Privacy policy

Searching collects nothing. No account, no marketing cookie, no phone number. You can search this site without telling us who you are.

Filing a claim collects what the state form requires: your legal name, date of birth, current address, email, optionally a phone number, your Social Security number, and the documents you upload as proof.

Our prospect database contains names and addresses published by state governments in their public unclaimed property files. We did not obtain that from you, and it was public before we touched it.

It is encrypted with AES-256-GCM under a per-record key and stored in a vault separate from our main database. The application database holds only the last four digits and an opaque reference. Decryption is a privileged operation and every decryption is logged against the operator who performed it.

It is transmitted to the state unclaimed property administrator on your claim form. It goes nowhere else. It is never used for marketing, never sold, and never shared with a data broker.

Uploads are stored outside the public web root under opaque keys. There is no public URL for your driving licence. Access is limited to staff working your claim, and is logged.

We delete claim documents on a defined retention schedule after the claim is paid or abandoned. Holding images of Social Security cards indefinitely is a liability, not an asset.

• Sell, rent or trade your personal information.
• Send marketing texts or emails to people who have not asked for them.
• Use your claim data for any purpose other than pursuing your claim.
• Share your information with other recovery firms.

You can ask for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. Deleting a Social Security number is irreversible — we overwrite the ciphertext. If a claim is in progress, deletion ends the claim.

California residents have rights under the CCPA and CPRA, including the right to know, to delete, and to opt out of sale. We do not sell personal information, so there is nothing to opt out of, but the other rights apply and we honour them.

Requests go to privacy@findmyunclaimed.com, or use the do-not-contact form.

We will notify you and the relevant state authorities within the deadlines the law sets, and we will tell you what was actually taken rather than what might have been.