information only for organizations that choose to subscribe, as the updated policy will describe.
Keep the Service secure: confirm email addresses, limit sign-up to approved people, sign people in, prevent fraud, spam and abuse, limit excessive use, and investigate security problems.
Give support and respond to requests.
Fix and improve the Service, using technical logs, account activity and the statistics described below. We look at the contents of an organization's records only when needed to give support someone asked for, fix a problem, keep the Service secure, or meet a legal obligation.
Communicate about your account, changes to the Service, and changes to our terms or this policy, and, if you are a customer, send occasional news about Verifund, which you can unsubscribe from (section 8).
Meet legal obligations and protect rights: keep records of acceptance of our terms and of privacy requests, respond to lawful requests, enforce our Terms, and establish, exercise or defend legal claims.

We may create statistics from technical logs and account activity that do not identify any person or organization, such as how many organizations use a feature, and use them to run and improve Verifund and to publish general statistics about Verifund. We do not create de-identified or combined data sets from the contents of organizations' records, such as tenant, lease or rent records. We will not try to re-identify these statistics, and we do not sell them.

4.1 What we do not do

We do not sell personal information.
We do not use or share personal information for targeted advertising or cross-context behavioral advertising, with one narrow exception we want to be plain about. When we advertise and someone reaches the demo form from one of our ads, we may later tell that advertising service that a demo request happened, identified only by the click identifier that service put in your own link. We send no name, email address, phone number or anything you typed. We do it to learn which ads bring people to us, not to follow you or to aim ads at you elsewhere. If your browser sends a Global Privacy Control signal, or you ask us at chasemcdonald@verifundsolutions.com, we leave your request out of that entirely.
Verifund does not decide whether anyone may rent, renew or stay in a home, or get credit, a job or insurance, and we do not use personal information for profiling to make those decisions. The app calculates figures such as balances and late status from the records an organization enters, and people at the organization make decisions.
We do not use organizations' records to train AI models, and we have not allowed our AI provider to do so. Its terms do not allow it either (section 5).
We do not combine tenant records across organizations. We do not create credit scores, tenant screening reports or tenant ratings, and we do not give one organization's tenant payment records to anyone else, except our service providers (section 6.2) and as section 6.3 describes for legal requirements and business changes. The AI assistant can summarize an organization's own rent records, such as how many months on a lease were paid late, only for that organization.
We do not use the contact details of tenants, prospective renters or investors that an organization entered to market to them.

5. The AI portfolio assistant

People who use the manager side of Verifund (admins, members and viewers) can ask the Verifund assistant questions about their organization's portfolio, such as which rent is late or what needs doing this week. The assistant is read-only: it cannot change, send or pay anything. To write an answer, we send the following to our AI provider, Anthropic:

the question, and up to the last eight messages of that conversation;
a summary of the organization's portfolio: property names and addresses, unit names, unit and occupancy counts, rent billed, collected and owed, the number and amount of cash or check payments waiting for review, account and reserve balances and targets, maintenance and repair spending (including expense titles and vendor names), open work orders (titles, priority, status and dates), and upcoming lease renewals, move-ins and move-outs, which can include tenant names; and
for households behind on rent: the names of the people on the lease, the property and unit, the amounts owed by month, how long the rent has been late, whether they have moved out, and a summary of their payment record on that lease (such as how many months were paid on time or late).

The summary does not include tenant email addresses, phone numbers, notes, waitlist entries, lease documents, or investor names, ownership splits or distributions. If you are a tenant, your name and rent balance may be sent when your manager asks the assistant a question.

Anthropic processes this information to generate the answer under its commercial terms and data processing addendum with us. As of September 16, 2026:

Anthropic's Commercial Terms of Service say Anthropic may not train its models on the content we send through its services, and we have not given Anthropic permission to do so.
Anthropic says it automatically deletes the inputs and outputs of its API services within 30 days. If its automated safety systems flag a request as violating its usage policy, Anthropic says it may keep those inputs and outputs for up to 2 years and its safety scores for up to 7 years. It may also keep information longer where the law requires or its terms allow.

We save your assistant conversations in Verifund so you can come back to them. In the app, a conversation is visible only to the person who had it. Verifund personnel can open saved conversations only in the limited cases described in section 4. You can delete a conversation at any time from the assistant panel. Conversations are also deleted when the organization is deleted, and when we delete your login at your request (section 10.4). Removing all of an organization's records in the app does not delete saved assistant conversations; each person can delete their own, or an admin can ask us by email to delete them.

