1. Overview

BFF Software LLC ("Company," "we," "us") operates VeriBank.io (the "Service"), a bank statement analysis platform for merchant cash advance (MCA) brokers and lenders. This Privacy Policy describes how we collect, use, and protect your information when you use the Service.

By accessing or using VeriBank.io, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Account Information

When you subscribe, we collect your name, email address, and billing information through our payment processor, Stripe. We do not store your full credit card number on our servers.

2.2 Bank Statement Files

You upload PDF bank statements to the Service for analysis. These files are processed in memory and on temporary server storage. Uploaded statement files are deleted from our servers within 24 hours of analysis completion. We retain the structured analysis output (the report) associated with your account.

2.3 Analysis Reports

We store the structured output generated from each analysis — including financial metrics, risk scores, and cash flow data — associated with your account. This data is used to display your report history within the Service.

2.4 Usage Data

We automatically collect technical usage data including API request timestamps, analysis count per billing period, browser/client type, and error logs. This information is used for billing, rate limiting, and service improvement.

2.5 Communications

If you contact us for support, we retain records of that communication to resolve your issue and improve the Service.

3. How We Use Your Information

• Service delivery: Processing bank statements, generating reports, and delivering analysis results.
• Billing & subscription management: Tracking usage against your plan limits, processing payments via Stripe, and enforcing plan entitlements.
• Security & fraud prevention: Detecting and preventing unauthorized access or abuse of the Service.
• Product improvement: Analyzing aggregate, anonymized usage patterns to improve analysis accuracy and platform performance.
• Communications: Sending transactional emails (e.g., subscription confirmations, API key delivery, usage alerts). We do not send marketing emails without your consent.
• Legal compliance: Meeting our legal obligations as a business.

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data or the data contained in bank statements. We may share data with:

• Stripe: For payment processing. Stripe's privacy policy governs data shared with them. See stripe.com/privacy.
• Infrastructure providers: Cloud hosting and email delivery service providers process data on our behalf under contractual data protection obligations.
• Law enforcement: If required by valid legal process (subpoena, court order), we may disclose information to the extent required by law.
• Business transfers: In the event of a merger or acquisition, your data may be transferred to a successor entity under the same privacy protections.

5. Data Retention

• Bank statement PDFs: Deleted within 24 hours of analysis completion.
• Analysis reports: Retained for the duration of your active subscription plus 90 days after cancellation, then permanently deleted.
• Account information: Retained for the duration of your account plus any period required by applicable law (e.g., tax records).
• Usage logs: Retained for up to 12 months for security and billing purposes.

6. Security

We implement commercially reasonable technical and organizational security measures to protect your data, including TLS encryption in transit, encrypted storage, API key authentication, and access controls limiting who can access production systems. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Data portability — receive your analysis reports in a machine-readable format
• Opt out of any marketing communications (where applicable)

To exercise any of these rights, contact us at privacy@veribank.io.

8. Contact

For privacy-related questions or requests:

BFF Software LLC
Email: privacy@veribank.io
Website: veribank.io

We will respond to privacy requests within 30 days.

1. Acceptance of Terms

By accessing VeriBank.io or using our API (collectively, the "Service"), you agree to be bound by these Terms of Service ("Terms") and our Privacy Policy. These Terms form a legally binding agreement between you (or your organization) and BFF Software LLC ("Company").

If you are using the Service on behalf of a business, you represent that you have authority to bind that business to these Terms.

2. The Service

VeriBank.io is a software-as-a-service (SaaS) platform that analyzes bank statement PDFs and generates underwriting reports intended to assist MCA brokers, ISOs, and lenders in evaluating merchant creditworthiness. The Service includes:

• AI-assisted bank statement analysis and report generation
• PDF report export
• REST API access for programmatic integration
• A subscriber dashboard for managing analyses and reports

We reserve the right to modify, suspend, or discontinue any feature of the Service at any time with reasonable notice.

3. Accounts & API Keys

Access to the Service is provided via an API key issued upon subscription. You are responsible for:

• Maintaining the confidentiality of your API key
• All activity that occurs under your API key
• Notifying us immediately at support@veribank.io if your key is compromised

You may not share, sell, or sublicense your API key to third parties. Each subscription is for use by one organization or individual.

4. Billing & Subscriptions

4.1 Plans & Pricing

The Service is offered on a monthly subscription basis. Current plans include Starter ($149/month, 200 analyses), Growth ($349/month, 600 analyses), and Enterprise ($799/month, unlimited analyses). Pricing is subject to change with 30 days' notice.

