Privacy Policy
Effective Date: April 1, 2026
Overview
OwedToYou.net ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy describes what data we collect, how we use it, how we store and protect it, and your rights with respect to that data. By using our service, you agree to the practices described in this policy.
Information We Collect
To file unclaimed property claims on your behalf, we collect the following categories of personal information:
- Identity information: Full legal name and date of birth
- Government identification: Social Security Number (SSN) and a government-issued photo ID (e.g., driver's license or passport)
- Contact information: Mailing address, email address, and phone number
- Payment information: Credit or debit card details (processed directly by Stripe — we do not store raw card data)
We collect only the information necessary to perform the service you have requested. We do not collect data beyond what is required for claim research and filing assistance.
How We Use Your Information
We use your personal information solely for the following purposes:
- To search state and federal unclaimed property databases for funds held in your name
- To prepare and file unclaimed property claim forms with applicable state agencies on your behalf
- To verify your identity as required by state agencies
- To communicate with you about your claim status via email and SMS
- To process your one-time $12.95 service fee
- To comply with applicable legal obligations
We never sell, rent, or trade your personal information to third parties for marketing or any other purpose.
How We Store and Protect Your Data
We take the security of your sensitive information seriously:
- Encryption at rest: All sensitive personal data (including SSNs and photo IDs) is encrypted using AES-256 encryption before being stored in our database.
- Database: Encrypted data is stored in a PostgreSQL database hosted on Railway, a SOC 2-compliant infrastructure provider.
- Encryption in transit: All data transmitted between your browser and our servers uses TLS (HTTPS).
- Access controls: Access to sensitive data is restricted to authorized personnel only and logged for audit purposes.
- Payment security: Payment card data is handled exclusively by Stripe and is never stored on our servers. Stripe is PCI DSS Level 1 certified.
Third-Party Service Providers
We share your data only with third parties necessary to deliver our service. These providers are bound by confidentiality obligations and are prohibited from using your data for any purpose other than providing services to us:
- Stripe — Payment processing. Your payment card details are handled directly by Stripe. stripe.com/privacy
- SendGrid (Twilio) — Email delivery for service communications and claim status updates.
- Twilio — SMS notifications regarding your claim status.
- State government portals — We submit your claim information directly to the applicable state unclaimed property agencies as necessary to file your claim.
- Railway — Cloud hosting and database infrastructure.
We do not use your data for advertising, analytics profiling, or any purpose outside of delivering the unclaimed property claim service.
Data Retention and Deletion
We retain your personal information for as long as necessary to complete your claim and comply with applicable legal requirements. Specifically:
- We retain claim-related records for a minimum of 3 years following claim submission to support any follow-up requirements from state agencies.
- After the retention period expires, personal data is securely deleted from our systems.
- You may request deletion of your data at any time by contacting us at contact@owedtoyou.net. We will process deletion requests within 30 days, subject to any legal obligations that require us to retain certain records.
- Note that data transmitted to state agencies as part of your claim is governed by those agencies' own retention policies, which are outside our control.
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Withdraw consent for data processing where consent is the legal basis
To exercise any of these rights, contact us using the information below.
Cookies and Tracking
Our website uses Google Analytics and Google Ads tracking technologies to understand site traffic and measure advertising effectiveness. These tools may use cookies or similar technologies. We do not use cookies to track you across unrelated third-party sites. You can opt out of Google Analytics by using the Google Analytics Opt-out Browser Add-on.
Children's Privacy
Our service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Continued use of our service after any changes constitutes acceptance of the revised policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: