Willy.legal (“Willy,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. It applies to our website and related services (the “Service”).
By using the Service, you agree to the practices described in this Policy. If you do not agree, do not use the Service.
1. Information we collect
Information you give us
- Account information. Your email address and a password (or a third-party OAuth identifier if you sign in with Google).
- Will information. The information you enter into the questionnaire: your full legal name, date of birth, address, phone number, signing state, marital status, names and relationships of family members, beneficiary and executor details, asset descriptions, and any personal wishes or messages you choose to include.
- Uploaded files. If you choose to store a signed copy of your will in your account, the PDF or image you upload.
- Communications. The content of messages you send to us, including support requests.
Information collected automatically
- Device and usage data. Your IP address, browser type, device identifiers, referring URL, pages viewed, links clicked, and timestamps.
- Cookies and similar technologies. Small text files stored on your device that help us remember your session and (with your consent) measure advertising performance. See Section 6 below.
- Product analytics. Internal events such as “questionnaire started,” “step completed,” and “payment completed,” used to debug bugs and improve the funnel.
Information from third parties
- Payment information. When you pay, our payment processor (Stripe) collects your card details directly; we receive only a token, the last four digits of the card, and the payment status. We never see or store your full card number.
- OAuth providers. If you sign in with Google, we receive your name, email address, and profile picture from Google.
2. How we use your information
We use the information described above to:
- Provide the Service, including generating your will, storing your drafts and uploaded files, and processing payments;
- Authenticate you, secure your account, and prevent fraud or abuse;
- Communicate with you about your account, your purchases, and changes to the Service;
- Send you transactional emails (such as receipts, password resets, and subscription notices) and, only if you opt in, marketing emails;
- Improve and debug the Service, including measuring funnel drop-off and prioritizing bug fixes;
- Comply with legal obligations and enforce our Terms of Service; and
- With your consent, measure the effectiveness of our advertising on third-party platforms such as Meta (Facebook and Instagram).
3. How we share your information
We do not sell your personal information. We share it only in the limited circumstances below:
- Service providers. We share personal information with vendors that operate the Service on our behalf, including Supabase (database and authentication), Stripe (payments), Vercel (hosting), and our transactional email provider. These providers are bound by contract to use your information only to provide their services to us.
- Advertising partners (with your consent). If you accept marketing cookies, we share hashed identifiers (such as a hashed email address) and event data with advertising platforms like Meta so they can measure ad performance. We do not share the contents of your will or other sensitive estate information with advertising partners.
- Legal compliance. We may disclose information when required by law, subpoena, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect rights, property, or safety.
- Business transfers. If Willy is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to the obligations of this Policy.
4. How we protect your information
We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit (TLS) and at rest, role-based access controls, and row-level security on our database so that one user cannot access another user’s data. No system is perfectly secure, however, and we cannot guarantee absolute security.
5. Data retention and deletion
We retain your information for as long as your account is active or as needed to provide the Service to you, comply with our legal obligations, resolve disputes, and enforce our agreements.
- Will drafts. Retained until you delete them or close your account.
- Signed will uploads. Retained in your private vault until you delete them or close your account.
- Purchase records. Retained for at least seven (7) years for tax and accounting purposes.
- Account-deletion requests. Email support@willy.legal from the address on your account. We will delete or anonymize your personal information within thirty (30) days, except where retention is required by law.
6. Cookies and tracking technologies
We use three kinds of cookies and similar technologies:
- Strictly necessary. Required to operate the Service, including keeping you signed in. These are always on and cannot be disabled.
- Analytics. Help us understand how the Service is used so we can improve it. We use first-party event tracking stored in our own database.
- Advertising. Allow us to measure the performance of advertising campaigns (currently the Meta Pixel and Conversions API). We load these only after you opt in via our cookie banner. You can change your choice at any time by clearing your cookies or contacting us.
7. Your rights and choices
Depending on where you live, you may have the following rights with respect to your personal information:
- Access. Request a copy of the personal information we hold about you.
- Correction. Request that we correct inaccurate information.
- Deletion. Request that we delete your personal information.
- Portability. Request your information in a machine-readable format.
- Opt out of sale or sharing. We do not sell your personal information; however, you can withdraw advertising-cookie consent at any time as described above.
- Non-discrimination. We will not discriminate against you for exercising any of these rights.
To exercise any of these rights, email support@willy.legal from the address on your account. We may need to verify your identity before responding.
California residents (CCPA/CPRA). The categories of information we collect are described in Section 1; the purposes for which we use them are in Section 2; and the categories of recipients are in Section 3. California residents have the additional right to request information about the specific pieces of personal information we have collected.
EEA, UK, and Swiss residents. Our lawful basis for processing is your consent (for advertising cookies and marketing emails), the performance of a contract (to provide the Service you purchased), our legitimate interests (to operate, secure, and improve the Service), and legal obligation (e.g., tax records). You have the right to lodge a complaint with your local data protection authority.
8. Children
The Service is not directed to children under 18, and we do not knowingly collect personal information from children under 18. If we learn that a child under 18 has provided us personal information, we will delete it.
9. International users
The Service is operated from the United States and is intended for users located in the United States. If you access the Service from outside the U.S., you understand that your information will be transferred to, stored in, and processed in the United States.
10. Changes to this Policy
We may update this Privacy Policy from time to time. If we make material changes, we will give you reasonable advance notice (for example, by email or by a notice in the Service) before the changes take effect. The “Last updated” date at the top of this page indicates when this Policy was most recently revised.
11. Contact
Questions or requests about your privacy? Email us at support@willy.legal.