Welcome to ClaimCheck ("we," "our," or "us"), operated by Society Media Tech.
We respect your privacy and are committed to protecting your personal data.
This privacy policy will inform you as to how we look after your personal data when you visit our websites (including all subdomains and related applications)
and tell you about your privacy rights and how the law protects you.
2. Data We Collect
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
Identity Data: includes first name, last name, username or similar identifier.
Contact Data: includes email address.
Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
Usage Data: includes information about how you use our website, products and services.
Financial Data: includes payment card details processed securely through Stripe. We do not store your full card number.
🔍 Vestige-Specific Data
In addition to the above, Vestige collects the following data specific to our unclaimed property search service:
Search Queries: Names, states, and cities you search for unclaimed property records.
Unlocked Records: Details of which property records you have purchased access to.
Download History: When and how many times you download Claim Dossier PDFs.
Referrer Information: How you arrived at our website (e.g., search engine, direct link).
3. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
Where we need to perform the contract we are about to enter into or have entered into with you.
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
Where we need to comply with a legal obligation.
📋 How Vestige Uses Your Data
Search Processing: Your search queries are used to find matching unclaimed property records in our database.
Service Delivery: When you unlock a record, we use your data to generate personalized Claim Dossiers with step-by-step recovery instructions.
Analytics: Aggregated, anonymized search data helps us understand demand and improve our record coverage.
Fraud Prevention: We monitor for suspicious activity patterns to protect our service and users.
Communication: We may email you about your unlocked records, new matching records found, or account updates.
4. Data Storage & Third-Party Services
Your data is stored securely using industry-standard practices:
Database: DigitalOcean Managed MySQL with encryption at rest.
File Storage: DigitalOcean Spaces (S3-compatible) with encryption.
Payment Processing: Stripe handles all payment data (PCI-DSS compliant).
Authentication: Google OAuth for social login (optional).
Error Monitoring: Sentry for application error tracking and performance monitoring.
Email Service: Postmark for transactional emails (receipts, notifications).
5. Data Retention
📅 Vestige Data Retention Policy
Search History: Anonymous search logs are retained for 1 year for analytics. Searches linked to your account are retained until account deletion.
Unlocked Records: Your unlocked records and Claim Dossiers remain accessible indefinitely while your account is active.
Generated PDFs: Claim Dossier PDFs are stored for 90 days after generation, then automatically regenerated on demand.
Payment Records: Transaction records are retained for 7 years as required for tax and accounting purposes.
After Deletion: When you delete your account, personal data is removed within 30 days. Anonymized analytics data may be retained.
We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for,
including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
6. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed:
All data transmitted via HTTPS/TLS encryption
Passwords hashed using bcrypt with secure salting
Regular security audits and penetration testing
Rate limiting to prevent abuse
CSRF protection on all forms
Content Security Policy headers
7. Your Rights (GDPR)
Under certain circumstances, you have rights under data protection laws in relation to your personal data:
Right to Access: Request a copy of your personal data.
Right to Rectification: Request correction of inaccurate data.
Right to Erasure: Request deletion of your personal data.
Right to Portability: Request transfer of your data in machine-readable format.
Right to Object: Object to processing of your personal data.
Right to Restrict Processing: Request restriction of processing.
To exercise any of these rights, please use the "Download My Data" or "Delete Account" features in your account settings,
or contact us directly at the email below.
8. Cookies
We use cookies to maintain your session and preferences. You can manage your cookie preferences at any time using our cookie consent banner.
Essential Cookies (Always Active)
PHPSESSID: Session identifier for authentication (httpOnly, secure). Expires when browser closes.
csrf_token: Protects against cross-site request forgery attacks.
vestige_cookie_consent: Stores your cookie preferences (365 days).
Optional Cookies (Require Consent)
Analytics Cookies: Help us understand how visitors use our site. Only set if you consent.
We do not use advertising or third-party tracking cookies.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page
and updating the "Last Updated" date. We encourage you to review this policy periodically.
10. Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us at: