FoundMoney by Kovet

FoundMoney Privacy Policy

Version 1.1 · Effective October 20, 2026. This is the privacy part (Parts B and C) of the canonical FoundMoney Terms and Conditions and Privacy Policy — the same content as published at kovet.ai/found-money/terms/, which also contains the FoundMoney Terms (Part A). It is the companion to Kovet's general Privacy Policy. Contact: [email protected].

Part B — Privacy Policy This policy explains what we collect for a FoundMoney search, why, how it is stored and protected, how long it is kept, who it is shared with, and the rights you have over it. It is the FoundMoney companion to Kovet's general Privacy Policy at kovet.ai/privacy/, and the two are written to be read together.

1. What we collect — the complete list, and what we never collect. For a search we collect only:

Required: your full legal name; your email address; and the states you have lived in. Optional: former names (including maiden names and prior legal names); and your current city and state.

That is the whole list for the search. We also keep the records of our dealing with you — your results, our correspondence about your request, and, if you sign one, your Finder Agreement and fee records — so we can prove what was agreed and paid. Lawful basis: your consent and our legitimate interest in answering and fulfilling your request.

We never collect: a Social Security number; a government ID number; your date of birth; or bank, card, or account details. States require some of those things to process and pay a claim. When they do, you enter them yourself on the official state website — they are never entered on, sent to, or stored by FoundMoney. If any form claiming to be ours asks for something on this list, stop: it is not our form, and you should tell us at [email protected].

2. Why we use it. Only to: run the search you requested across the official state databases; contact you with results and about your request; prepare and track a claim if you signed a Finder Agreement; calculate and collect a fee that is actually due; comply with law; and keep the service secure. We never sell personal data, and customer data is never used to train AI models. Marketing use requires your separate consent under Part A, Section 13.

3. Cookies and tracking. FoundMoney, like kovet.ai, sets no non-essential cookies and runs no advertising or analytics trackers. If that ever changes, we will update this policy first and ask for consent where the law requires it. Basic server and security logs (IP address, browser details, timestamps) are kept to secure and operate the service, as described in Part C.

4. Who we share it with. Only as far as the job requires:

The state holding the property — only the claim details you authorised, and only when you signed an agreement asking us to help file. Service providers under contract — our hosting provider, Google (email and workspace), and our payment processor, who process data on our behalf under contract, only on our instructions, and must protect it to a standard at least equal to this policy. Nothing is shared with third parties for their own marketing. Law and safety — where the law compels it, or to prevent fraud or harm. Where the law allows, we will tell you before disclosing.

No other sharing. In particular, search data is not shared with other Kovet products or brands for their own marketing.

5. How we store and protect it — United States hosting.

Location: Kovet's systems are hosted in the United States. Where European or UK personal data is transferred to us, we rely on the European Commission's Standard Contractual Clauses (and the UK equivalent) where an adequacy decision does not apply, as in Kovet's general Privacy Policy. Encryption: data is encrypted in transit (TLS) and at rest with our hosting and storage providers. Access control: individual staff accounts — no shared logins — with multi-factor authentication. Access to customer records is limited to staff working on that request (need-to-know), and access is logged. Working habits: staff work from the record system, not from personal email, personal devices, or spreadsheets kept outside it. Search data is not pasted into social-media messages or group chats — including the Facebook groups where many customers first find us. Secure intake: searches are submitted over the website's encrypted form. Never send us personal documents by ordinary email or Facebook message; if any are sent that way, we delete them. Backups: backups are encrypted and rotate out on the Part C schedule, so deleted records fall out of backups as they rotate.

6. If something goes wrong — breach notice. If we become aware of unauthorised access to personal data, we will investigate, contain it, and notify affected customers and any regulator whose notification law applies, within the time that law requires and without unreasonable delay. Notice will say what happened, what data was involved, what we are doing, and what you can do.

7. Children. FoundMoney is for adults (18+). We do not knowingly collect data for a search about a person under 18. Property belonging to a minor is claimed by a parent or legal guardian through the state; contact us and we will point you to the free official route and delete any data sent to us about the minor.

Part C — Retention Schedule and Your Rights How long each kind of data is kept

How long each kind of data is kept

This is the single retention schedule for FoundMoney and it applies everywhere in this document. The 7-year period for signed finder agreements, invoices and claim/payment records replaces the earlier, shorter wording for those records, chosen because contract and tax record periods run longer. Shortening a period is always permitted; extending one for data already collected requires a policy update and, where the law requires, your consent. A legal hold for an active dispute pauses deletion for the records involved only.

Your rights — free, answered within one month Access: ask what personal data we hold about you and get a copy in a portable, usable format. Correction: ask us to correct inaccurate data — a wrong name or a missing state can cause a missed match, so we welcome corrections. Erasure — deletion on verified request at any time: ask us to delete your data and we will do so, subject to this one legal-retention exception, stated plainly: signed finder agreements, invoices and claim/payment records must be retained for 7 years from claim resolution for legal and tax record-keeping, and are deleted after that period. Where that exception applies, we will tell you exactly what is being retained and why. Restrict or object: restrict or object to processing, and withdraw consent — including marketing consent — at any time. No penalty: exercising a right never changes a fee already lawfully agreed, and never bars you from claiming your money directly from the state.

Email [email protected] — that address reaches our privacy contact. We verify the requester is the data owner before releasing or deleting records, normally by replying from the email address on the request, and we will never ask for a Social Security number, ID number, or date of birth to do it. California residents: we do not sell or share personal information as those terms are defined in the CCPA/CPRA, and the rights above are extended to you on request. You may also complain to your local data protection authority or state attorney general.