Legal

Privacy Policy

Working draft — pending review by counsel before public launch.

What we collect

• Your filing: the photograph of your will (immediately encrypted), your name, mailing address, phone, and email.
• Your people: names and contact details of the next-of-kin you designate.
• Payments: handled by Stripe; we never see or store your card number.
• Sign-in: handled by WorkOS; we store your account identifier and email.
• Death reports: reporter contact details and death-certificate uploads, which are encrypted at rest.
• Usage: standard server logs and Google Analytics with IP anonymization on public pages.

How it’s protected

Every piece of personal information in our database is encrypted with keys held outside the database. Your will photograph is encrypted with a unique key before it touches any storage; the copy stored on IPFS is ciphertext that cannot be read without that key. Staff access to personal data is role-restricted and every access is logged.

What we share, and with whom

• Stripe (payments), WorkOS (sign-in), Mailgun (the emails we send you), Chainletter (storage and blockchain stamping of your encrypted file) — each receives only what its job requires.
• Your named contacts and courts: upon a verified death, per your instructions and the law.
• Nobody else. We do not sell, rent, or trade personal information. Ever.

Retention

Account and filing records are kept while your record exists; your sealed file is kept privately to honor your release instructions. Hosting of the encrypted file on our web server ends per your plan, after which it moves to private long-term archival storage; the blockchain record is permanent by design. You may close your account and request deletion of personal data at any time — we will explain plainly what can be deleted and what the blockchain makes permanent (the fingerprint of your encrypted file; never its contents).

Your choices

Email us to access, correct, or delete your information, or to opt out of anything that isn’t strictly operational. We answer within 30 days, usually much faster.