AI answers can be wrong. The assistant works only from the records in Verifund, which may be incomplete or out of date, and it can make mistakes even when the records are right. Do not rely on any fact, number or name in an answer without checking it against your records. Answers are information, not legal, tax, accounting or investment advice, and the assistant is not a tenant screening tool. Our Terms of Service do not allow organizations to use the assistant, its answers, or Verifund's payment-history figures (such as late-payment counts or average days late) to screen applicants, to decide whether to rent to, renew or change the terms for anyone, or to decide anyone's eligibility for credit, employment or insurance, and they do not allow starting an eviction based on an assistant answer. Landlords and property managers, not Verifund, make decisions about their tenants.

Admins, members and viewers work with the organization's records, including tenant details, waitlists and signed lease documents. Admins decide who is invited to the organization and what role each person has, and can ask us by email to remove someone's access.
Investors see financial information for the organization's properties, such as rent billed and collected, expenses, reserves and distributions.
Renters see their own unit and lease details, their rent balance and payment history, and the maintenance requests they submitted. Information a renter adds, such as a reported payment or profile details, is visible to the property manager's organization.
Invitations: a renter invitation is a code a property manager gives to the renter. Staff and investor invitations let the invited email address join when that person signs in. When someone joins, the organization sees the name and email address of that account. Verifund does not send invitation emails or text messages today. If we start sending them, they will name the inviting organization.

We use these companies to run Verifund. Most of them process information only on our behalf, under agreements with us. Some also use information for their own purposes under their own privacy policies, as noted below. Before we add a new service provider that will receive an organization's records, we will tell that organization's admins in advance, as our Terms of Service describe.

Supabase: our database, sign-in, lease document storage and server functions. Supabase creates sign-in emails, such as email confirmation, email change and password reset links, which Resend delivers. Supabase stores most of the information in this policy.
Railway: hosts our website and the Verifund web app.
Anthropic: writes answers for the AI assistant. Anthropic may keep flagged content for its own safety work (section 5).
Resend: delivers our emails, including sign-in emails, demo request notices and sign-up approval emails.
Calendly: schedules demo calls (section 3.1). Calendly also handles booking details under its own privacy policy.
Google: provides our company email. Demo request notices and demo bookings currently go to a separate Google email and calendar account our founder uses, which is not a Verifund company account. Demo request notices, bookings, emails you send us and privacy requests are stored in Google's systems. Google also delivers the fonts on our website and parts of the web app under its own terms, so it receives your IP address and browser details when those pages load (section 9).
Apple and Google app stores: distribute the renter app.

Planned uses of service providers. We do not use these services for these purposes today. If we start, we will use them only as described here:

Stripe, if paid plans start: subscription billing, card payments, sales tax calculation, refunds, the billing page where admins update cards and cancel, and billing emails such as receipts. Stripe also uses some of this information for its own purposes, such as preventing fraud and meeting its legal obligations, under Stripe's privacy policy. Online rent payment is not offered.
Twilio and wireless carriers, if we start sending text messages: deliver text message invitations and process STOP and HELP replies.
Resend, if we start sending invitation emails: send those emails.

Legal requirements. We may disclose information if we believe in good faith that the law requires it, such as in response to a subpoena, court order or other lawful request. Unless the law does not allow it or there is an emergency, we will try to tell the affected organization before we disclose its records.
Safety and protection. We may disclose information when we believe in good faith it is needed to protect the rights, property or safety of Verifund, the people who use Verifund or others, to prevent fraud or abuse, to enforce our Terms, or to establish, exercise or defend legal claims.
Business changes. If Verifund is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its business or assets, information may be transferred as part of that deal. Before a deal closes, we give the other party only what it needs to evaluate the deal, under a written duty of confidentiality, and not the contents of organizations' records unless the law requires it. We will require a new owner to protect the information it receives as this policy describes, and we will tell account holders before their information becomes subject to a different privacy policy.
With permission. We share information in other ways only if you, or the organization that controls the record, tell us to, and only in ways consistent with section 4.1.

None of this sharing includes mobile phone numbers or text message opt-in or consent information for anyone's marketing or promotional purposes (section 7.3).

7. Text messages (SMS)

Verifund does not send text messages today. We plan to let property managers invite tenants to the renter app by text. If we send text messages, they will work as described in this section.

