Privacy Policy

1. Information we collect

• Account details: your name and email address.
• Will contents: the information you enter to create your will — including personal and family details, beneficiaries, executors, witnesses, assets, and government identifiers such as PAN and Aadhaar where you choose to provide them.
• Payment information: processed by our payment provider (Razorpay). We do not store your card or bank details on our servers.
• Technical data: basic logs needed to operate and secure the service.
• How you use the editor: which steps of the will form you reach, how long you spend on each, and which fields ask you for something the form rejects. We record this to find the steps that confuse people and fix them. It is never the contents of your will — we store the name of a field that gave you trouble, never anything you typed into it. It is kept for 180 days and deleted with your account.

2. How we use your information

We use your information to provide the service: to create, store, and let you download your will; to process payments; to send service-related emails; to maintain the security and integrity of the platform; and to improve the will editor itself. We do not sell your personal information.

3. Storage and security

Your will data is encrypted at rest using AES-256-GCM before it is stored. We apply access controls so that only you (and lawyers you explicitly grant access to) can view your will. No method of storage or transmission is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

4. Third-party services

We rely on a small number of trusted providers to operate:

• Razorpay — payment processing.
• Google — optional sign-in (OAuth).
• Resend — transactional and reminder emails.
• Hosting and database providers — to run the application.

Each processes data only as needed to provide its function.

5. Aadhaar and sensitive identifiers

Where you provide an Aadhaar or PAN number, it is stored as part of your encrypted will data and used only to produce your will document. Please provide such identifiers only if you are comfortable doing so; you can omit optional fields.

6. Data retention and deletion

We keep your data for as long as your account exists. You can delete your account at any time from Settings, or by writing to us. Deletion is immediate and irreversible.

Deletion means deletion, including a will you have already downloaded. We remove our copy of every will on your account, its editing history, your support messages, and the records of how you used the editor. We do not keep a copy in case somebody asks for it later.

This is deliberate. The will that has legal effect is the paper original you sign in front of your witnesses, not our copy — which is why the document we produce leaves the signing date blank for you to write in, and why we ask you where you will keep the signed original. Please keep it somewhere your executor can find it.

Two things do not go, and both are about us rather than about you:

• A record of what you paid. Indian law requires us to keep books of account for several years. The amount and date stay; your email address is removed from them, so the payment remains and you do not.
• The log of when our staff accessed your data. It is what lets you, or a regulator, ask afterwards who looked at your will and why — a record that could be erased would be no use to you at all. It names what was done and when, and it is kept for seven years.

Some data is removed sooner than your account. Records of how you use the editor are deleted after 180 days, and so are the records of documents we produced for you.

We also delete accounts that are never used. If you have never bought a will and have not signed in for three years, we will email you twice — a month apart — before deleting your account and anything in it. Either email has a link that keeps it, and simply signing in does the same. If you have bought a will, this never applies to you: we keep it for as long as you want it.

7. Your rights

Subject to applicable law, including India’s Digital Personal Data Protection Act, 2023, you may have the right to access, correct, or erase your personal data, and to withdraw consent. To exercise these rights, contact us using the details below.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.