Privacy Policy

Last Updated: March 29, 2026

LegacyReady ("we," "us," or "our") operates the LegacyReady website and application. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

1. Information We Collect

When you create an account or use LegacyReady, we may collect the following information:

• Name and email address (for account creation and communication)
• State of residence (to provide relevant informational context)
• Form data you enter into LegacyReady sections (organizational details such as document locations, account institution names, contact information for professionals, and personal wishes)
• Payment information (processed securely by Stripe; we do not store card numbers)
• Usage data such as pages visited and features used

As noted above, we instruct users not to enter actual account numbers, Social Security numbers, or passwords. The form fields are designed for recording locations and references, not sensitive credentials.

2. How Your Data Is Stored

Your data is stored in our database hosted on Supabase, which provides encryption at rest and in transit. All servers are located in the United States. We use industry-standard security measures to protect your information, including encrypted connections (TLS/SSL) for all data transmission.

3. Who Can Access Your Data

Your LegacyReady data is private to you by default. Only you can view and edit your information. If you choose to share access with a trusted contact, that person receives read-only access to the sections you specify. We do not access, review, or use your personal form data for any purpose other than providing the service to you.

4. Payment Processing

All payment transactions are processed by Stripe, a PCI-compliant payment processor. We do not store your credit card number, CVV, or full payment details on our servers. Stripe's privacy policy governs the handling of your payment information.

5. Cookies and Tracking

We use a limited number of cookies for the following purposes:

• Authentication cookies to keep you logged in during your session
• Referral attribution cookies (30 to 60 day duration) to track how you found LegacyReady

We do not use cookies for advertising or sell cookie data to third parties.

6. Third-Party Services

We use the following third-party services to operate LegacyReady:

• Supabase -- database hosting and authentication
• Stripe -- payment processing
• Vercel -- website hosting and delivery

Each of these providers maintains their own privacy policies and security practices. We select providers that meet high standards for data protection.

7. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to any third party. Your data is used solely to provide and improve the LegacyReady service.

8. Data Deletion

You may request deletion of your account and all associated data at any time by contacting us at support@legacyready.io. Upon receiving a verified deletion request, we will remove your data from our active systems within 30 days. Some data may be retained in encrypted backups for up to 90 days before being permanently purged.

9. Children's Privacy (COPPA)

LegacyReady is intended for use by adults only. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected data from a minor, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at support@legacyready.io.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. For significant changes, we will notify you via email or a prominent notice within the application. Your continued use of LegacyReady after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us: