GET VERIFY, INC.

PRIVACY & COOKIE POLICY

Last Updated: July 7, 2026

THIS PRIVACY AND COOKIE POLICY (THIS “POLICY”) DESCRIBES THE WAYS IN WHICH GET VERIFY, INC., A DELAWARE CORPORATION (“VERIFY,” “WE,” “US,” OR “OUR”) COLLECTS, PROCESSES, USES, AND DISCLOSES INFORMATION ABOUT YOU, INCLUDING PERSONALLY IDENTIFIABLE INFORMATION, IN CONNECTION WITH YOUR ACCESS TO HTTPS://WWW.GETVERIFY.AI (THE “WEBSITE”), HTTPS://APP.GETVERIFY.CO (THE “PLATFORM”), VERIFY’S PROPRIETARY SOFTWARE PLATFORM AND API (“SOFTWARE”), THE INFORMATION, CONTENT AND FEATURES PROVIDED THROUGH OUR SERVICES, AS WELL AS ANY EVENTS THAT VERIFY HOSTS. THROUGHOUT THIS POLICY, “YOU” REFERS TO THE INDIVIDUAL OR ENTITY THAT IS VISITING THE WEBSITE OR OTHERWISE INTERACTING WITH US. BY ACCESSING OUR WEBSITE, PLATFORM, SOFTWARE, AND SERVICES, YOU CONSENT TO THE USE OF YOUR INFORMATION AS SET FORTH IN THIS POLICY. IF YOU ARE A CUSTOMER OF VERIFY OR AN END USER ACCESSING THE SERVICES THROUGH A CUSTOMER ACCOUNT, ADDITIONAL AND/OR DIFFERENT PRIVACY TERMS MAY APPLY TO YOU, AS INDICATED AT THE TIME YOU SET UP AN ACCOUNT TO ACCESS OUR SERVICES OR AS SET FORTH IN YOUR MASTER SUBSCRIPTION AGREEMENT.

Important notice regarding our role. Verify provides customers with cloud-based financial statement analysis technology where Verify acts as a service provider or data processor, as defined by applicable law. When you or your organization uploads financial statements or other data (“Licensee Data” in our Master Subscription Agreement) to the Verify platform, your organization is the data controller, and Verify processes that data on your organization’s behalf according to your instructions and our Agreement. This Policy does not govern Licensee Data processed by Verify as a service provider. For privacy information related to Licensee Data, please contact your organization directly. We are not responsible for the privacy or data security practices of our customers, which may differ from those explained in this Policy. See Section 7 (GDPR) and Section 8 (CCPA) for more.

1. Scope

Verify provides you access to the Website and Services subject to this Policy and the Website’s Terms of Use. In the course of providing access to the Website and the Services, Verify may collect “Personal Information,” which means any information relating to an identified or identifiable natural person (a “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Verify does not collect your Personal Information except to allow you to access the Website and to provide the Services or as specifically set forth in this Policy. This Policy applies to:

All users who create accounts on the Verify platform
All visitors to the Verify website
All financial data and documents uploaded to or processed through the Service by or on behalf of customers
All interactions with the Verify website and platform

2. Changes to this Policy

Verify reserves the right to update this Policy from time to time by posting a new Policy on this page. In cases where changes are material, Verify may also contact you via electronic mail or post a notice on the Website or Platform to let you know of such changes.

By continuing to access or use the Website, Software, or Services after the posted effective date of modifications to this Policy, you agree to be bound by the revised version of the Policy. You are advised to consult this Policy regularly for any changes. If you have a separate Master Subscription Agreement with Verify, the terms of that Agreement will control in the event of any conflict with this Policy regarding the handling of Licensee Data.

3. Collection of Information

3.1 Information that You Provide

Verify collects any information that you voluntarily provide, including when you:

Create an account or register for the Services
Submit information requesting a demonstration or product information
Join our email list or subscribe to communications
Contact customer support
Attend a Verify event or webinar
Apply for employment with Verify
Communicate with us by email, telephone, or other means

Information that you may provide includes, but is not limited to: full name; email address; job title; company or organization name; phone number; location; password (stored in encrypted format); and professional information and employment details.

Note: Financial statements, property data, and other documents you upload to the Software as a customer constitute “Licensee Data” under our Master Subscription Agreement and are not considered Personal Information under this Policy. Licensee Data is owned by you and processed by Verify as a service provider pursuant to the Agreement.

