Privacy Policy

Veristamp ("Veristamp," "we," "us") is operated by IW GROUP LLC, a Wyoming limited liability company. Veristamp provides a mobile application and related services that create timestamped, tamper-evident property condition reports ("Services"). This policy explains what information we collect, why, and the choices you have.

Veristamp is designed for adults. You must be 18 or older to use the Services.

Account information. When you create an account we collect your email address, your name, your sign-in method (Apple, Google, or email link), and the role you select (tenant, landlord, or both). If you sign in with Apple or Google, we receive only the basic profile information those services share (such as name and email); we never receive your passwords. Veristamp itself uses no passwords.

Report content. Photos you capture in the app, together with the notes, room labels, and condition tags you add. For every photo we also record a cryptographic fingerprint (SHA-256 hash), the capture time, and the device model — this is the core of the Service: proving your photos are unaltered since capture.

Location (optional). Only if you turn on the per-report location option, we attach location coordinates to that report to strengthen its evidentiary value. Location is off by default, is requested per report, and is never collected in the background.

Signature information. When someone signs or declines a report, we record the typed name, the signature event time, the method (in-app or secure email link), an optional drawn signature image, confirmation that the signer viewed the report, and technical delivery records for the signature invitation.

Counterparty contact information. When a report creator invites others to sign, we collect the invitees' names and email addresses from the creator in order to deliver the invitation. If you received an invitation, this is how we obtained your email address.

Purchase information. If you buy a Certified Report or subscribe to Veristamp Pro, the purchase is processed by Apple's App Store or Google Play. We receive purchase status and transaction identifiers (via our purchase-infrastructure provider, RevenueCat) so we can unlock what you bought. We never see or store your card details.

Region interest. If you select a region where compliance guidance is not yet available, we record that selection in aggregate to plan expansion.

Usage and device basics. Server logs (such as IP address, request time, and app version) generated in the ordinary operation of the Services, and our own aggregate statistics (for example, counts of reports created). We do not use third-party analytics SDKs, advertising SDKs, or trackers in the app or on our website.

We do not collect your contacts, your photo library (photos must be captured in-app; gallery imports are not permitted in certified reports), background location, browsing history, or advertising identifiers. We do not sell personal information and do not share personal information for cross-context behavioral advertising.

Before any photo is uploaded, the app offers on-device detection of faces, documents, identification cards, and screens, and lets you blur them. Blurring happens on your phone; blurred regions never reach our servers in unblurred form. Every photo requires your explicit confirmation before it enters a report.

We use information to: provide the Services (create, store, verify, and deliver reports and signatures); deliver signature invitations and transactional email; process and honor purchases; provide compliance-related features you request (for example, deadline reminders based on dates you enter); maintain security, prevent fraud and abuse, and comply with law; and improve the Services using aggregate, de-identified statistics. We do not use your report content to train artificial-intelligence models. Where the app offers AI-drafted photo notes, the suggestion is generated from the photo you approved and becomes part of your report only if you confirm it.

• With the people you choose. Reports are shared with the parties you invite. Every invited party to a finalized report can view that report's contents, including photos and signature records. Do not include content in a report you are unwilling to share with the other parties to it.
• Service providers. We use a small number of processors to run the Services: cloud hosting and storage for the app backend and encrypted media; RevenueCat, Inc. for purchase processing; Resend for transactional email delivery; and Apple/Google for sign-in and payments. Each receives only what it needs to perform its function.
• Legal. We may disclose information if required by law, subpoena, or court order, or to protect the rights, safety, and security of Veristamp, our users, or the public.
• Business transfers. If Veristamp is involved in a merger, acquisition, or asset sale, information may be transferred subject to this policy.

We do not sell personal information.

Report media and documents are encrypted in transit (TLS) and at rest. Access to stored photos and PDFs uses signed, expiring links rather than public URLs. Signature invitation links are single-use and expire after 14 days. Data on your device is protected using your operating system's secure storage. No method of transmission or storage is perfectly secure, but protecting evidence integrity is the purpose of this product and we treat security accordingly.

Draft reports and account data are retained while your account is active. Finalized reports are retained because permanence is their function.

Account deletion is available in the app (Settings → Delete my account). Deletion removes your account, your drafts, your photos, and your reports, subject to one important exception: if another party has signed or purchased a certified report you participated in, that report is part of their records too. In that case we retain the report for the other party but minimize your personal data within our account systems. Deletion requests are processed within 30 days, with backups purged on a rolling basis within 90 days.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to limit certain processing.

California residents (CCPA/CPRA): you have the right to know, delete, correct, and opt out of sale/sharing (we do not sell or share as defined), and the right not to be discriminated against for exercising these rights. We do not use or disclose sensitive personal information for purposes requiring a right to limit.

To exercise any right, use the in-app tools or contact privacy@veristamp.app. We will verify your request using your account email. Authorized agents may submit requests with proof of authorization. We respond within the timeframe required by applicable law. If you are in a jurisdiction with additional rights (for example, the EU/UK GDPR where applicable), we honor those rights as required by law; our legal basis for processing is the performance of our contract with you, your consent (for optional features like location), and our legitimate interests in securing and improving the Services.

The Services are not directed to anyone under 18, and we do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact privacy@veristamp.app and we will delete it.

The Services are operated from the United States and information is processed and stored in the United States. If you use the Services from outside the U.S., you understand your information will be transferred to and processed in the U.S.

We will post any changes on this page and update the effective date. For material changes, we will provide notice in the app or by email. Continued use after changes take effect constitutes acceptance.

IW GROUP LLC
30 N Gould St, Ste N, Sheridan, WY 82801
privacy@veristamp.app · support@veristamp.app

Veristamp provides evidence-integrity technology. Veristamp is not a law firm and does not provide legal advice or notarization services.