Privacy and Data Usage Policy

Information you provide

We receive account and profile information, trusted-person contact details, vault record metadata, final wishes, service-provider details, recipient assignments, release-plan settings, and any death-report evidence you choose to submit.

Private vault notes and attachments are encrypted in your browser before upload. Account, subscription status, billing identifiers, invitation, audit, and release-review records are handled separately so the service can function. Payment-card details are entered with and handled by the payment processor rather than stored in the Vault.

How information is used

Information is used to authenticate accounts, store and retrieve your workspace, enforce plan limits, synchronize paid membership status, connect invited recipients, maintain security records, review support and service problems, and support the future verification process described in the product.

Death Professionals does not sell or rent personal account information, private vault content, or connected Google account data. We use information only to provide the features you request, operate and secure the service, and meet legal obligations. We do not use Google account data for advertising, marketing profiles, credit decisions, or training generalized artificial-intelligence or machine-learning models. Service providers may process limited information only to host, secure, communicate, process payments, or maintain the service.

My Assets inventory

My Assets is separate from private Vault records. It stores descriptions of belongings and accounts, distribution wishes, and intended Recipient assignments. Inventory descriptions are encrypted on the server with a separate inventory key; they do not use the browser-encrypted Vault content or its key. Do not enter passwords, unlock codes, confidential messages, or full account numbers in the inventory.

Asset assignments are not disclosed to Recipients during the Vault holder’s lifetime. After verified death and authorized release, each connected Recipient assigned at least one active Asset can view the complete active inventory and every intended Recipient’s name, including unassigned Assets. Recipients without an Asset assignment do not receive the inventory. Revoked connections, administrative holds, recovery, and applicable retention restrictions can block access. Creating an Asset assignment does not send an assignment notification.

Who can receive information

A family member, trusted person, advisor, or provider receives no automatic access. Recipient connections and item assignments are controlled by the account owner. Vault information is not released automatically.

Claimant-submitted evidence may be reviewed by authorized operations staff. Operations staff are not given access to encrypted vault notes or encrypted attachments through the review console.

Retention and deletion

Account owners can export account information and request permanent account deletion from Security. Some audit, claim, evidence, fraud-prevention, legal-hold, or compliance records may require a separate retention period before public launch; that schedule is still being finalized.

Your choices

You can update or remove vault records, trusted people, groups, wishes, providers, and release settings; revoke recipient connections; export account data; sign out other sessions; and delete the account. Keep downloaded exports and recovery kits in a secure location because they may contain sensitive information.

Google Calendar: access and purpose

Connecting Google Calendar is optional and requires your explicit authorization. We request the read-only calendar.events.readonly permission to display events from your primary Google calendar in your private Service Provider workspace. Event information processed can include event identifiers, titles, dates and times, locations, recurrence information, and links to Google Calendar. Google may return additional event details in its API response; we do not use those details for unrelated purposes.

We use this access only to retrieve and display calendar events alongside your Death Professionals appointments. We do not create, change, or delete Google Calendar events. This integration does not access Gmail, Google Drive files, or your Google password. Connected calendar events are not published in the provider directory or shared with Vault recipients.

Google data storage, protection, and deletion

Google events are fetched when you use or refresh the calendar and are not saved as event records in our database. Event information is processed by our server and displayed in your browser while you use the feature. We store your connection status and encrypted OAuth access and refresh tokens so the connection can continue without repeated authorization. Tokens are encrypted on the server; access controls restrict the connection to its account owner.

Use Disconnect in your provider calendar to remove the stored connection tokens and pending authorization records from the active database. You can also revoke Death Professionals access at https://myaccount.google.com/connections. Disconnecting does not delete events from Google Calendar. Limited operational records and backup copies may persist under applicable security, backup, or legal-retention requirements; they are not used to continue accessing a disconnected calendar.

Google API Limited Use and permitted disclosures

Death Professionals’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell Google user data, use it for targeted or interest-based advertising, or transfer it to data brokers. We process it only to provide or improve the calendar features you use. Necessary infrastructure providers may process it on our behalf to deliver and secure those features. Any other disclosure is limited to what you explicitly authorize or what applicable law requires, consistent with Google’s policy.

We do not allow human reading of Google user data except with your affirmative agreement for specific data, as necessary for security or abuse investigations, to comply with applicable law, or for internal operations using only aggregated, anonymized data as permitted by Google’s policy.

Questions and policy changes

For privacy questions, access or deletion requests, use the feedback and support controls in Death Professionals. Never send passwords, recovery keys, OAuth tokens, or readable Vault contents in a support request. We will update this page when our practices change and provide additional notice or request consent when required.