If we send text messages, Verifund's automated text messages will be limited to the program described here, and will be sent only when a property manager chooses to invite a tenant by text. We will not send any other kind of text unless you separately agree to it and we update this policy first. We never send marketing texts.

Program Verifund tenant invitations
Sent by Verifund, for the property management organization named in the message
What you get An invitation from your landlord or property manager to join the Verifund renter app, with a link to get started
How often One text each time your property manager sends or re-sends you an invitation. Message frequency varies.
Cost Message and data rates may apply.
Opt out Reply STOP to any message.
Help Reply HELP, or email chasemcdonald@verifundsolutions.com
Carriers Carriers are not liable for delayed or undelivered messages.

7.1 How your number reaches us

If we send text message invitations, your property manager will enter your mobile number in Verifund and choose to invite you by text. Before we send it, the manager must confirm that you are their current or incoming tenant, that you gave them this number, and that you agreed to receive a text message invitation about your tenancy and the Verifund renter app. We will keep a record of that confirmation. You do not have to agree to texts to use the renter app; your manager can give you an invite code instead.

We do not text people on a property's waitlist, we do not send reminders or other texts unless you separately sign up for them, and we use the numbers managers enter only as this policy describes.

A sample message:

Verifund: (organization name) invited you to the Verifund renter app to see your lease and rent balance. Get started: (link) Reply HELP for help, STOP to opt out. Msg & data rates may apply.

7.2 Opting out and getting help

If we send you text messages, reply STOP to any message to opt out. We also accept END, CANCEL, UNSUBSCRIBE, QUIT, REVOKE and OPT OUT, and any other reply or message that clearly asks us to stop, including an email to chasemcdonald@verifundsolutions.com. We stop texts right away when you reply STOP or another opt-out word, and within 10 business days when you opt out another way, such as by email. We may send one text confirming your opt-out. After that, we stop sending Verifund texts to that number, even if a property manager invites you again. If you change your mind, reply START or contact us.

Reply HELP for help, or email chasemcdonald@verifundsolutions.com.

We do not share, sell, or provide mobile phone numbers or text messaging opt-in or consent data to third parties or affiliates for their marketing or promotional purposes. Mobile numbers are stored and processed by the service providers that run Verifund for us (section 6.2), and, if we send text messages, will be sent to our text message provider and wireless carriers only to deliver texts. All other sharing described in this policy excludes text messaging originator opt-in data and consent.

8. Emails we send

Service emails. We send the emails you need to use Verifund, such as: sign-up approval and create-account emails; email confirmation, email change and password reset links; security notices; notices before we end an organization's access or delete its records; notice at least 30 days before any paid plan starts; notices of changes to our terms or this policy; and replies to your requests. You cannot turn these off while you have an account, because they are part of the Service. If paid plans start, organizations that subscribe will also receive billing emails, as the updated policy will describe.

Invitation emails. Verifund does not send invitation emails today. If we start sending them, an invitation email will name the inviting organization, explain why you are receiving it, and link to Verifund. Invitation emails will contain no advertising.

Follow-up and news emails. If you request a demo, we may follow up about your demo and about Verifund. We may also send customers occasional news about Verifund. Every marketing email includes an unsubscribe link and a way to reach us, and we honor unsubscribe requests within 10 business days, and usually much sooner. Unsubscribing does not stop service emails. We do not send marketing emails to tenants, prospective renters or investors whose contact details an organization entered.

We do not use tracking pixels or tracked links in the emails we send through our email provider, Resend. Sign-in emails, which Supabase creates and Resend delivers, and booking emails from Calendly follow those companies' own practices.

9. Cookies, browser storage and similar technologies

We do not use advertising or analytics cookies, tracking pixels, or any technology that follows you across other websites. What we do use:

Our website does not set cookies of its own. After you send a demo request, the demo page saves a short note in that browser tab's session storage, including the Calendly link with your name and email, so the page can still show your confirmation if you come back to it. The page uses the note for up to one hour, and your browser clears session storage when you close the tab. If you arrived from an advertisement or a campaign link, the demo page also holds that link's tracking tags in the same tab's session storage until you send the form, so they can be saved with your request (section 3.1). No cookie is involved, and closing the tab clears them.
The Verifund web app keeps your sign-in session in your browser's local storage so you stay signed in; signing out removes it. It also keeps a few small items needed for sign-up and sign-in to work: the email address waiting for confirmation (in that tab's session storage), a marker for a password step you still need to finish, and scrambled codes for confirmation links already used on that browser. Like any website, your browser may keep copies of the web app's files in its normal cache.
Content from Google. Our web pages load fonts from Google Fonts, and the web app loads some of its components from Google's servers. Google receives your IP address and browser details when that happens, under Google's privacy policy.
Other companies' pages. Calendly's booking pages set their own cookies, for example to prevent fraud, under Calendly's own policies. If paid plans start, Stripe's checkout and billing pages will do the same under Stripe's policies.

