Legal

Legal updates

Last updated November 9, 2026

This page lists every change to our Terms of Use, Privacy Policy and Institutional Services Agreement, newest first, with a plain-language summary of what changed.

How we tell you about changes

  • Material changes are changes that reduce your rights, add a fee or an obligation, use or share data in a new way, keep data longer, or change how disputes are resolved. We email every affected account and list the change here at least 30 days before it takes effect. The institution portal also shows a notice.
  • Urgent changes that the law requires sooner, or that protect people or the Service, take effect earlier. We tell you as soon as we can.
  • Other changes, such as clarifications, corrections and new features that don’t reduce your rights, take effect when posted and are listed here.
  • Never retroactive. A change applies only from its effective date. We won’t use data we already hold in a materially different way without your consent.
  • Your choice. When new Terms take effect, the app asks you to accept them. If you don’t agree, you can delete your account at any time. Institutions with a signed or public-sector contract follow that contract’s amendment terms. Changes that reduce an institution’s rights apply only from its next renewal.

Change history

November 9, 2026: starting versions before launch

Published and effective November 9, 2026

  • Terms of Use. Institutions are covered by the Institutional Services Agreement, accepted online or signed. Owners can pay for an optional USPS return to a Post Office or locker; every charge is shown first, with a full refund before the first USPS scan. Material changes are announced at least 30 days ahead.
  • Privacy Policy. Describes the details used for optional mail returns and who receives them. Sets how long each kind of data is kept, including mail-return records (label 180 days, proof 18 months, payment record 7 years), and institution records after an institution stops using FindBack (90 days).
  • Institutional Services Agreement, version 1.1. Exhibit A.7 now includes the retention schedule: a 90-day read-only exit window with export, notices 30 and 7 days before deletion, backups gone within 30 days, and legal holds. Version 1.0 remains available for organizations that accepted it.

Questions

Email privacy@findbackai.com about privacy, support@findbackai.com about the Terms, or info@findbackai.com about the Institutional Services Agreement.