Privacy Policy

Effective Date: October 16, 2026 · ADU Intelligence Systems

ADU Intelligence Systems, a business of Kerylos Holdings LLC ("we"), operates ADUVerify. This policy explains what we collect, who receives it and how long we keep it. Contact: support@aduverify.com.

1. What we collect

When you order a report: your email address, the property address and, if you give them, the lot size and zoning code. Stripe handles payment; we never see your card number.
From the address: the property's map coordinates and the report we produce (a PDF).
When you use the free eligibility check: the address you type, even if you don't order.
When you contact us: your email address, name (if shown) and message, by email or through our feedback and notification forms.
Technical details: like most websites, our server keeps standard logs (IP address, browser type, page requested and time) for security and troubleshooting.

We don't ask for your name, phone number or ID. Stripe may ask for the cardholder's name at checkout.

2. How we use it

To produce and deliver your report, take payment, answer support emails, fix failed deliveries, and keep the service secure. Reports are produced by fixed rules, not written by AI. Some support emails are answered automatically by an AI model (OpenAI); refund requests and anything it can't answer go to a person. We don't sell or share your information for advertising, and we use no analytics or tracking.

3. Who receives it

We share information only with service providers that help us run ADUVerify, and only what each one needs:

Payments: Stripe receives your email, the property address and the order details.
Email and support: Resend (email delivery), Purelymail (our support mailbox), Google (our operations mailbox) and OpenAI (automatic support replies).
Maps: Google and MapQuest receive the property address or its map coordinates.
Public records and market data: government and public data sources (such as CAL FIRE, the U.S. Census Bureau and local planning departments), Esri's ArcGIS service (which hosts FEMA flood data and many of these maps), OpenStreetMap and RentCast receive only the property's coordinates or ZIP code, never your name or email.
Website: our forms are handled by Web3Forms, and our homepage loads fonts and icons from Google Fonts and jsDelivr, which receive technical details such as your IP address.
Hosting: Hetzner hosts our servers in Germany and our encrypted backups in Finland. Our monitoring service receives no customer information.

Some providers are in the United States, so your information may be processed there. We disclose information to others only when the law requires.

4. How long we keep it

Orders and report PDFs: kept until you ask us to delete them (automatic deletion is coming).
Free eligibility check: the address you type is cleared after 90 days. The matched address and location are kept until we delete them (automatic deletion is coming).
Support emails: kept until we delete them.
System logs are cleared within about five weeks. Some application logs, which may include your email and property address, are not yet cleared automatically.
Backups: encrypted, kept 35 days, plus up to 7 days of storage-provider snapshots.
Our providers keep information under their own policies.

5. Cookies

Our pages set no cookies and store nothing in your browser.

6. Security

Data is encrypted in transit (HTTPS), our services communicate over a private network, and backups are encrypted. Your report link is a long random web address that we send only to you; it can't be guessed or worked out from another report's link. Anyone you forward it to can open it. No system is perfectly secure. If a breach affects your information, we will notify you as required by law.

7. Your rights

You can ask what we hold about you, and ask us to correct or delete it. California residents also have the right to know, correct and delete, to opt out of sale or sharing (we do neither), and not to be treated differently for using these rights.

Email support@aduverify.com with the subject "Privacy request" from the address you ordered with. We'll confirm the request by replying to that address and respond within 45 days. Deletion covers our live systems, report files and support records; encrypted backups age out within about six weeks, and our providers keep data under their own rules.

8. Children

ADUVerify is not for children under 13, and we don't knowingly collect their information.

9. Changes

We'll post changes here with a new effective date.

California residents: Do Not Sell or Share My Personal Information