Privacy notice
Version draft-2026-07-14 · Effective Pending approval. This draft does not authorize production use or acceptance of real records.
DueFound (operating entity pending) processes public property records and information you provide to show parcel-specific questions, confirm owner-supplied facts, prepare requested filing materials, track county outcomes, secure the service, and comply with law.
Information collected
Public parcel, assessment, exemption, ownership, transfer, mailing-address, and filing records; contact details; eligibility attestations; agreements and consent records; county correspondence and outcomes; payment-provider references and payment events; communications; service usage, attribution, device, and pseudonymous security information. DueFound does not store full payment-card numbers.
Information to exclude
Do not provide Social Security numbers, bank credentials, medical records, immigration documents, or other sensitive records unless the approved filing workflow explicitly requires them through a designated secure field. You must have authority to provide every nonpublic record submitted.
How information is used
Information is used to display and verify public-record findings, prepare and track a filing you request, communicate about that service when permitted, prevent abuse, maintain audit trails, measure service operation, and meet legal obligations. DueFound does not sell personal information or use parcel findings for cross-context behavioral advertising.
Private letter codes
A letter code is a bearer credential linked to one parcel finding. Anyone with the code can view that finding until the code expires or is revoked. Codes are generated with high entropy, rate-limited against guessing, and excluded from product analytics payloads. Do not post or forward your code.
Automated processing and human review
Software may normalize county records, compare facts with versioned draft rules, calculate provisional estimates, and prepare evidence summaries. Public records can be incomplete. Owner attestations, rule validation, and required human review remain separate controls; automated output does not establish eligibility or county acceptance.
Service providers
Approved providers may process information for hosting, encrypted storage, email, malware scanning, monitoring, and document analysis under contractual restrictions. The current list is available on the subprocessor page.
Retention
Production retention periods are not yet approved. The proposed pilot schedule is 90 days after closure for an unconverted invitation, seven days for rejected quarantined uploads, and seven years after an engagement closes for filing records, payment evidence, consent, and audit trails, subject to contract, legal holds, and applicable law.
Security and incidents
DueFound uses access controls, secure sessions, encrypted production providers, quarantine, malware scanning, backups, audit trails, and retention controls appropriate to the service design. No system is risk-free. Suspected incidents may be reported to security@duefound.com.
Your choices and requests
You may request access, correction, deletion, or a copy of information associated with you, or appeal a prior privacy decision. Identity and authority must be verified before records are disclosed or changed. Legal, security, contractual, and audit-preservation exceptions may apply.
Contact
Email privacy@duefound.com. Postal address: Production postal address pending.