Last updated: January 15, 2026

VeraGov is committed to protecting privacy and uses reasonable safeguards to help keep information safe.

This Privacy Policy explains how VeraGov collects, uses, shares, and protects information when you use our website or services. We use information to operate our services, support workflows, process payments, maintain security, and meet legal and regulatory requirements, including those related to the U.S. Department of Veterans Affairs (“VA”) programs.

We may share information if required by law, court order, or other legal process. We may also share information when we believe it is needed to enforce our policies, respond to claims, or protect rights, property, or safety.

VeraGov may act as a service provider or data processor. In those cases, the customer controls the personal data, and VeraGov processes it only under the customer’s agreement and written instructions.

Descriptions of security controls, safeguards, or compliance measures in this Privacy Policy describe VeraGov’s general practices and do not create contractual warranties or guarantees.

We use reasonable safeguards. Access is limited based on role and need. Vendors that handle data for us must follow contract terms that require security and confidentiality.

No security program can guarantee complete security.

In the event of a confirmed or suspected security incident involving personal data, VeraGov will follow its incident response procedures and provide notifications as required by applicable law.

Where required by applicable law, VeraGov may enter into Business Associate Agreements or similar arrangements. Signature workflows and document handling features are designed to support applicable regulatory requirements and provide timestamped records where applicable.

We may collect the following categories of information, as applicable:

  1. Identifiers and contact
  2. Communications and support
  3. Billing and payment
  4. Government-issued
  5. Medical or health-related
  6. Technical and usage
  7. Geolocation data derived from IP

We do not collect personal contacts from a user’s device unless explicitly provided.

We may collect information through forms you submit, login sessions, cookies and similar tools, analytics, and (where used) third-party integrations. Information may be processed in other countries, which may have different privacy laws.

VeraGov may share information with the following categories of recipients solely to provide platform services and comply with legal obligations:

  1. Payment
  2. Cloud infrastructure and hosting
  3. Identity verification, security, and compliance
  4. Authorized VA systems and other government
  5. Authorized VA-accredited persons or

VeraGov does not sell personal data, does not use personal data for targeted advertising, and does not monetize personal data.

Users are responsible for ensuring they have authority to provide information relating to other individuals.

VeraGov keeps personal data only as long as needed to provide services and meet legal, regulatory, audit, or security obligations. Claim-related records may be kept longer where required for audits or government program requirements.

If an account has no activity for 24 months, we may keep the data for up to 36 months from the last activity. We may keep it longer if required by law or a government program.

After the retention period, we delete the data or de-identify it. Some records may be kept longer for audits, evidence, or other legal needs. Users understand that data may be subject to legal discovery or government audit.

We may use de-identified or aggregated data to improve services, monitor security, and build new features. We do not use this data to identify individual users.

VeraGov honors applicable privacy rights, subject to legal, regulatory, audit, and fraud-prevention obligations.

Users may request access, correction, or deletion of personal information by emailing support@veragov.com from the email address associated with their account with the subject line “User Data Deletion Request.”

Requests are subject to identity verification. Verified deletion requests are generally completed within 45 days, except where retention is required by law or government program obligations.

VeraGov may send service-related or transactional communications. Promotional communications may be opted out of, but service notices may still be sent.

Cookies and similar technologies are used to support website functionality, analytics, and session management. Disabling cookies may limit features or performance.

Our website or services may link to or integrate with third-party sites or applications. We are not responsible for their terms, privacy, security, or other practices.

Our platform is not intended for persons under 13, and VeraGov does not knowingly collect personal data from persons under 13.

If VeraGov undergoes a merger, acquisition, sale of assets, or business closure, users will be notified, and any successor will be required to adhere to privacy practices consistent with this Privacy Policy.

VeraGov may update this Privacy Policy from time to time. Material changes will be communicated by posting an updated policy on our website. If you keep using our website or services after we post an update, you accept the updated policy.

Questions regarding this Privacy Policy may be sent to support@veragov.com.