Legal
Data Retention Policy
Last updated: July 17, 2026
VeriLend keeps data only as long as needed to provide the Service, meet legal obligations, and support borrowers and lenders in resolving loan applications.
1. Standard Retention Periods
| Category | Retention | Reason |
|---|---|---|
| Account identity (name, email, role) | Life of the account + 30 days after deletion | Login, support, fraud prevention |
| Loan applications and metadata | 7 years after loan closure or last activity | Aligns with common lender recordkeeping windows |
| Uploaded documents (income, ID, statements) | While loan is active + 25 months after final decision (documents older than 6 months are flagged as stale and prompted for refresh) | Freshness for lender review; ECOA-style records retention |
| Credit reports and credit items | 24 months from the report date | Trend and dispute tracking |
| In-app messages between borrower and lender | 7 years after loan closure | Dispute resolution and audit trail |
| Authentication and access logs | 12 months | Security investigation |
| Support correspondence | 24 months | Quality assurance and follow-up |
2. Automatic Deletion
Data past the retention window is deleted or anonymized on a scheduled basis. Drafts and loans that have received no activity for 180 days are archived and, after an additional 180 days without activity, deleted.
3. User-Requested Deletion
You can request deletion at any time by emailing privacy@verilend.app with the subject line "Delete My Data." VeriLend will:
- Confirm receipt within 5 business days.
- Verify your identity.
- Complete verified deletion within 30 days.
4. Legal-Hold Exceptions
VeriLend may retain specific records beyond the schedules above when required to:
- Comply with a subpoena, court order, or regulatory request.
- Comply with anti-fraud, anti-money-laundering, or tax laws.
- Resolve an active dispute or investigation.
Retained records under a legal hold are stored with limited access and deleted when the hold ends.
5. Backups
Encrypted backups may retain deleted content for up to 35 days before rolling off. During that period, deleted records are not restored to production.
Questions? Contact privacy@verilend.app for privacy or data requests, or support@verilend.app for product help. Replace these placeholder addresses with your monitored inboxes before launch.