Privacy Policy

VeraHold LLC  |  Ohio  |  Effective Date: August 9, 2026

Last Updated: August 9, 2026

This Privacy Policy describes how VeraHold LLC ("VeraHold," "we," "us," or "our") collects, uses, stores, discloses, and protects information about you when you use the VeraHold mobile application, website at verahold.com, and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this Privacy Policy.

This Privacy Policy is incorporated into and subject to the VeraHold Terms of Service. Capitalized terms not defined herein have the meanings given to them in the Terms of Service.

1. Information We Collect

1.1 Information You Provide Directly

When you create an Account or use the Service, we collect information you provide directly, including:

  •      Username (permanent, cannot be changed after Account creation)

  •       Email address

  •         Password (stored in hashed, encrypted form — never in plain text)

  •         Phone number (optional)

  •         Agreement and Offer details you create within the Service, including hold amounts, notes, duration selections, and user interactions

  •         Communications you submit through support channels, including the content of support requests and any information you voluntarily provide in connection with those requests.

  •         VH Transaction IDs associated with Offers and Agreements.

Information provided in support requests may be retained to investigate issues, provide support, prevent fraud, and improve the Service.

1.2 Information Collected Automatically

When you use the Service, certain information is automatically generated and retained as part of normal system operation, including:

Website (Squarespace)

  •         IP address;

  •         Browser type and version;

  •         Device type and operating system;

  •         Language settings;

  •         Internet service provider and network information;

  •         Referring URLs;

  •         Pages visited;

  •         Date and time of website visits;

  •         Website interaction information, including page views, clicks, scrolling activity, and time spent on pages;

  •         Cookie information necessary for website functionality, security, and analytics.

App / Backend (Xano)

  •         Authentication tokens and session identifiers;

  •         Timestamps associated with Account activity, including login events and API requests;

  •         Login and API request timestamps;

  •         Server request metadata, including IP address information associated with API requests;

  •         Request and response metadata necessary for security, debugging, fraud prevention, and operation of the Service.

VeraHold does not currently use third-party analytics SDKs, crash reporting tools, or device fingerprinting technologies.

1.3 Payment and Financial Information

VeraHold does not directly collect, store, or process payment card numbers or full card data. All payment method information is collected and stored by our Payment Processor, Stripe, Inc., in accordance with Stripe's privacy policy and PCI-DSS compliance standards.

VeraHold does store limited payment metadata returned by Stripe following successful card setup, including:

  •         Stripe customer ID (cus_xxx)

  •         Stripe payment method ID (pm_xxx) for your default payment method

  •         Card brand (e.g., Visa, Mastercard)

  •         Last four digits of card number

  •         Card expiration month and year

This metadata is stored solely for the purpose of displaying your payment method within the App, facilitating Authorization Holds, and enabling you to manage your payment methods. It is never used for any other purpose.

1.4 Transaction and Agreement Data

We collect and retain data related to all Offers and Agreements created through the Service, including:

  •         VH Transaction ID

  •         Sender and receiver identifiers

  •         Payer and payee identifiers

  •         Hold amounts and Service Fee amounts

  •         Offer and Agreement statuses and timestamps

  •         Stripe payment intent identifiers

  •         Check-in attempt data

  •         Authorization Hold placement and release timestamps

1.5 Information From Third-Party Services

When you connect your payment method through Stripe Checkout, Stripe may provide us with payment metadata as described in Section 1.3. We do not receive your full card number, CVV, or banking credentials from Stripe at any time.

2. How We Use Your Information

We use the information we collect for the following purposes:

  •         To create and manage your Account and authenticate your identity;

  •         To facilitate Offers, Agreements, and authorization holds through the Service;

  •         To calculate, capture, and record applicable Service Fees;

  •         To send transactional email communications related to your Account activity, including offer notifications, agreement status updates, password reset codes, and receipts;

  •         To enforce our Terms of Service and other applicable policies;

  •         To detect, prevent, and investigate fraud, abuse, and unauthorized activity;

  •         To maintain the security, integrity, and proper functioning of the Service;

  •         To comply with applicable legal and regulatory obligations;

  •         To resolve disputes and enforce our agreements;

  •         To respond to your support requests and communications;

  •         To improve, develop, and optimize the Service;

  •         To maintain records for legal, compliance, and regulatory purposes.

 We do not sell or share your personal information, as those terms are defined under California law. We do not use your personal information for third-party advertising or marketing purposes.