You can clear or block browser storage in your browser's settings. If you do, you will be signed out, and parts of sign-in may not work.

We do not sell personal information and we do not aim ads at you, so a "Do Not Track" or Global Privacy Control signal has almost nothing to turn off here. The one thing it does turn off is the measurement described in section 4.1: if your browser sends a Global Privacy Control signal when you send the demo form, we record that and leave your request out of anything we report back to an advertising service. You can also ask us to do the same at any time.

10. How long we keep information

We keep information for the periods below, and then delete it or de-identify it. Section 10.3 explains when we keep something longer.

10.1 While an organization is active

We keep an organization's records while it has access to Verifund, including free early access or other access we have agreed to in writing (such as a pilot), until the organization changes or deletes them. Depending on their role, people in an organization can change or delete many records in the app, and admins can remove all of an organization's records. Some actions keep history on purpose; for example, ending a lease keeps the lease and rent record.

When someone deletes a record in the app, it is removed from our live database right away. A file that belonged to it, such as a signed lease, may stay in private file storage until we remove it; the app tries to remove signed lease files when an admin removes all of an organization's records, and an admin can ask us by email to remove any that remain. The organization's activity history and saved assistant conversations may still mention a deleted record, for example by a tenant's name, until they are deleted. Copies remain in backups for up to 30 days, and with our AI provider as section 5 describes.

10.2 If an organization leaves or its access ends

Stopping use does not delete records. If an organization stops using Verifund, its records stay in Verifund unless an admin removes them in the app or asks us to delete them, or we delete them after the notice described next.
Other than at an admin's request or when the law requires it, we delete an organization's records only after its access to Verifund has ended, and we first email the organization's admins at least 30 days in advance so they can ask us for an export.
An admin can ask us to delete an organization's records by emailing us from the admin's account email address. Because deletion cannot be undone, we confirm the request in writing, email every admin of the organization, and wait at least 7 days so another admin can object; if one does, we may ask for reasonable proof of who is authorized. We delete the records from our live systems within 30 days after the request is confirmed, and copies can remain in backups for up to 30 days after that. Deleting an organization ends access to its records for everyone, including the renters and investors it invited. Ask us for an export first if you need one.
If paid plans start, the email we send at least 30 days before will explain what happens to the records of organizations that choose not to subscribe, and this policy will be updated to describe what happens to a subscribing organization's records if its subscription ends.

Landlords and property managers may be required by law to keep leases, rent ledgers, security deposit records and trust account records for years. Those duties belong to the organization, not to Verifund, so ask us by email for an export of the records you must keep before you stop using Verifund or ask us to delete your organization's records.

10.3 Records we keep longer

Legal records. We keep records of which terms and policies a login accepted, and when, for as long as that login exists. We may keep records of privacy requests and how we handled them for up to 7 years after an account or organization closes, because they may be needed for audits and legal claims. If paid plans start or we start sending text messages, the same 7-year period applies to billing, tax and payment records and to records of text message consent confirmations and opt-outs.
Demo requests. If you request a demo but do not become a customer, we keep your request for 24 months after our last contact with you, unless you ask us to delete it sooner. If you become a customer, we keep it while your organization has an account and for the same period after that. The internal link we use to approve a request stops working after 30 days. If we approve your sign-up, your email address stays on our list of approved sign-ups until we remove it, and we remove it no later than when we delete your demo request.
Emails with us. Demo request notices, support emails and privacy requests in our mailboxes are kept for 24 months, except the privacy request records described above. Our email provider keeps copies of the emails it sends for a limited period under its own policies, and if we start sending text messages, our text message provider will do the same for texts.
Opt-out lists. Email unsubscribes, and text message opt-outs if we send text messages, for as long as we need them to make sure we do not message that address or number again.
Technical and security logs for up to 90 days, or longer if we need them to investigate a security incident or abuse.
Anything we must keep because of a legal obligation, a legal hold, a dispute, or to prevent fraud or abuse, only for as long as that purpose requires.

10.4 Deleting your own login

Renters can delete their login in the Verifund renter app if the login is used only as a renter. This deletes your login, profile, memberships and the renter invitations you accepted, and lets your property manager's organization know that you deleted your login. The tenant, lease, rent and maintenance records your property manager keeps are the manager's records and stay with that organization; ask your manager about them. If your login also has staff or investor access, email us instead.
Managers, staff and investors can ask us to delete their login by emailing us from the account's email address. We delete your login, profile and AI assistant conversations within 30 days after we confirm the request. Records you created for an organization, such as properties, leases and payments, belong to that organization and stay with it. If you are an investor, deleting your login also removes the organization's records of your ownership share and distributions from Verifund, so we first ask the organization's admins to save or export them. If you are an organization's only admin, we will first ask what should happen to the organization.

11. How we protect information

We use safeguards designed to protect information, including:

encrypted connections (HTTPS using TLS) between your browser or app and Verifund;
encryption of stored data provided by our hosting provider: Supabase encrypts the database and files it stores for us;
role-based access rules in the database (row-level security), designed to keep each organization's records separate and to limit what each person can see to what their role allows;
private file storage for signed lease documents, designed so that only authorized people in the organization and renters on that lease can open them; the web app opens them through links that expire after 5 minutes;
sign-up designed to be limited to people we approve or an organization invites, with confirmed email addresses, and a minimum password length of 12 characters when you create or change a password in the web app;
no payment processing during free early access, so we do not ask for card or bank account numbers; and
demo request records that store IP addresses only as keyed hashes, and internal sign-up approval links stored in our database only as hashes that expire after 30 days.

We do not currently hold third-party security certifications, such as SOC 2 or ISO 27001. No website, app, or method of sending or storing information is completely secure, and we cannot promise that information will never be accessed, disclosed, changed or destroyed without permission.

You help protect your account. Use a strong password you do not use anywhere else, keep it private, sign out on shared devices, and tell us right away at chasemcdonald@verifundsolutions.com if you think someone has gotten into your account. Organization admins are responsible for who they invite, the roles they give, and asking us to remove people who should no longer have access.

12. If a security breach happens

If we learn that someone got unauthorized access to personal information we hold, we will investigate promptly, take steps to contain it, and give the notices the law requires.

Information Verifund is responsible for, such as the email addresses and passwords people use to sign in: we will notify affected people as the law requires. When South Dakota law requires us to notify South Dakota residents, we will do so within 60 days after we discover or are told about the breach. If a law enforcement agency determines that notice would impede a criminal investigation, we will notify people within 30 days after the agency determines that notice will not compromise it. When the law requires, we will also notify the South Dakota Attorney General (for example, when more than 250 South Dakota residents are affected) and the consumer reporting agencies the law requires. For residents of other states, we will follow the notice laws that apply to them.
Records an organization controls, such as tenant and investor records: we will notify the organization's admins without unreasonable delay, and no later than 10 days after we confirm a security incident affecting its records, or sooner if the law requires. We will tell them what we know, update them as we learn more, and cooperate so the organization can give any notices it owes its tenants, investors, staff or regulators. Where the law makes Verifund itself responsible for notifying people or regulators, we will do that too.
How we notify: by email to the address on the account (our main way of communicating with account holders), in the app, by letter, or by another method the law allows, including notice on our website when the law permits it. Please keep your account email address current.

If your property manager entered your information, you may receive a notice from your manager, from us, or from both, depending on who the law makes responsible.

13. Your choices and rights

13.1 Rights we offer everyone

Wherever you live in the United States, you can ask us to:

confirm whether we hold personal information about you, and give you a copy;
correct information about you that is wrong;
delete personal information about you; and
give you a copy of information you provided in a portable format. For an organization's records, an admin can email us from the admin's account email address, and we will send CSV files at no charge, normally within 10 business days. Verifund does not have an in-app export yet, but admins, members and viewers can open uploaded signed lease files in the web app and save a copy.

Requests are free, except as section 13.2 explains, and we will not treat you differently for making one.

