Privacy Policy

Personal Information You Provide:

• Name, email address, and contact information
• Information about your family (names of spouse, children, beneficiaries, executors, guardians, trustees)
• Asset information you choose to include in your documents
• Payment information (processed securely through Stripe)
• State of residence for document customization

Third-Party Information You Provide:

When you create estate planning documents, you provide names, roles, and contact information for other individuals (such as executors, guardians, beneficiaries, and trustees). When you share documents via our vault, you provide recipients' email addresses. By providing this third-party information, you represent that you have the legal right and permission to share it with us for the purpose of creating your estate planning documents. This third-party information is protected under the same privacy standards as your own account data and is used solely to provide our services. When you share documents through our vault and a recipient accepts the invitation, we provide them with a link to this Privacy Policy explaining how their information is handled.

Biometric and Identity Verification Data (During Notarization):

During Remote Online Notarization (RON) sessions provided by OneNotary (Adorum, Inc.), the following data may be captured:

• Government-issued identification document scans
• Facial identity verification (facial geometry for identity proofing)
• Audio-video recordings of the signing ceremony
• Knowledge-based authentication (KBA) responses

This biometric and identity data is collected and stored by OneNotary, not by Will Agent. Session recordings are retained for a minimum of 10 years as required by state law (e.g., Florida Statute §117.245). Will Agent does not store biometric data on its servers. For Texas residents: biometric identifiers are subject to the Texas Capture or Use of Biometric Identifiers (CUBI) Act — OneNotary provides notice and obtains consent prior to capture as required by Tex. Bus. & Com. Code §503.001. For Illinois residents or participants: biometric data collection is subject to the Illinois Biometric Information Privacy Act (BIPA) — OneNotary obtains written consent prior to capture, and biometric data is permanently destroyed in accordance with BIPA retention requirements. For Virginia residents: biometric data is classified as "Sensitive Data" under the Virginia Consumer Data Protection Act (VCDPA) — we obtain your explicit, affirmative consent prior to processing during the Remote Online Notarization session.

Information Collected Automatically:

• Device and browser information
• IP address and approximate location
• Usage data (pages visited, features used)
• Cookies and similar tracking technologies

We use your information to:

• Provide our document preparation services
• Generate your personalized legal documents
• Process payments and send transaction confirmations
• Send service-related communications
• Improve our software and user experience
• Comply with legal obligations
• Prevent fraud and ensure security

Important: We do not sell your personal estate planning data. Your estate planning information is highly sensitive, and we treat it with the utmost care.

We may share your information in these circumstances:

• Service Providers: Third parties that help us operate our business, including:
  • Stripe, Inc. (payment processing)
  • Supabase / AWS (cloud hosting and data storage)
  • OneNotary / Adorum, Inc. (notarization — receives your identity documents, biometric data, and session recordings)
  • Resend (transactional and marketing email delivery)
  • Vercel (web hosting)
• Advertising Partners: We use third-party advertising partners, including Meta Platforms, Inc. (Facebook/Instagram) and Google LLC. When you visit our public marketing pages, we may "share" (as defined by state privacy laws) limited behavioral data and hashed identifiers for advertising measurement. Your sensitive estate planning data is never shared for advertising. You can opt out using the controls in Section 10 below, or by contacting us at privacy@mywillagent.com
• Document Recipients: When you share documents through our vault, designated recipients (executors, guardians, family members, attorneys) can access the specific documents you choose to share
• Legal Requirements: When required by law, court order, or government request
• Protection: To protect our rights, privacy, safety, or property
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We require all service providers to maintain confidentiality and use your data only for the purposes we specify.

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure cloud infrastructure (Supabase/AWS)
• Regular security assessments
• Access controls and authentication
• Employee training on data protection

Internal Access to Your Documents:

Your drafted and executed documents are stored securely. WillAgent employees do not actively monitor or review the contents of your estate planning documents. Internal access is strictly limited to authorized support and engineering personnel, and only when explicitly necessary to resolve a technical issue, respond to your support request, or comply with a valid legal order.

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

We use cookies and similar technologies for:

• Essential cookies: Required for the service to function
• Analytics cookies: Google Analytics 4 (Google LLC) helps us understand how users interact with our service
• Marketing cookies: Facebook Pixel (Meta Platforms, Inc.) is used to deliver relevant advertising (with your consent)

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our service.

Tracking Boundary:

Our marketing and analytics tracking (such as Google Analytics and Facebook Pixel) is strictly limited to our public-facing marketing pages. Once you log in or enter the authenticated document wizard, third-party marketing trackers are disabled to ensure the privacy of your estate planning process.

Depending on your location, you may have the right to:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a portable format
• Opt-out: Opt out of marketing communications

To exercise these rights or to delete your account and data, contact us at privacy@mywillagent.com.

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specifically:

• Account data: Retained while your account is active
• Documents: Available for download while your account is active
• Transaction records: Retained for 7 years for tax/legal compliance

You may request deletion of your account and data at any time, subject to legal retention requirements.

Data Access Upon Death:

Because our service is designed for estate planning, we have specific procedures for handling your data after your passing. Your designated executor or legal representative may request access to your account and documents by providing a valid death certificate and proof of legal authorization, as detailed in our Terms of Service. Upon verified notification of death, your account is converted to a Read-Only Estate View accessible by authorized fiduciaries for ten (10) years.

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children, in compliance with the Children's Online Privacy Protection Act (COPPA). If you believe we have collected information from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

YOUR CALIFORNIA RIGHTS:

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions
• Right to Correct: You can request correction of inaccurate personal information
• Right to Opt-Out: You can opt out of the sale or sharing of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

WE DO NOT SELL YOUR PERSONAL INFORMATION:

Will Agent, Inc. does not sell your personal information for money. However, our use of advertising trackers on our public marketing website is legally considered "sharing" personal information for cross-context behavioral advertising under the CPRA, which you have the right to opt out of.

CATEGORIES OF PERSONAL INFORMATION WE COLLECT:

• Identifiers: Name, email address, account name, IP address
• Customer Records: Name, address, phone number, payment information
• Commercial Information: Products purchased, transaction history
• Internet Activity: Browsing history, interactions with our website
• Geolocation: Approximate location based on IP address
• Estate Planning Information: Family and beneficiary details you voluntarily provide for your documents (used solely to provide our services). To the extent any information you provide constitutes Sensitive Personal Information under applicable state privacy laws, we process it only as necessary to provide our document preparation services and do not use it for any other purpose

HOW TO EXERCISE YOUR RIGHTS:

To exercise your California privacy rights, contact us at privacy@mywillagent.com with the subject line "California Privacy Request." We will respond within 45 days. You may also designate an authorized agent to make a request on your behalf.

GLOBAL PRIVACY CONTROL (GPC):

We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we automatically disable third-party tracking (Google Analytics event tracking and Facebook Pixel). First-party analytics used for service improvement continue to operate. You can also manually opt out of third-party tracking using the control below, or by contacting us at privacy@mywillagent.com.

If you have questions about this Privacy Policy or our data practices, contact us:

• Will Agent, Inc.
• 1111B S Governors Ave STE 40462, Dover, DE 19904
• Email: privacy@mywillagent.com
• Website: mywillagent.com