Privacy Policy

Effective Date: 1 June 2026

Vasiyat ("we", "us", "our") is committed to protecting your privacy. This policy explains how we handle information when you use our Will generation service at vasiyat.life.

1. Our Core Privacy Principle

We do not store your Will content. Ever. Your personal information, family details, asset details, and Will text exist only in your browser's memory while you use the service. When you close the tab or navigate away, that data is gone. Our servers never receive, process, or store the content of your Will.

2. What We Do Collect

We collect only the minimum metadata necessary to operate the service:

• Account information: Email address (for authentication and delivery), authentication tokens.
• Payment information: Transaction IDs, plan type, payment status. Actual card/UPI details are handled entirely by Razorpay and never touch our servers.
• Usage metadata: Number of Wills generated (for tier enforcement), timestamps, language selected.
• Technical logs: IP address, browser type, and error logs for debugging (retained for 30 days).

3. What We Never Collect

• Names of your family members
• Details of your assets or property
• Names of beneficiaries or executors
• The text of your Will
• Any form data you enter in the wizard

4. Encrypted Vault Files

When you save an encrypted vault file, the encryption happens entirely in your browser using AES-256-GCM with PBKDF2 key derivation. The encrypted file is downloaded directly to your device. We never have access to the encryption key or the unencrypted content.

5. Third-Party Services

• Supabase: Authentication and metadata storage (hosted in Mumbai, India).
• Razorpay: Payment processing (PCI DSS compliant).
• Resend: Email delivery (for Will delivery and transactional emails).
• Vercel: Application hosting.

6. Data Retention

Account metadata is retained for the duration of your subscription plus 180 days. Technical logs are retained for 30 days. You may request deletion of your account and all associated metadata by contacting us.

7. Your Rights

Under applicable Indian law, you have the right to: access your personal data, correct inaccuracies, request deletion, and withdraw consent. Contact us at privacy@vasiyat.life.

8. Changes to This Policy

We will notify you of material changes via email or in-app notice at least 30 days before they take effect.

9. Contact

For privacy-related queries: privacy@vasiyat.life