4.2 Free Trial

New users may start a 7-day free trial with no credit card required. The trial includes up to 10 analyses. At the end of the trial period, access is automatically suspended. To continue using VeriBank.io, you must subscribe to a paid plan. Trial access is limited to one trial per email address. BFF Software LLC reserves the right to modify or discontinue free trial offerings at any time.

4.3 Billing Cycle & Auto-Renewal

Subscriptions renew automatically each month on the billing anniversary date. You authorize us to charge your payment method on file via Stripe for each renewal period.

4.4 Usage Limits

Each plan includes a monthly analysis limit. Unused analyses do not roll over. If you exceed your plan limit, additional analyses will be blocked until the next billing period or until you upgrade your plan.

4.5 Refunds

All fees are non-refundable except as required by applicable law. If you cancel mid-period, you retain access through the end of the paid billing period. We do not issue prorated refunds.

4.6 Payment Failures

If a payment fails, your account will be placed in a past due state. API access may be suspended until payment is resolved. We will attempt to notify you via email before suspending access.

5. Acceptable Use

You agree to use the Service only for its intended purpose — assisting in the evaluation of merchant cash advance applications — and in compliance with all applicable laws. You may not:

• Upload bank statements without the account holder's authorization
• Use the Service to facilitate fraud, money laundering, or any illegal activity
• Reverse engineer, decompile, or attempt to extract the source code of the Service
• Resell, sublicense, or white-label the Service without a written agreement with BFF Software LLC
• Attempt to circumvent usage limits, authentication, or rate limiting
• Upload malicious files or conduct security attacks against the platform
• Scrape or systematically harvest data from the Service beyond what the API provides for your account

6. Intellectual Property

Our IP: The Service, including its software, algorithms, models, design, and branding, is owned by BFF Software LLC and protected by applicable intellectual property laws. These Terms grant you a limited, non-exclusive, non-transferable license to use the Service during your subscription period.

Your data: You retain ownership of the bank statement files you upload and the underlying data. By uploading files, you grant us a limited license to process them for the purpose of delivering the Service.

Report output: Analysis reports generated by the Service are licensed to you for your internal business use. You may share individual reports with parties directly involved in the relevant transaction (e.g., funders reviewing the merchant).

7. Disclaimers

Not financial or legal advice. Analysis reports generated by VeriBank.io are informational tools to assist underwriting decisions. They do not constitute financial advice, legal advice, or a credit decision. You are solely responsible for any lending or funding decisions made in connection with our reports.

No guarantee of accuracy. While we strive for high accuracy, automated analysis of bank statements may contain errors or omissions. Always verify critical data independently before making funding decisions.

"As is" service. The Service is provided "as is" and "as available" without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement.

8. Limitation of Liability

To the maximum extent permitted by law, BFF Software LLC shall not be liable for any indirect, incidental, special, consequential, or punitive damages — including loss of profits, data, or business opportunities — arising from your use of or inability to use the Service, even if we have been advised of the possibility of such damages.

Our total aggregate liability to you for any claims arising from these Terms or the Service shall not exceed the total amount you paid to us in the 12 months preceding the claim.

9. Termination

By you: You may cancel your subscription at any time through the Billing Portal. Cancellation takes effect at the end of your current billing period.

By us: We may suspend or terminate your access immediately if you violate these Terms, engage in fraudulent activity, or if your account is past due for more than 14 days. We will provide reasonable notice where practicable.

Upon termination, your API key will be deactivated and your data will be handled per our retention policy in the Privacy Policy.

10. Governing Law & Disputes

These Terms are governed by the laws of the State of Utah, without regard to conflict of law principles. Any disputes arising from these Terms or the Service shall be resolved through binding arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules, with proceedings conducted in Salt Lake County, Utah. You waive the right to participate in class action lawsuits.

Notwithstanding the above, either party may seek injunctive or equitable relief in a court of competent jurisdiction in Salt Lake County, Utah to prevent unauthorized use of intellectual property.

11. Contact

For legal or Terms-related questions:

BFF Software LLC
Email: legal@veribank.io
Website: veribank.io

We reserve the right to update these Terms at any time. Continued use of the Service after changes constitutes acceptance of the updated Terms. Material changes will be communicated via email to active subscribers.