13.2 How to make a request

Email chasemcdonald@verifundsolutions.com with the subject line "Privacy request". If you have an account, send it from the email address on the account. If you do not, tell us how to reach you and which information your request is about.
We may ask for information to confirm your identity before we act, and we cannot act on a request we cannot reasonably verify. Someone you authorize can make a request for you if they show us your written permission, and we may still confirm your identity with you.
We will respond within 45 days after we receive your request. If we need more time, we will tell you why within those 45 days, and we may take up to 45 more days. Requests we received before September 24, 2026 will be answered within 30 days, as our earlier policy promised.
We do not charge for requests, except that, where the law allows, we may decline or charge a reasonable fee for requests that are clearly unfounded, excessive or repeated.
We may not be able to do everything you ask. For example, we may need to keep a record the law requires (section 10.3), the record may belong to a property manager's organization (section 13.3), or acting on the request could expose someone else's information or harm the security of the Service. If so, we will tell you why.
Appeals. If we decline your request, you can ask us to reconsider by replying with the subject line "Privacy appeal". We will tell you our decision in writing within 60 days. If we still decline, you may contact your state's attorney general.

13.3 If a property manager entered your information

If a property management organization entered or keeps information about you in its records, including as a tenant, co-tenant, prospective renter, investor, vendor or member of its staff, that organization controls those records. Please send requests to see, correct or delete them to the organization first. Renters can also update the name and phone number in their renter profile.

If you contact us instead, we will pass your request to the organization and help it respond. For those requests, our response within the time in section 13.2 will tell you that we passed your request to the organization, or why we could not. Because the records belong to the organization, we generally cannot change or delete them, or give you a copy, without the organization's instruction, unless the law requires us to. We can still act on information that Verifund itself controls, such as your own login, a demo request you sent us, or, if we send text messages, your text message opt-out.

13.4 Choices you can make yourself

Change your display name in the app's settings.
Delete AI assistant conversations in the assistant panel.
Admins can remove records, or remove all of the organization's records, in the app. To get an export, or to delete the organization itself, admins email us.
Renters can delete their login in the renter app. Managers, staff and investors email us to delete their login.
Unsubscribe from marketing emails with the link in each one.
If we send you text messages, reply STOP to any of them.
Clear or block browser storage in your browser settings.

13.5 State privacy laws

Some states give their residents privacy rights under their own laws. South Dakota does not currently have a general consumer privacy law, and many state laws apply only to businesses above certain size or data thresholds. We offer the rights in section 13.1 and the appeal in section 13.2 to everyone anyway. If a state privacy law applies to us, we will also honor any additional rights it gives residents of that state.

We do not sell personal information, and we do not use it for profiling in furtherance of decisions that produce legal or similarly significant effects. The only thing we report to an advertising service is that a demo request happened, identified by that service's own click identifier, as section 4.1 describes. You can opt out of that by sending a Global Privacy Control signal or by asking us, and we will also treat it as an opt-out request if you ask us to stop selling or sharing your information. If anything else changes, we will update this policy first and give you a way to opt out.

14. Children

Verifund is a business tool for adults. You must be at least 18 to create an account, and renter accounts are only for adult tenants and adult occupants a property manager authorizes. The Service is not directed to children under 13, and we do not knowingly collect personal information directly from them. If we learn that a child under 13 has given us personal information directly, for example by creating an account, using the renter app or requesting a demo, we will delete it. If you believe this has happened, contact chasemcdonald@verifundsolutions.com.

Information about minors that a property manager enters, such as a household member named in a lease, is part of the manager's records; ask the manager about it (section 13.3).

15. United States only

Verifund is offered only for managing and renting property in the United States, and only to people in the United States. We do not offer the Service in other countries. Our service providers may store and process information in the United States and in other countries where they operate. If you use Verifund from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those where you are.

16. Changes to this policy

We may update this policy. We will post the new version on this page with a new "Last updated" date, and earlier versions are available on request.

Material changes, such as using personal information in a new way or sharing it with a new kind of company: we will tell account holders by email at least 30 days before the change takes effect.
Paid plans: before any paid plan starts, we will update this policy and email organization admins at least 30 days in advance (section 1.4).
New service providers that will receive an organization's records: we tell that organization's admins in advance, as our Terms of Service describe.
Other changes, such as clarifications or updates the law requires, take effect when we post them.
We will not use personal information we already have in a materially different way than the policy in place when we collected it described, unless you agree or the law requires it.

17. Contact us

Questions, requests or complaints about this policy or our privacy practices? Email us. We handle questions and privacy requests by email.

Verifund Technologies LLC
Sioux Falls, South Dakota
chasemcdonald@verifundsolutions.com

If you need this policy in another format because of a disability, contact us and we will provide it at no charge within a reasonable time.