Privacy Notice
What we collect
- Account details: your email address, your password in a protected form that can't be read (if you set one), your name and account reference from Google or Facebook if you sign in with them, your two-step sign-in settings, and a record of sign-ins and security events (with your network address disguised).
- Profile: your name, and optionally your country and time zone.
- Will drafts and their version history, and any signing details you record.
- Files you upload and their descriptions.
- Names and email addresses of the recipients you add. We contact them only if your will is sent.
- The time you last signed in or used the service, which decides when a final will is sent.
- If you buy a plan: which plan, the amount, and when it was paid.
Why we use it
- To provide the service you asked for, including reminder emails and sending your final will to your recipients if you stop signing in.
- To keep accounts and content secure, prevent fraud and investigate incidents.
- To meet legal obligations.
We do not sell personal data or use it for advertising. We do not ask for identity documents, health information or asset details unless needed for a specific step.
Who we share it with
Carefully chosen service providers help us run the service, such as hosting, email delivery and virus checking. They act only on our instructions and under contract. If you buy a plan, our card payment provider handles your payment and card details; we receive only the plan, the amount and whether it was paid, never your card number. If you sign in with Google or Facebook, that company knows you used this service. Recipients receive your will and its files only if it is sent. A small number of SuperAdmin staff can access wills and files for support and investigation; each access is logged. [Operator to list processors and data locations.]
How we protect it
Your information is protected by optional two-step sign-in, encryption of your messages and files when they're stored, encryption on its way to and from your device, virus checks on every upload, encrypted backups and a record of important actions. Our staff can't see your messages or files; access to one specific will is only switched on in exceptional cases, such as your written request or a legal obligation, and every view is recorded. See Security and privacy for details.
Your choices and rights
You can view and correct your information in the app, export your data, and request deletion under Data and privacy. Some audit and security records are kept for a limited period for security and dispute resolution: recent ones in our database, older ones in encrypted archives, until the end of their retention period. [Operator to confirm periods: security records 2 years, audit records 10 years, emails 1 year.]
Contact
[Operator name, address and Data Protection Officer contact.] You can also contact support.