Privacy Policy
Last Updated: December 21, 2024
At After Me ("we", "us", or "our"), we consider the privacy and security of your digital legacy to be our highest priority. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services.
1. Information We Collect
We collect information to provide our digital vault services. This includes:
- Account Information: Name, email address, password hash, and phone number.
- Vault Content: Encrypted files (letters, photos, videos, audio) that you upload. We store these inputs in an encrypted format; we do not have access to the unencrypted content (Zero Knowledge Architecture).
- Trusted Contacts (Trustees): Names, email addresses, and phone numbers of individuals you designate.
- Usage Data: Login times, IP addresses, and interaction logs for security auditing.
2. How We Use Your Information
We use your data solely for the purpose of fulfilling your digital legacy instructions:
- To provide and maintain our Service.
- To notify you about changes to our Service.
- To strictly execute your "Release Conditions" (e.g., scheduled delivery, inactivity triggers).
- To contact you regarding "Proof of Life" verifications.
3. Zero Knowledge & Encryption
We utilize AES-256 encryption for your data. Your private keys are derived from your credentials. We do not store your raw password or decryption keys. This means we technically cannot access the contents of your vault, even under legal pressure.
4. GDPR Rights (European Users)
If you are a resident of the European Economic Area (EEA), you have certain data protection rights under GDPR:
- Right to Access: You can request copies of your personal data.
- Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data and vault content.
- Right to Rectification: You can request correction of inaccurate data.
- Right to Data Portability: You can request transfer of your data to another organization.
5. Data Retention
We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. Upon delivering your legacy assets to your designated heirs, or upon your explicit request for deletion, data is removed from our active systems.
6. Contact Us
If you have any questions about this Privacy Policy, please contact us:
By email: privacy@afterme.com
By visiting this page on our website: /contact