Information we handle
We handle account information such as your name, email address, confirmed mobile number, authentication factors, organization role, and security events. We also handle the vault records, files, instructions, contacts, and release information that you choose to provide.
For mobile verification, we record the normalized number, the account requesting verification, the purpose, and when you accepted the displayed SMS disclosure. We receive the outcome of the code check, but we do not store the verification code.
How we use information
- Provide, secure, and support your Legacy Vault account.
- Verify email addresses and mobile numbers.
- Enforce multi-factor access to private vault information.
- Process subscriptions and maintain service records.
- Detect abuse, investigate incidents, and meet legal duties.
- Carry out reviewed release instructions for authorized people.
Service providers
We use service providers to operate Legacy Vault: Supabase for authentication, databases, and private file storage; Vercel for application hosting; Resend for transactional email; Twilio Verify for one-time mobile security codes; and Stripe for subscription billing. Each provider receives only the information needed for its role.
We do not sell personal information, use verified mobile numbers for marketing, or disclose vault contents to trusted contacts before an authorized release.
Retention and deletion
We retain information while your account is active and as needed to provide the service, preserve security and consent evidence, resolve disputes, and meet legal obligations. Retention can vary by record type. When information is no longer required, we delete it or de-identify it subject to backups, fraud prevention, and legal requirements.
Your choices
You may review and update account information in Legacy Vault. You may also ask customer care about access, correction, or deletion of personal information. Some records may need to be retained for security, fraud prevention, billing, or legal reasons.
For SMS verification messages, reply STOP to stop messages from the sender or review the SMS verification terms.
Security and scope
Legacy Vault uses encryption in transit and at rest, multi-factor access controls, private-by-default authorization, and security logging. No system can guarantee absolute security, so contact us promptly if you believe an account or device has been compromised.
Legacy Vault is for estate and identity records. Do not upload clinical records or protected health information; the service makes no HIPAA claim.
Contact us
Privacy and mobile-verification questions may be sent to Admin@infolegacyvault.com.