originvera.com, our returning verification portal, and our household origin assurance services. Read this notice alongside our Terms of Service and E-Sign Consent Policy.
01. Processing Roles & Scope
OriginVera operates under two distinct legal capacities depending on how you interact with our infrastructure:
- Enterprise Processor / Service Provider: When licensed mortgage originators, credit underwriters, insurers, or benefit administrators commission an address, occupancy, or household composition dossier, OriginVera processes subject records strictly under written instructions and documented permissible purpose from that commissioning institution.
- Direct Controller: When operators access our console, visitors browse
originvera.com, or returning applicants authenticate at /login and voluntarily authorize a third-party partner connection, OriginVera governs that session under this Privacy Policy.
02. Categories of Information Evaluated
A. Information Submitted Directly
- Operator & Institutional Credentials: Full name, corporate email, institution license identifier, role permissions, and billing coordinates.
- Assurance Verification Assertions: Subject name, declared residential street and unit address, asserted occupancy classification, declared household adult/dependent count, and signed authorization records.
- Returning Portal & Referral Records: Email address, surname, reference identifier, requested funding amount, electronic signature metadata, and prior inquiry attributes authorized for partner evaluation.
B. Corroborative Registry & Field Artifacts
To test a residential assertion under contract and applicable law, OriginVera queries postal change-of-address and carrier-route registries, county property tax and deed filings, utility service connection headers, and geotagged threshold observations recorded by credentialed field examiners.
C. Technical Audit Telemetry
Our gateway logs IP addresses, TLS session metadata, browser user-agent strings, request timestamps, and electronic consent hashes solely for security auditing, fraud deterrence, and statutory E-Sign recordkeeping.
03. Operational Purposes & Strict Prohibitions
OriginVera utilizes personal information exclusively to:
- Triangulate residential address, household roster, and occupancy status assertions and issue cryptographically sealed assurance dossiers;
- Authenticate returning portal users, record E-Sign authorizations, and — solely when explicitly requested by the user — transmit returning inquiry files to participating financial partners;
- Investigate consumer accuracy disputes, enforce permissible-purpose rules, and satisfy statutory audit obligations;
- Protect gateway availability, detect unauthorized credential use, and maintain SOC 2 Type II audit logs.
No Data Brokerage or Ad Profiling: OriginVera never sells household verification dossiers to marketing list brokers and never uses assurance artifacts to build behavioral advertising segments.
04. Verification Subject Notice & Dispute Rights
If OriginVera evaluated your residential address, household composition, or occupancy status, a licensed client institution certified a lawful business or statutory permissible purpose — such as underwriting a mortgage, credit line, insurance policy, tenancy, or benefit application — supported by appropriate notice or consent.
Free 30-Day Accuracy Reinvestigation
You have the unconditional right to inspect the substance of an OriginVera assurance finding concerning you and contest any element you believe is incomplete, outdated, or inaccurate at zero cost:
- How to Initiate a Dispute: Email [email protected] or call (888) 912-4630 with your full name, subject property address, and dossier reference code (if known).
- Reinvestigation Timeline: Our Wilmington compliance team re-examines underlying registry feeds and field artifacts within 30 calendar days of receipt.
- Correction & Client Notification: Any unverified or inaccurate item is promptly amended or expunged, and OriginVera issues an updated sealed dossier directly to the commissioning institution at no fee to you.
05. Authorized Disclosures
We disclose personal data only to: (a) the commissioning institution that ordered an assurance dossier; (b) participating third-party financial providers when you explicitly execute Partner Connection Consent on /login; (c) vetted infrastructure vendors and field examiners restricted to minimum-necessary task details under binding confidentiality agreements; and (d) courts or regulators pursuant to valid legal process.
06. Retention & Scheduled Cryptographic Purge
- Assurance Dossiers & Field Imagery: Retained for 24 months by default (or the shorter duration mandated by an enterprise master agreement), then cryptographically purged.
- Security, Consent & Reinvestigation Logs: Retained up to 7 years to satisfy federal E-Sign, FCRA, and financial audit mandates.
07. SOC 2 Type II Security Controls
OriginVera enforces TLS 1.3 encryption in transit, AES-256 encryption at rest, hardware-backed key rotation, multi-factor operator access, continuous anomaly monitoring, and annual independent penetration assessments.
08. U.S. State Privacy Rights (CCPA/CPRA, VCDPA, CPA, CTDPA & Delaware DPDPA)
Eligible residents may request confirmation of personal data held, access portable copies, correct inaccuracies, request deletion (subject to statutory audit exceptions), and exercise opt-out rights without discrimination. Submit verified requests to [email protected] or call (888) 912-4630.
10. Data Protection & Dispute Desk
OriginVera Assurance LLC — Office of Assurance Governance
1105 N Market St, Suite 1300, Wilmington, DE 19801
Telephone: (888) 912-4630
Disputes & Privacy: [email protected]