3.2 Automatically Collected Information

Verify may automatically collect certain technical information from your computer or mobile device when you use the Website, Platform, or Services, including:

Internet Protocol (IP) address
Web browser type and version
Operating system name and version
Device information and identifiers
Pages you view on the Website, and pages viewed immediately before and after
Search terms you enter on the Website
Date and time of access, and referring website addresses
Session identifiers and clickstream data

This information allows Verify to recognize you and personalize your experience if you return to the Website using the same device, and to improve the Website and the Services.

3.3 Information about Legal and Other Materials

Verify may collect technical information from your device concerning your receipt of communications, access to materials, and approval or execution of contracts, consents, or other statements or agreements by means of the Website, including the Website’s Terms of Use and this Policy.

3.4 Cookies and Tracking Technologies

Verify collects information using “cookies,” which are small text files that the Website and Software save on your device, and similar technologies. You can disable cookies in your browser settings, but doing so may affect the functionality of the Website and Software. Verify also uses web beacons and similar tracking technologies to understand how you interact with our Services. For detailed information, see Section 9 (Cookie Policy).

3.5 Cross-Site Tracking

Verify does not utilize technical measures in the Website or Software to track your activities across different websites or online services, whether you configure your browser’s Do Not Track feature or otherwise. The Website and Software may utilize third-party application programming interfaces controlled by third parties, such as analytics and marketing services, that may attempt to track your activity across other sites that utilize those interfaces.

4. How We Use Your Information

Verify may collect, use, share, and otherwise process your Personal Information for a number of purposes, as described below. For each purpose, we have identified the legal basis for such processing.

4.1 Accessing the Website and Providing Services

Purpose: Verify uses your Personal Information to provide you with the Software and Services. This includes creating and managing your account; providing access to the Software and platform features; enabling platform features and functionality; administering our obligations under any Agreement; assisting you in completing a transaction; preparing and processing invoices and payments; responding to queries and providing support; maintaining functionality of our Services, Software, and products; providing you information regarding our Services and products; notifying you about changes to our Services; offering our products and services to you in a personalized way; and customizing your experience.

Legal Basis: The Master Subscription Agreement or Terms of Use, this Policy, and our contractual obligations to provide the Services to you.

4.2 Analysis and Research

Purpose: Verify uses your Personal Information for improving the quality of the Website, Software, and Services and for internal research and development, including by combining or aggregating information for internal research; generating and analyzing statistics about your use and user demographics; using anonymized data that does not personally identify you; and understanding industry trends and benchmarks through aggregated, de-identified data.

Important: Verify may use Licensee Data (financial statements and property data uploaded to the Software) in anonymized and aggregated form for research and service improvement purposes, as permitted under the Master Subscription Agreement. This anonymized data does not identify individual users, properties, or organizations.

Legal Basis: The Master Subscription Agreement or Terms of Use, this Policy, and Verify’s legitimate interest in improving the Website, Software, and Services.

4.3 Marketing

Purpose: If you submit your information to Verify, Verify may provide you with information about the Website, Services, or required notices, and may deliver marketing communications that may be of interest to you. Verify does not sell or share your Personal Information with other companies so that they can market to you.

You have the right to ask Verify not to process your Personal Information for marketing purposes. You can do so by checking certain boxes on the forms Verify uses to collect your information; by contacting Verify at support@getverify.co; or by clicking “unsubscribe” at the bottom of Verify marketing communications.

Legal Basis: Your consent or our legitimate interest in promoting our Services, where permitted by law.

4.4 Security

Purpose: Verify may use your Personal Information for safety and security purposes, including detecting, preventing, and responding to fraud; protecting against intellectual property infringement; investigating violations of the Master Subscription Agreement, Terms of Use, or law; responding to misuse of the Services; protecting the rights of Verify and other users; maintaining the integrity of the Website and Software; and ensuring your safety or the safety of others.

Legal Basis: Our legitimate interest in protecting the security of our systems and our users, and compliance with legal obligations.

4.5 Service Providers

Purpose: Verify engages third-party service providers (such as hosting, analytics, security, and marketing providers) to assist in operating, providing, and marketing the Software and Services. As permitted under our Master Subscription Agreement, such third parties are subject to confidentiality obligations substantially as protective as those in the Agreement.

Legal Basis: The necessity to provide the Services and our legitimate interest in improving the Website, Software, and Services.

5. Data Sharing and Disclosure

5.1 We Do Not Sell Your Information

Verify does not sell, rent, share, or disclose your Personal Information or financial data to third parties for monetary or other valuable consideration. We do not engage in the sale or sharing of personal information for cross-context behavioral advertising purposes. If, in the future, we enter into arrangements that fall within the definition of a “sale” or “share” under applicable privacy laws, we will update this Policy and our compliance practices accordingly, and provide you with notice and the ability to opt-out as required by law.

