Who We Are
Veritas Appraisals and Consulting, LLC is a limited liability company organized under the laws of the State of Kansas. We operate the Appravia platform, a software-as-a-service application designed to help real estate appraisers and appraisal firms manage orders, track invoices, and organize workflow.
Mailing Address: 15621 W 87th St, Ste 350, Lenexa, KS 66219
For privacy-related questions, contact us at privacy@appravia.com.
Scope of This Policy
This Privacy Policy applies to all visitors to appravia.com, all registered users and Subscribers, and all data submitted to or processed through the platform, including data about third parties (such as appraisal clients, borrowers, or property owners) that a Subscriber uploads.
Data We Collect
A. Information You Provide Directly
| Category | Examples | When Collected |
|---|---|---|
| Account Information | Name, email address, business name, phone number, password | Registration |
| Billing Information | Payment method details (processed by payment provider — we do not store raw card numbers), billing address | Subscription signup |
| Profile Data | Appraiser license number, state(s) of licensure, firm name, preferences | Account setup |
| User-Submitted Content | Order data, invoice records, appraisal documents, notes, uploaded files, activity logs | Ongoing platform use |
| Communications | Support tickets, feedback submissions, emails sent to us | As submitted |
B. Information Collected Automatically
| Category | Examples |
|---|---|
| Usage Data | Pages visited, features used, actions taken within the app, session duration, error logs |
| Device & Browser Data | IP address, browser type and version, operating system, screen resolution, referring URL |
| Authentication Logs | Login timestamps, session tokens, failed login attempts |
How We Use Your Data
| Purpose | Description | Legal Basis |
|---|---|---|
| Service Delivery | Operating, maintaining, and providing all features of the Appravia platform | Contract performance |
| Account Management | User authentication, account settings, access control, password recovery | Contract performance |
| Billing | Processing payments, issuing invoices, managing subscriptions and renewals | Contract performance |
| Customer Support | Responding to requests, resolving issues, troubleshooting | Legitimate interest / Contract |
| Security | Detecting, preventing, and responding to fraud, abuse, and security threats | Legitimate interest |
| Service Improvement | Analyzing aggregate usage patterns to improve performance and features. We do not use individual appraisal content for this purpose. | Legitimate interest |
| Legal Compliance | Meeting obligations under applicable law, responding to lawful requests | Legal obligation |
| Communications | Service updates, security notices, billing alerts, and (with your consent) product announcements | Contract / Consent |
Sensitive Appraisal & Financial Data
Documents and data stored within Appravia may include appraisal reports and work files, borrower financial information, lender and AMC engagement records, PII of property owners and clients, and commercially sensitive fee and business data. We treat all User-Submitted Content as confidential by default:
- Access to User-Submitted Content is restricted to you and your authorized users, our engineering and support staff on a strict need-to-know basis, and our infrastructure providers under confidentiality obligations.
- We do not read, review, analyze, or use the substantive contents of your appraisal files for any purpose other than storing and displaying them to you.
- We do not disclose the contents of your uploaded files to any third party unless compelled by law or court order, in which case we will notify you to the extent legally permitted.
Sharing & Disclosure of Information
We do not sell, rent, or trade your personal information or User-Submitted Content. We share data only in the following limited circumstances: with service providers who help us operate the platform (under contractual confidentiality obligations); when required by law, subpoena, or court order; when necessary to protect our rights or the safety of others; and in connection with a business transfer (with prior notice and your right to delete your data).
Third-Party Service Providers
| Provider | Role | Data Involved |
|---|---|---|
| Supabase | Database hosting, authentication, file storage | All User Data, account credentials, uploaded files |
| Vercel | Application hosting & content delivery | Request logs, IP addresses, usage data |
| Payment Processor | Billing & subscription management | Billing details, transaction records |
| Email Provider | Transactional email delivery | Email address, notification content |
We do not use advertising networks or social tracking pixels on the platform.
