Privacy and how we handle your documents

The most sensitive things we hold are a driver's license photo, an EIN document, and a voided check. Here is exactly what happens to them.

• Photos you send go from your phone straight to encrypted storage (AWS S3, encrypted with a dedicated KMS key). They are never sent or received by email, and never appear in logs.
• One person on our claims team views them, through links that expire in minutes, only to prepare and support your claim.
• They go to exactly one place: the California State Controller's Office, as part of your claim package or a response to its document request.
• They are deleted 12 months after your claim pays or closes. If you cancel, they are deleted within 30 days.
• We never ask for a Social Security number, a bank or email login, or any payment method, and we never sell or share your information with anyone else.
• Your name, company, and claim details exist in our systems only to run your claim and the quarterly re-check you authorized.

Questions or a deletion request: email us any time. Graypoint Data, LLC is the legal entity behind Graypoint Recovery.