5.2 Service Providers (Subprocessors)

We may share information with trusted service providers (subprocessors) who assist us in operating our platform and providing the Services, such as:

Cloud infrastructure and hosting providers (e.g., AWS, Google Cloud)
Security and monitoring services
Customer support and communication tools
Analytics and performance monitoring services
Payment processing services (if applicable)
Marketing and advertising platforms, and email service providers

These service providers are contractually obligated to protect your information and may only use it to provide services to Verify. They are prohibited from using your information for their own purposes. A current list of subprocessors is available upon request by contacting us at support@getverify.co.

5.3 Legal Requirements

We may disclose information when required by law or when we believe in good faith that disclosure is necessary, including in response to valid legal process (subpoenas, court orders, warrants); to comply with applicable laws and regulations; to respond to claims that content violates the rights of third parties; to protect the rights, property, or safety of Verify, our users, or the public; in connection with the investigation or prosecution of fraud, security incidents, or other illegal activity; and to enforce our Terms of Use or other agreements.

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, user information may be transferred as part of that transaction. We will notify users of any such change in ownership or control of Personal Information through email notification to registered users, a prominent notice on the Website, and updates to this Policy. Any entity that Verify transfers Personal Information to will not be permitted to process your Personal Information other than as described in this Policy without providing you notice and, if required by applicable laws, obtaining your consent.

5.5 Other Disclosure

Verify may disclose Personal Information about you to others if Verify has your valid consent; as necessary to pursue available legal remedies or defend legal claims; to resolve disputes with users or third parties; or to our affiliates or subsidiaries for purposes consistent with this Policy.

6. Storage and Security

6.1 Jurisdiction and International Data Transfers

Information collected through the Website, Software, Services, or platform will be stored in, processed in, and subject to the laws of the United States, which may not provide the same level of protection for your information as your home country, and may be available to the United States government or its agencies under a lawful order made in the United States. By using the Services, you acknowledge and consent to such transfer to, storage in, and processing within the United States. If you do not agree, you should not use the Services. All disputes arising out of or related to this Policy or the Services will be subject to the exclusive jurisdiction of the state and federal courts located in New York, New York, in accordance with the governing law provisions of the Master Subscription Agreement.

6.2 Security

Verify is committed to protecting your information from unauthorized access, use, or disclosure. We implement comprehensive security measures, including:

Encryption of data in transit using industry-standard SSL/TLS protocols
Encryption of data at rest
Regular security assessments and vulnerability scanning
Access controls and multi-factor authentication mechanisms
Monitoring and logging of system access and security events
Network segregation and firewall protections
Regular security training for employees, and incident response procedures

THE WEBSITE, SOFTWARE, SERVICES, AND PLATFORM MAINTAIN ADMINISTRATIVE, TECHNICAL, AND PHYSICAL SAFEGUARDS DESIGNED TO PROTECT THE INFORMATION COLLECTED. HOWEVER, NO INFORMATION SYSTEM OR COMMUNICATION CAN BE 100% SECURE, SO VERIFY CANNOT GUARANTEE THE ABSOLUTE SECURITY OF YOUR INFORMATION. THE SOFTWARE IS PROVIDED “AS IS” WITHOUT WARRANTY OF ANY KIND. VERIFY IS NOT RESPONSIBLE FOR THE SECURITY OF INFORMATION THAT YOU TRANSMIT OVER NETWORKS THAT VERIFY DOES NOT CONTROL. YOU ARE RESPONSIBLE FOR MAINTAINING THE CONFIDENTIALITY OF YOUR ACCOUNT CREDENTIALS.

For detailed information about our security practices, please refer to our Operations Security Policy.

6.3 Data Retention

Verify will not retain Personal Information longer than is necessary to fulfill the purposes for which it was collected or as required by applicable laws or regulations.

Active Accounts: We retain your account information for as long as your account is active and as necessary to provide the Services.
Closed Accounts: Personal Information will be retained after account closure unless you explicitly request deletion. If you request deletion, we will delete or anonymize it within 90 days, except where retention is required by law, necessary for legitimate business purposes (dispute resolution, fraud prevention, legal compliance), or the information has been aggregated and anonymized.
Backup Data: Information may remain in our backup systems for up to 30 days following deletion from production systems. Backups are created daily and retained for 30 days.
Anonymized Data: Anonymized data collected for analytical and research purposes may be retained indefinitely.
Licensee Data: Licensee Data is subject to the retention terms specified in the Master Subscription Agreement between Verify and the customer.

If you wish to request deletion of your Personal Information, you may contact us at support@getverify.co. We will respond to your request in accordance with applicable law.

