Privacy Policy

1. Introduction

LawfulWill ("we", "us", "our") is committed to protecting your privacy and the confidentiality of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online will creation platform.

By using LawfulWill, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information You Provide

When you create a will through our Service, we collect the following types of information:

• Account Information: Name, email address, password (encrypted)
• Personal Details: Full legal name, date of birth, address, marital status
• Family Information: Spouse name, children's names and dates of birth, dependent information
• Asset Information: Descriptions and estimated values of real estate, bank accounts, investments, personal property
• Beneficiary Information: Names, relationships, contact information, distribution preferences
• Executor Information: Names and contact information of designated executors
• Guardian Information: Names and contact information of designated guardians for minor children
• Final Wishes: Funeral preferences, organ donation wishes, special instructions
• Payment Information: Processed through Stripe (we do not store complete credit card numbers)

2.2 Automatically Collected Information

When you access our Service, we automatically collect certain information:

• Usage Data: Pages visited, time spent, features used, clicks
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Tracking: Session cookies, authentication tokens, preference settings
• Log Data: Access times, error logs, performance data

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To generate your will document and provide our core services
• Account Management: To create and maintain your account, authenticate your identity
• Communication: To send service-related emails (account verification, password resets, important updates)
• Payment Processing: To process transactions through our payment provider (Stripe)
• Customer Support: To respond to your inquiries and provide technical assistance
• Service Improvement: To analyze usage patterns and improve our platform
• Security: To detect, prevent, and address security issues and fraudulent activity
• Legal Compliance: To comply with legal obligations and enforce our terms

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

4.1 Service Providers

We work with trusted third-party service providers who assist us in operating our platform:

• Payment Processing: Stripe (for secure payment processing)
• Cloud Hosting: Vercel (for website hosting), Railway (for database hosting)
• Email Services: [Email provider name] (for transactional emails)

These service providers are bound by confidentiality agreements and are prohibited from using your information for any purpose other than providing services to us.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, warrants)
• Requests from law enforcement or government agencies
• Protection of our rights, property, or safety, or that of our users
• Investigation of fraud or security issues

4.3 Business Transfers

If LawfulWill is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS
• Database Encryption: Sensitive data is encrypted at rest using AES-256 encryption
• Password Security: Passwords are hashed using bcrypt with salt
• Access Controls: Strict access controls limit who can view your information
• Regular Security Audits: We conduct regular security assessments and updates
• Secure Infrastructure: Our servers are hosted in secure, SOC 2 compliant data centers

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Information is retained as long as your account is active
• Deleted Accounts: After account deletion, personal information is permanently deleted within 30 days
• Legal Requirements: Some information may be retained longer if required by law (e.g., transaction records for tax purposes)
• Backup Systems: Deleted data may remain in backup systems for up to 90 days before permanent removal

7. Your Privacy Rights

You have the following rights regarding your personal information:

7.1 Access and Portability

• Request a copy of all personal information we have about you
• Download your will documents in PDF format
• Export your data in a machine-readable format

7.2 Correction and Update

• Update your personal information at any time through your account settings
• Correct any inaccurate or incomplete information

7.3 Deletion

• Delete your account and all associated data at any time
• Request removal of specific information (subject to legal retention requirements)

7.4 Opt-Out

• Unsubscribe from marketing emails (note: we currently send only transactional emails)
• Disable cookies through your browser settings

To exercise any of these rights, please contact us at privacy@lawfulwill.com

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience:

• Essential Cookies: Required for authentication and basic functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how you use our Service

You can control cookies through your browser settings. Note that disabling certain cookies may limit your ability to use some features of our Service.

9. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately so we can delete it.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (note: we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@lawfulwill.com

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons.

We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: