Data Privacy & Governance

LegacyWills operates on a 'Privacy by Design' framework. Because estate planning inherently involves sensitive family relationships, heir designations, and financial aspirations, we hold user data to the most rigorous data governance benchmarks.

• Data Minimization: We collect only the data points strictly required to assist your estate preparation inquiry
• Purpose Limitation: Data is never repurposed or blended with commercial advertising graphs
• End-to-End Confidentiality: Access is restricted strictly to authorized compliance personnel under multi-factor authentication

We proactively comply with comprehensive state privacy statutes across the United States, including the California Consumer Privacy Act (as amended by CPRA), the Virginia Consumer Data Protection Act (VCDPA), and the Colorado Privacy Act (CPA).

• Right to Know: You may request disclosure of the specific categories of data processed
• Right to Delete: You have the unqualified right to request total deletion of your personal records
• Right to Non-Discrimination: We will never discriminate against any user for exercising their legal privacy rights
• Right to Opt-Out of Profiling: We do not perform automated legal profiling that produces legal effects

We maintain documented data retention schedules. When information reaches the end of its authorized lifecycle, it undergoes cryptographic erasure or irreversible pseudonymization in compliance with NIST 800-88 guidelines.

All third-party infrastructure entities (e.g. AWS GovCloud, Cloudflare, resilient transactional email engines) are vetted for SOC 2 Type II compliance, ISO 27001 certification, and enter into standard Data Processing Addenda (DPAs) with LegacyWills.

To submit a verifiable consumer privacy request or inquire about our data governance standards, contact our Data Privacy Officer via email at dataprivacy@legacywills.example.com. We acknowledge all requests within 48 business hours and fulfill verified inquiries within statutory timeframes.