7. Notice to European Residents: GDPR

If you are a resident of the European Economic Area (EEA) or the United Kingdom, Verify will process your Personal Information in compliance with the EU General Data Protection Regulation (“GDPR”) and relevant UK laws and regulations.

Data Controller and Data Processor: For information submitted using the Website for marketing purposes or account creation, Get Verify, Inc. is the data controller. For information submitted through customer accounts, including financial statements and property data uploaded by customers, Get Verify, Inc. is a data processor, processing data on behalf of the customer.

Data Protection Officer: Verify has appointed a Data Protection Officer (DPO) responsible for overseeing our data protection practices and monitoring compliance with this Policy and applicable data protection laws. You may contact our Data Protection Officer, Alfonso Morera, at privacy@getverify.co with any questions, concerns, or requests regarding your personal data.

Your Rights: Where Verify processes your Personal Information as a data controller, in certain circumstances you will have the following rights:

Right of confirmation — to obtain confirmation of whether we are processing your personal data
Right of access — to access the personal data we hold about you
Right to rectification — to correct inaccurate or incomplete personal data
Right to erasure — to request deletion under certain circumstances
Right of restriction of processing — to restrict how we use your data under certain circumstances
Right to data portability — to receive your data in a structured, commonly used format
Right to object — to object to our processing under certain circumstances
Right to withdraw consent — where we rely on consent as the legal basis
Right to lodge a complaint — with a supervisory authority

To exercise any of these rights, please contact our Data Protection Officer at privacy@getverify.co or contact us at support@getverify.co. Where a customer uses our platform and services, we may store your personal information on behalf of and under the instructions of our customers, processing it as a data processor on that customer’s behalf. The data protection rights listed above do not apply where we process your data as a data processor on behalf of a customer. If your data has been submitted to us by or on behalf of a Verify customer, please inquire with that customer directly.

8. Notice to California Residents: CCPA

As of January 1, 2023, verified California residents have specific rights under the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”).

8.1 Your California Privacy Rights

You have the right to:

Request disclosure of our personal information collection practices during the prior 12 months, including the categories of information we collect, the sources, our business purpose, and the categories of third parties with whom we share it
Request a copy of the personal information we have collected about you during the prior 12 months
Request disclosure of our information sharing practices during the prior 12 months
Request that we not sell or share personal information about you
Request deletion of your personal information, subject to certain exceptions
Request correction of inaccurate personal information we may have about you
Request that we limit the use and disclosure of sensitive personal information

8.2 How to Make a Request

California residents may contact us at support@getverify.co. We will ask you for information that allows us to reasonably verify your identity and will use that information only for that purpose. We will acknowledge receipt of your request within 10 days and endeavor to respond within 45 days (with up to an additional 45 days if needed, with notice). For requests that we not sell or share your information, we will comply within 15 days. You may make disclosure requests up to twice within a 12-month period; you may request that we not sell information or for deletion at any time.

8.3 Exceptions to Deletion

California law permits us to retain certain information and not delete it where the information is necessary to complete a transaction or perform a contract; detect or prosecute security incidents, fraud, or illegal activity; debug and repair errors; exercise free speech; comply with legal obligations; or use the information internally in ways reasonably aligned with your expectations. If we receive a deletion request, we will notify any service providers we have engaged to delete your information as well.

8.4 Non-Discrimination

We will not discriminate against you as a result of your exercise of any of these rights. We will not deny you goods or services, charge you different prices or rates, or provide you a different level or quality of goods or services.

8.5 Using an Authorized Agent

You may submit a request through someone holding a formal Power of Attorney. Otherwise, you may submit a request using an authorized agent only if you provide the agent with written permission to make a request and you verify your own identity directly with us. We will require the agent to submit proof that they have been authorized to make requests on your behalf.

8.6 Verify Does Not Sell Your Information

As stated in Section 5.1, we do not sell, share, or disclose your information to third parties for monetary or other valuable consideration. If, in the future, we enter into arrangements that fall within the definition of a “sale” or “share” under the CCPA as amended, we will update this Policy and provide appropriate notice and opt-out mechanisms.

8.7 When We Act as a Service Provider

We may also act as a service provider or processor to customers who use our technology to process Personal Information. We are not responsible for and have no control over the privacy and data security practices of such customers. If your data has been submitted to us by or on behalf of a Verify customer, please inquire with that customer directly.

9. Cookie Policy

9.1 What Are Cookies

Cookies are small pieces of data that are stored on your computer, mobile phone, or other device when you first visit a page. Verify uses cookies, web beacons, and similar technologies (“Cookies”) to enhance your user experience, understand your usage of the Website and Services, and to perform analytics. Cookies may also be set by other websites or services that run content on the page you are visiting. Session Cookies remain on your device until you leave the Website; Persistent Cookies remain for a longer period until you delete them or they expire.

