Privacy Policy

Legacy Lock Box is committed to protecting your privacy. This policy explains what information we collect, how we use it, and how we protect it.

• Account information: name, email address, password
• Profile information: personal details you enter in the setup wizard including insurance policies, legal documents, financial accounts, final wishes, contacts, and personal messages
• Payment information: processed securely by Stripe, we never store your card details
• Uploaded documents: legal documents such as wills and trusts stored in encrypted cloud storage
• Usage data: how you interact with the app to improve our service

• To provide and maintain the Legacy Lock Box service
• To process payments through Stripe
• To send transactional emails, welcome, payment confirmation, setup reminders, family invitations
• To allow authorized family members to access your plan when activated
• We never sell your data to third parties
• We never use your data for advertising

• All data is stored in Supabase with row-level security, only you and authorized family members can access your information
• Documents are stored in private encrypted cloud storage
• Passwords you store in the app are encrypted at rest
• We use industry-standard SSL encryption for all data in transit
• Payment processing is handled entirely by Stripe and subject to their security standards

• You control who has access to your Legacy Lock Box
• Family members you invite can only see your information after you grant them access
• The family dashboard is only activated when a trusted person enters a date of passing
• You can remove family member access at any time from Account Settings

• Your data is retained as long as your account is active
• If you delete your account all personal data is permanently deleted within 30 days
• Uploaded documents are deleted immediately upon account deletion

We use the following third party services:

• Supabase, database and authentication (supabase.com/privacy)
• Stripe, payment processing (stripe.com/privacy)
• Resend, transactional email delivery (resend.com/privacy)
• Lovable AI Gateway, AI-powered content generation

You have the right to:

• Access all data we hold about you
• Correct any inaccurate information
• Delete your account and all associated data
• Export your data
• Withdraw consent at any time

To exercise any of these rights contact us at support@legacylockbox.io.

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

Legacy Lock Box is not intended for use by anyone under the age of 18. We do not knowingly collect information from minors.

We will notify you by email of any material changes to this privacy policy. Continued use of the service after changes constitutes acceptance.

For any privacy questions contact us at support@legacylockbox.io.