Data Security
We implement administrative, technical, and physical safeguards to protect your data, including:
- Encryption in transit: All data transmitted between your browser and our servers is encrypted via TLS (HTTPS).
- Encryption at rest: Stored data is encrypted at the database and file storage layer.
- Access controls: Role-based access limits who on our team can access your data.
- Authentication security: We support and encourage strong passwords and multi-factor authentication.
- Infrastructure security: Our hosting providers (Supabase, Vercel) maintain their own SOC-level security programs.
Data Breach Notification
In the event of a confirmed data breach reasonably likely to result in harm, we will notify affected Subscribers without unreasonable delay — and within any timeframe required by applicable state or federal law. Our notification will describe what happened, what data was involved, our response, and steps you can take to protect yourself.
Data Retention
| Data Type | Retention Period |
|---|---|
| Account & Profile Data | Duration of account, plus 30 days after deletion |
| User-Submitted Content (orders, files, invoices) | Duration of account, plus 30 days after account closure for export |
| Billing Records | 7 years (tax and accounting obligations) |
| Usage & Access Logs | Up to 12 months for security purposes |
| Support Communications | 3 years |
| Data required by law | As required by applicable law or regulation |
Cookies & Tracking Technologies
| Cookie Type | Purpose | Can You Opt Out? |
|---|---|---|
| Strictly Necessary | Authentication, session management, security tokens. Required for the Service to function. | No — required for login |
| Functional | Remembering your preferences, UI state, and settings. | Partial — may affect experience |
| Analytics | Aggregate, anonymized usage statistics to improve the Service. No individual appraisal content is analyzed. | Yes — contact us to opt out |
Your Rights & Choices
Depending on your location and applicable law, you may have the following rights regarding your personal data. To exercise any of these rights, contact us at privacy@appravia.com.
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of your personal data, subject to legal retention requirements.
Request an export of your data in a machine-readable format.
Request that we restrict processing of your data in certain circumstances.
Object to processing based on our legitimate interests.
Unsubscribe from marketing emails at any time via the unsubscribe link or by contacting us.
Close your account at any time. See Section 9 for post-closure data handling.
We will respond to verifiable requests within 30 days. We may ask you to verify your identity before processing requests. We will not discriminate against you for exercising your privacy rights.
California Privacy Rights (CCPA / CPRA)
We do not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising. In the past 12 months, we have collected: identifiers (name, email, IP address); commercial information (billing records, subscription history); internet activity (usage logs, session data); and professional information (appraiser license, business name).
California-specific rights include the right to Know, right to Delete, right to Correct, and the right to Non-Discrimination. To submit a CCPA request, contact us at privacy@appravia.com with the subject line "CCPA Privacy Request." We will respond within 45 days.
GLBA Notice for Financial Information
We act as a service provider processing NPI on your behalf. We maintain safeguards for NPI consistent with GLBA's Safeguards Rule, do not use NPI for our own marketing or business purposes, and do not disclose NPI to third parties except as necessary to provide the Service or as required by law.
As the party that controls and submits this data, you bear the primary compliance obligation under GLBA. If your practice requires a formal data processing addendum, please contact us at privacy@appravia.com.
Children's Privacy
The Appravia platform is a professional business tool not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected such information, we will delete it promptly.
International Users
Appravia is operated in the United States. If you access the Service from outside the United States, your data will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer. The Service is not currently designed or marketed for use in the European Economic Area (EEA).
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will post a prominent notice within the Appravia dashboard, send an email notification to the address on your account, and update the "Last Revised" date at the top of this page. Material changes become effective 14 days after notice is provided.
Contact Us & Privacy Requests
Privacy & Data Requests
Veritas Appraisals and Consulting, LLC · Operating as Appravia
15621 W 87th St, Ste 350, Lenexa, KS 66219
Privacy: privacy@appravia.com | Support: support@appravia.com
Response time: We will respond to verifiable privacy requests within 30 days. For California residents making CCPA requests, we will respond within 45 days and may extend by an additional 45 days with notice.