Privacy Policy

This page explains what data WASYH actually collects, why, and how it is used and protected. What appears here describes what is implemented in the system today, not what may be added later.

We collect only what running the service requires:

• Account data: email address, name, preferred language, and a phone number if you add one.
• Content you create: will text, and the audio, video, image and document files you upload.
• Beneficiary and contact details you enter yourself (names and contact information).
• Technical security data: IP address and browser identifier at sign-in and on every sensitive action.
• Subscription data: plan, purchase date and subscription status.

To run the service and verify your identity, to store your content and release it to the people you chose under your conditions, to send necessary notifications, and to protect accounts and detect abuse. We do not sell or rent your data to any third party.

We use a small number of functional cookies only, and no advertising or tracking cookies:

• Session cookie: keeps you signed in, is not readable by JavaScript, and lasts 30 days (12 hours for an admin session).
• CSRF protection cookie: lasts 24 hours and must be readable by the page in order to do its job.
• Language preference cookie.

Your will content is visible to you alone until the release conditions you set are met. Files are not stored in public folders, every file request passes a permission check before delivery, and no file has a permanent public URL. Support and administration staff do not reach your will content automatically; any exceptional access requires authorisation and is fully logged.

We state this precisely, because clarity matters more than reassurance: the connection is fully encrypted over HTTPS, passwords are stored as argon2id hashes and cannot be recovered, and two-step verification secrets are encrypted in the database. Will content and uploaded files, however, are protected by permissions and access controls — they are not end-to-end encrypted, and we do not present them as such.

No data reaches any beneficiary before the release conditions are met, and at that point each beneficiary sees exactly what you allowed them and nothing more. Beneficiaries do not learn of one another unless you explicitly allow it.

The service relies on external providers for specific parts, each receiving the minimum data needed to perform its function:

• An email provider, for verification messages and notifications.
• A payment provider, for processing purchases — your card details never pass through or get stored on the platform's servers.
• A storage provider, for uploaded files.
• The independent law firms within WASIATY Legal — which receive nothing until you explicitly consent, per request, and you may withdraw that consent.

We record sensitive actions (sign-in, permission changes, file access, verification decisions) in an audit log designed to have a clear, tamper-evident sequence. The log holds references and identifiers; it does not hold the text of your will content.

You can request account deletion from the privacy centre. After the grace period your email and phone are anonymised, your password and two-step verification are invalidated, and all sessions are revoked. We state plainly that will content and files are not erased at this step, because an in-progress release to a beneficiary or an existing legal hold may depend on them, and that audit records remain linked to the anonymised account to preserve the integrity of the chain. We do not present deletion as immediate and complete erasure of every trace.

From the privacy centre inside your account you can:

• Export a copy of your data.
• Request account deletion, and cancel it during the grace period.
• Change notification and communication preferences.
• Review active sessions and end them.

For any question or request about your data, use the “Contact us” page.