3. How We Share Your Information

3.1 With Other Users

Certain information is visible to other Users as part of the core functionality of the Service. When you participate in an Offer or Agreement, the other User is able to view your username, email address, your role in the transaction (sender, receiver, payer, or payee), and Offer or Agreement details relevant to the shared transaction. Your username and email address are also displayed to other Users when they search for you within the App, so that Users can confirm they are sending an Offer to the correct person. Your email address is visible for this purpose whether or not you enter into an Offer or Agreement with the User who searches for you..

Payment method information, phone numbers, passwords, authentication credentials, and all other Account details not described above are not shared with other Users under any circumstances.

3.2 With Service Providers

We share information with trusted third-party service providers who assist us in operating the Service, subject to confidentiality and data protection obligations. These providers include:

  •         Stripe, Inc. — payment processing, authorization hold management, and card setup;

  •         Resend — transactional email delivery, including processing recipient email addresses, email content, delivery status, message metadata, and related information necessary to send operational communications such as password reset codes, offer notifications, agreement updates, receipts, and account security notices;

  •         Xano —Backend infrastructure, database hosting, API processing, authentication, and request logging;   

  •         Squarespace — Website hosting, website security, content delivery, cookie management, and collection of standard website visitor information, including IP address, browser and device information, website usage information, and related analytics necessary to operate, secure, and improve the verahold.com website;

  •         Firebase (Google) — crash reporting infrastructure that collects device information, operating system version, and crash/diagnostic logs necessary to identify and fix technical issues within the App;

  • Netlify — Payment return redirect hosting, and processing of related request information (including IP address and browser information) necessary to transfer users from Stripe's hosted payment page back into the App.

The Company may add, remove, replace, or modify service providers as the Service evolves.

3.3 For Legal and Safety Purposes

We may disclose your information to third parties when we believe in good faith that disclosure is necessary to:

  •         Comply with applicable law, regulation, legal process, or government request;

  •         Enforce our Terms of Service or other agreements;

  •         Protect the rights, property, or safety of VeraHold, our Users, or the public;

  •         Detect, prevent, or investigate fraud, security incidents, or technical issues;

  •         Respond to emergency situations involving risk to life or safety.

3.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving VeraHold LLC, your information may be transferred as part of that transaction. We will notify you through the Service or by email if your information becomes subject to a different privacy policy as a result of such a transaction.

3.5 With Your Consent

We may share your information with other parties with your express consent, in circumstances not described above.

4. Data Retention

We retain your personal information for as long as your Account is active and for a reasonable period thereafter for the following purposes:

  •         Customer support and investigation of account related issues;

  •         Legal and regulatory compliance;

  •         Fraud prevention and security;

  •         Dispute resolution;

  •         Enforcement of our agreements;

  •         Financial recordkeeping.

Account deletion through the App sets your Account status to "deleted" and permanently blocks login access. However, all Account data, transaction history, offer and agreement records, and associated metadata are retained by VeraHold in accordance with this Policy. This retention is intentional and serves legitimate legal purposes.

Requests to delete personal information under applicable privacy law are handled separately from in-App Account deletion described above and remain subject to the retention exceptions described in this Section. Where you submit a deletion request under applicable privacy law, we will honor it to the extent required by that law. Certain records — including transaction records, Offer and Agreement records, VH Transaction IDs, payment-related records, support records, and associated metadata — are retained under exceptions recognized by those laws, including for legal and regulatory compliance, fraud detection and prevention, security, dispute resolution, and financial recordkeeping. Where an exception applies to some but not all of the information covered by your request, we will delete the information that is not subject to an exception. Retention periods may vary depending on the type of information, legal requirements, operational needs, fraud prevention considerations, dispute resolution requirements, or other legitimate business purposes. Requests regarding data may be submitted to support@verahold.com and will be evaluated on a case-by-case basis in accordance with applicable law.

5. Data Security

VeraHold implements reasonable technical and organizational measures designed to protect your information against unauthorized access, disclosure, alteration, and destruction. These measures include:

  •         Password hashing using industry-standard cryptographic methods — plain text passwords are never stored;

  •         Authentication token-based session management with expiration;

  •         HTTPS encryption for all data transmitted between the App and our servers;

  •         Access controls limiting employee and service provider access to personal data;

  •         Payment card data handled exclusively by PCI-DSS compliant third-party processors.

No security system is impenetrable. We cannot guarantee the absolute security of your information. In the event of a data breach that is reasonably likely to result in risk to affected individuals, we will notify affected Users in accordance with applicable law. VeraHold may implement additional security measures, authentication requirements, fraud prevention systems, verification methods, monitoring tools, or access controls as the Service evolves.

You are responsible for maintaining the security of your Account credentials. Do not share your password with any third party. Contact us immediately at support@verahold.com if you suspect unauthorized access to your Account.

6. U.S. State Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information under applicable state law. If you are a resident of a state with a comprehensive consumer privacy law — including California, Virginia, Colorado, Connecticut, Utah, or another such state — you may have rights that include:

  •         The right to access the personal information we hold about you;

  •         The right to correct inaccurate personal information;

  •         The right to request deletion of your Account (subject to the retention obligations described in Section 4);

  •         The right to opt out of certain communications;

  •         The right to data portability where required by applicable law;

  •          The right to lodge a complaint with your state attorney general or other applicable state regulator.

To exercise any of these rights, please contact us at support@verahold.com. We will respond to verifiable requests within forty-five (45) days of receipt. Where reasonably necessary, we may extend this period once by an additional forty-five (45) days, in which case we will notify you of the extension and the reason for it within the initial forty-five-day period. Certain privacy rights described in this Section may vary based on your jurisdiction and applicable law.

 California Residents. If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale of personal information, and the right to non-discrimination for exercising your privacy rights. Certain California privacy rights may be subject to exceptions, limitations, verification requirements, and record retention obligations permitted under applicable law. VeraHold does not sell or share personal information, as those terms are defined under California law. To exercise your California privacy rights, please contact us at support@verahold.com. We will respond to verifiable consumer requests in accordance with applicable California law.

You may update your email address, phone number, and password directly within the App. Your username cannot be changed after Account creation.

You may manage your payment methods directly within the App. Removing a payment method through the App will instruct Stripe to remove that payment method from your VeraHold-linked Stripe customer profile, subject to Stripe's systems, policies, and processing requirements.

7. Communications

By creating an Account, you consent to receive transactional and operational email communications from VeraHold at the email address associated with your Account. These communications include:

  •         Offer notifications (sent and received)

  •         Agreement status updates

  •         Check-in notifications

  •         Agreement completion or expiration notices

  •         Transaction receipts

  •         Password reset codes

  •         Account security alerts

  •         Service and policy update notices

These communications are necessary for the proper functioning of the Service and cannot be fully opted out of while your Account is active. You may update your email address within the App to control which address receives these communications. VeraHold may also send communications relating to security events, fraud prevention, legal compliance, policy enforcement, account verification, or operational issues affecting the Service.

VeraHold does not send marketing or promotional emails unrelated to your Account or Service activity. If this practice changes, we will provide notice and opt-out mechanisms as required by applicable law.

8. Children's Privacy

The Service is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without verifiable parental consent, we will take steps to delete that information promptly.

If you believe that a child under 18 has provided personal information to us, please contact us at support@verahold.com.

9. Cookies and Tracking Technologies

The VeraHold mobile application does not use browser cookies. The App uses session tokens and local device storage solely for the purpose of maintaining your authenticated session and App State during use.

The verahold.com website uses cookies or similar tracking technologies for website functionality, security, user preferences, and website analytics. These technologies may collect information such as IP address, browser and device information, pages visited, referring URLs, timestamps, and website interaction data. Users may manage cookie preferences through available website controls where required by applicable law. A cookie notice and opt-out mechanism are provided on the website in accordance with applicable law.

We do not use tracking technologies for behavioral advertising or cross-site tracking, or the sale of personal information.

10. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to the transfer and processing of your information in the United States, which may have different data protection laws than your country of residence.

VeraHold makes no representation that the Service is appropriate or available for use in all locations, or that the Service complies with the laws, regulations, or requirements of every jurisdiction outside the United States. Users who access the Service from outside the United States do so at their own risk and are responsible for compliance with local laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Updates to this Privacy Policy may result from changes to the Service, new features, changes in technology, changes to third-party providers, legal requirements, security enhancements, fraud prevention measures, or other operational needs. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this Policy and, where required by applicable law, by providing additional notice through the App or by email.

Your continued use of the Service after the effective date of any updated Privacy Policy constitutes your acceptance of the updated Policy. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

VeraHold LLC

An Ohio Limited Liability Company

1944 Convoy Heller Rd.

Convoy, OH 45832

Email: support@verahold.com

Website: verahold.com

VeraHold LLC  —  Privacy Policy