9.2 How We Use Cookies

Verify uses Cookies for the following purposes:

Essential/Functional Cookies: to enable security features, maintain user sessions and authentication, prevent fraud, protect your data, and remember your preferences
Performance/Analytics Cookies: to analyze how you use the Website, monitor performance, identify and fix errors, and research features
Marketing Cookies: to provide personalized content, deliver relevant advertisements, and measure the effectiveness of marketing campaigns

9.3 Third-Party Cookies

Verify may use third-party Cookies on the Website. Google Analytics tracks unique visitors and provides analytics reports showing website usage and referral sources; see policies.google.com/privacy for details. The specific third-party cookies we use may change over time — please check this section regularly, or contact us at support@getverify.co for current information.

9.4 Managing Your Cookie Preferences

You can control and/or delete cookies as you wish — for details, see aboutcookies.org. You can delete all cookies already on your computer and set most browsers to prevent them from being placed. If you disable cookies, you may have to manually adjust some preferences every time you visit, and some functionality may not work as intended. Essential cookies required for the Website to function cannot be disabled through browser settings. As stated in Section 3.5, Verify does not currently respond to Do Not Track signals.

10. Data Access and User Rights

10.1 Access to Your Data

You have full access to view and manage all information and financial data you have uploaded to the Verify platform through your account dashboard. You can view your account information, access all financial statements and documents you have uploaded, and export your data in commonly used formats.

10.2 Account Management

You may update your account information at any time through your account settings, including your name and phone number; job title and professional information; password and security settings; and communication preferences.

10.3 Requesting Account Closure or Data Deletion

You may close your account at any time by contacting us at support@getverify.co. Closing your account will terminate your access to the Services, but will not automatically delete your Personal Information. If you wish to request deletion of your Personal Information, please contact us at the same address; we will respond in accordance with applicable law and as described in Section 6.3.

Important distinction: Personal Information (name, email, job title, password) can be deleted upon request, subject to legal retention requirements. Licensee Data (financial statements and documents uploaded to the Software) is owned by the customer organization and is not deleted through individual user requests — its retention and deletion is governed by the Master Subscription Agreement.

10.4 Updating or Correcting Your Information

You are responsible for ensuring that the information you provide to Verify is accurate, current, and complete. If you believe any information we hold about you is inaccurate or incomplete, you may update it directly through your account settings, or contact us at support@getverify.co to request corrections.

10.5 Rights Under Applicable Law

Depending on your location, you may have additional rights under applicable privacy laws, including the right to access, correct, delete, restrict processing of, or port your information; to object to processing; to withdraw consent; and to lodge a complaint with a supervisory authority. For specific rights for European and California residents, see Sections 7 and 8 above.

11. Third-Party Websites

The Website and communications from Verify may contain links to websites operated by third parties. You acknowledge and agree that Verify is not responsible for the collection, use, or privacy practices of such websites that are not under Verify’s control. Verify encourages you to review the privacy policies of each third-party website you visit. This Policy does not apply to third-party websites, and Verify is not responsible for their content, functionality, or privacy practices.

12. Children’s Privacy

The Website and Services are not directed to, nor does Verify knowingly collect information from, children under the age of 13 (or the applicable age of digital consent in your jurisdiction). The Services are intended for business use by professionals in the real estate industry. If you become aware that a child under your care has provided information to Verify without parental consent, please contact Verify immediately at support@getverify.co. If we become aware that we have collected personal information from a child under the applicable age without parental consent, we will take steps to delete that information promptly.

13. Other Agreements

You may from time to time enter into binding legal agreements relating to certain Services available through the Website, such as the Terms of Use, Service Level Agreements, or other contractual arrangements, which may have terms that are different from those of this Policy. In the event of any inconsistency between this Policy and such other agreements, the terms of such other agreement shall control with respect to the specific Services covered by that agreement.

14. Contact Information

If you have any questions about this Policy, the collection or use of information about you, or wish to exercise any of your privacy rights, please contact us:

Get Verify, Inc. — Data Protection Officer Attn: Alfonso Morera, Data Protection Officer
Email: privacy@getverify.co

Get Verify, Inc. — Privacy Team Email: support@getverify.co

We will respond to your inquiry within a reasonable timeframe and in accordance with applicable law.

15. Document Management Information

Last Updated: July 7, 2026. By using the Verify Website and Services, you acknowledge that you have read and understood this Privacy and Cookie Policy and agree to its terms.