Last updated: March 28, 2026
We collect information you provide directly: name, email address, financial goals, and account preferences. When you connect financial accounts through Plaid, we receive transaction history, account balances, and institution details. We do not receive or store your banking passwords.
We automatically collect device information (browser type, OS, IP address), usage data (pages visited, features used, session duration), and cookies for authentication and analytics.
We do not sell your personal data. We share data only with: (a) service providers who process data on our behalf (Plaid for bank connections, cloud infrastructure providers, analytics tools); (b) card-issuing partners for virtual card functionality; (c) law enforcement when required by valid legal process. All third-party providers are contractually bound to protect your data.
We use industry-standard encryption (AES-256 at rest, TLS 1.3 in transit) to protect your data. Access to personal data is restricted to authorized personnel on a need-to-know basis. We conduct regular security audits and penetration testing. Despite these measures, no system is 100% secure, and we cannot guarantee absolute security.
We retain your data for as long as your account is active or as needed to provide the Service. Financial transaction data is retained for 7 years to comply with regulatory requirements. After account deletion, personal data is purged within 30 days, except where retention is required by law.
You have the right to: (a) access your personal data; (b) correct inaccurate data; (c) request deletion of your data; (d) export your data in a portable format; (e) opt out of marketing communications; (f) withdraw consent for data processing. To exercise these rights, email privacy@verafund.app. We respond within 30 days.
We use essential cookies for authentication and session management. We use analytics cookies (anonymized) to understand how users interact with the platform. We do not use advertising trackers. You can disable non-essential cookies in your browser settings.
Vera Fund is not intended for users under 18 years of age. We do not knowingly collect data from minors. If we learn that we have collected data from a user under 18, we will delete it promptly.
We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification at least 30 days before they take effect. Your continued use of the Service after changes constitutes acceptance.
For privacy-related inquiries, contact our Data Protection Officer at privacy@verafund.app or write to: Vera Fund Inc., Oakland University, Rochester, MI 48309.