Last updated: September 29, 2026
About this policy
This policy explains what VetAnvil collects, how we use it, who we share it with, how long we keep it, and how you can delete it. It covers the VetAnvil website and apps.
VetAnvil is a private company. We are not part of the U.S. Department of Veterans Affairs (VA), and VA does not endorse us.
What we collect
We collect only what we need to run VetAnvil. This is the full list of the data we collect.
Account data: your name, email address, and sign-in and security settings.
Profile and career data you enter: your military service history, skills, education, résumé, job preferences, saved jobs, and job applications.
Location: the ZIP code or city you enter. If you allow it, we also use your device's location to find care near you.
VA data: answers that VA sends back when you ask us to check something, such as whether VA confirms your veteran status.
Health information you choose to share, such as health conditions, care needs, and providers you save.
Documents and forms: files you upload, and forms you send to VA through VA Benefits Intake. These forms include your name, VA file number, and ZIP code.
Family data: details you enter about family members you add to your account.
Messages: support requests and messages you send in the app, including chats with our AI assistant.
Technical data: your IP address, browser and device type, the pages you visit, error reports, and security logs.
How we use your data
We use your data only to run and improve VetAnvil. We use it to find VA and community care, match jobs to your military experience, send forms to VA when you ask, keep your account secure, and answer your questions.
We may also use de-identified data to learn how people use VetAnvil and to fix problems. De-identified data has your name, contact details, and other identifiers removed, so it cannot reasonably be linked to you. We do not sell or share de-identified data, and we do not try to re-identify it.
Our AI features run on computers in our own Oracle Cloud account. We do not send your data to outside AI companies.
Who we share data with
We share data only with the service providers named below. Each one gets only the data it needs for its job.
Oracle Cloud Infrastructure (United States): hosts our servers, database, file storage, and backups. It also runs our sign-in service and sends our email. It stores all of the data listed above.
U.S. Department of Veterans Affairs (VA) Lighthouse APIs: when you search for VA facilities, we send your search location. When you check your veteran status, we send your name, date of birth, address, and gender if you enter it.
When you send a form to VA, we send the form, its attachments, and your name, VA file number, and ZIP code. VA form lists and benefit reference lists contain no data about you.
H1 (Ribbon Health): gives us health care provider search results. We send your search terms, ZIP code, and insurance plan if you enter one. We do not send your name or contact details.
Sentry: collects error reports so we can fix bugs. We set up these reports to leave out your name, email address, health information, and documents.
Google: provides map images and some fonts and app files. Map requests go through our servers and include only the map area. When your browser loads fonts or app files from Google, it sends your IP address.
Esri (ArcGIS): if you switch a map to satellite view, your device may load satellite images directly from Esri. Esri then gets your IP address and the map area. We send Esri no other data.
USAJOBS and O*NET (U.S. government job data): we send job search terms only. We do not send data about you.
We also share data when the law requires it, such as for a valid court order, or to protect someone's safety.
No sale, no ads, no outside use
We never sell your data. We do not show ads, and we never use your data for targeted advertising.
No third party may use your data for its own purposes without your clear consent. If we ever want to share your data in a new way, we will ask you first.
Every vendor that handles your data for us must follow terms at least as strict as this policy. Vendors may use your data only to provide their service to us.
How long we keep data
Account, profile, career, health, family, and message data: we keep it while your account is open.
Documents you upload: we keep them until you delete them or your account.
Forms you send to VA: we pass the files to VA and do not keep a copy. We keep a record of each submission until you delete your account. The record has the VA tracking number, the status, the dates, and a digital fingerprint of each file.
Veteran status checks: we show you VA's answer. We do not store the details you entered.
Server logs: we delete app logs after 7 days. Network and security logs, which can include your IP address, are deleted after 30 days.
Backups: we keep backup copies for up to 35 days. After you delete your account, your data is gone from all backups within 45 days of your request.
Dormant accounts: an account with no sign-in for 24 months is dormant. Today we do not delete dormant accounts on our own. We keep their data until the owner deletes the account.
If we start to delete dormant accounts, we will update this policy first. We will also email you at least 30 days before we delete your account.
Your rights and choices
You can see and correct most of your data in the app.
To download a copy of your data, sign in and open Settings, your account page. Choose Export my data. You get a file in a common, machine-readable format.
You can also email privacy@vetanvil.com to ask for a copy of your data or to correct it.
How to delete your account and data
You can delete your account and all of your data at any time. In the app:
1. Sign in and open Settings, your account page.
2. Choose Delete account.
3. Type the confirmation phrase.
4. Choose Permanently delete account to delete it now. Or choose Schedule deletion to delete it in 7 days.
During the 7-day grace period, you can still cancel. Sign in and choose Keep my account.
You can also email privacy@vetanvil.com from the email address on your account. We will confirm the request and delete your account the same way.
We permanently delete 100% of your data from our live systems no later than 7 days after your request. Backup copies are erased within 45 days of your request. After that, we cannot recover your data.
If a law or court order makes us keep a specific record, we keep only that record, only as long as required, and we tell you.
Security
We encrypt data in transit with TLS 1.3 and at rest with AES-256. Our servers are in the United States. Our application security follows OWASP guidelines.
No system is perfectly secure. Keep your password private, and tell us right away if you see account activity you do not recognize.
If a data breach happens
If a security breach affects your data, we will tell you by email without unreasonable delay. We will do so no later than 60 days after we find the breach. We will say what happened, what data was involved, what we are doing about it, and what you can do.
If the breach involves data from VA, we will also tell VA within 24 hours of finding it. We will tell government agencies when the law requires it.
If VetAnvil changes owners
If VetAnvil is sold, merges with another company, or transfers its assets, your data may move to the new owner. We will email you and post a notice at least 30 days before that happens.
Before the transfer, you can download your data, delete your data, or close your account. The new owner must follow this policy for any data it receives.
Changes to this policy
When we change this policy, we update the date at the top. If a change affects how we use or share your data, we will tell you by email or in the app at least 30 days before it takes effect.
We will not use your data in a new way without your consent.
Contact
Questions or requests about your data? Email privacy@vetanvil.com.