Legacy Vault ("we," "our," or "us") operates the Legacy Vault application at legacy-safe-keep.com. This policy explains how we collect, use, and protect your information.
1. Information We Collect
- Identity data: full name, email address, phone number
- Legacy content: personal messages, asset details, uploaded documents
- Contact data: trusted contacts and beneficiaries you designate
- Technical data: IP address, browser type, device information, login timestamps
- Payment data: processed by third-party processors; we do not store card numbers
2. How We Use Your Information
- To operate and maintain your Legacy Vault
- To send check-in reminders, notifications, and emergency alerts as configured by you
- To execute vault release protocols you have authorized
- To improve app performance and user experience
- To comply with legal obligations
3. Data Storage & Security
- Documents are encrypted in your browser (AES-256-GCM) and stored in your own connected Google Drive or Dropbox account. We do not host your document files.
- Per-document encryption keys are stored on our backend to enable authorized access and release; they are protected at rest and all access is logged.
- Other account data (messages, assets, contacts, settings) is encrypted at rest (AES-256) and in transit (TLS 1.2+)
- We maintain security audit logs of all account activity
- We conduct regular security reviews
4. Sharing of Information
We do not sell your personal information. We share data only:
- With your designated trusted contacts and beneficiaries, as directed by you
- With third-party service providers who support our operations (under strict confidentiality agreements)
- When required by applicable law, court order, or government authority
- In connection with a merger or acquisition (users will be notified in advance)
5. Your Privacy Rights
United States (California – CCPA):
California residents have the right to know what personal information we collect, request deletion, opt out of sale (we do not sell data), and non-discrimination for exercising rights.
Canada (PIPEDA):
Canadian residents have the right to access personal information we hold about them, request corrections, and withdraw consent (subject to legal or contractual restrictions).
All users may request access, correction, or deletion of their data by emailing support@legacy-safe-keep.com.
6. Data Retention
We retain your data for as long as your account remains active. Upon account deletion, personal data is purged within 30 days, except where retention is required by law.
7. Children's Privacy
Legacy Vault is not intended for users under 18 years of age. We do not knowingly collect data from minors.
8. Cookies
We use essential cookies for authentication and session management only. We do not use advertising or tracking cookies.
9. Changes to This Policy
We will notify you by email at least 30 days before any material changes take effect.