Privacy Policy for Estatey

Estatey ("Estatey," "we," "us," or "our") provides a web application at estatey.app that helps individuals catalog financial accounts, property, and beneficiary information for estate planning purposes (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using Estatey, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and a securely hashed password (if you register using email/password authentication).

1.2 Google Account Information

If you choose to connect Estatey to Google Drive, we use Google OAuth to request permission to access your Google Drive. Specifically, we request the drive.file scope, which allows Estatey to:

• Create new files and folders in your Google Drive on your behalf
• Read, update, and organize only the files that Estatey itself creates

Estatey does not request or receive access to any other files in your Google Drive. We cannot see, list, or modify files you did not create through Estatey.

We store an encrypted copy of your Google OAuth refresh token so that Estatey can access your Estatey-created Drive files on your behalf without requiring you to log in to Google every time. This token is encrypted at rest and is never shared with third parties.

1.3 Financial and Estate Planning Data

Estatey allows you to upload financial statements (PDFs, spreadsheets, or scanned documents) and enter information about financial accounts, property, vehicles, insurance policies, and beneficiary designations.

Estatey does not permanently store this data on our servers. Uploaded documents and the data extracted or entered by you are processed transiently and then saved directly to your own Google Drive (in files created via the drive.file scope). Estatey's servers do not retain copies of your financial account numbers, balances, beneficiary information, or uploaded source documents after processing is complete.

1.4 Usage Data

We may collect limited technical information such as IP address, browser type, and general usage logs for the purpose of maintaining and securing the Service.

2. How We Use Your Information

We use the information we collect solely to:

• Authenticate you and maintain your account
• Enable you to save, retrieve, and organize your estate planning data in your own Google Drive
• Generate the printable PDF summary/dashboard you request
• Maintain, secure, and improve the Service
• Communicate with you about your account or the Service, if necessary

We do not use your data to serve advertising, and we do not sell, rent, or trade your personal or financial information to any third party.

3. Google API Services User Data Policy

Estatey's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only use Google user data to provide or improve the user-facing features of Estatey that you have explicitly requested.
• We do not use Google user data for serving advertisements.
• We do not allow humans to read Google user data unless: (a) we have your affirmative agreement for specific messages, (b) it is necessary for security purposes, (c) it is necessary to comply with applicable law, or (d) the data has been aggregated and anonymized.
• We do not transfer Google user data to third parties except as necessary to provide or improve the Service (with your consent), to comply with applicable law, or as part of a merger, acquisition, or sale of assets (in which case we will notify you).

4. Data Storage and Security

• Your financial and estate planning data is stored in your own Google Drive account, which you control and can revoke Estatey's access to at any time (see Section 6).
• Account credentials (email/password) are stored in our database with passwords hashed using industry-standard methods.
• Google OAuth refresh tokens are encrypted at rest using industry-standard encryption before storage.
• We use HTTPS/TLS encryption for all data transmitted between your browser and our servers.
• We take reasonable technical and organizational measures to protect your information from unauthorized access, alteration, or destruction.

No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share information only in the following limited circumstances:

• With your consent — for example, if you explicitly ask us to share data with a third party.
• Service providers — we may use third-party infrastructure providers (such as hosting and database providers) strictly to operate the Service. These providers are contractually obligated to protect your data and are not permitted to use it for their own purposes.
• Legal requirements — if required to do so by law, subpoena, or other legal process.
• Business transfers — if Estatey is involved in a merger, acquisition, or sale of assets, your information may be transferred, subject to this Privacy Policy or a policy that provides materially similar protections.

6. Your Choices and Rights

• Revoke Google Drive access: You can disconnect Estatey's access to your Google Drive at any time via your Google Account permissions page. Revoking access will prevent Estatey from creating or accessing new files, but will not delete files already created in your Drive.
• Delete your account: You may request deletion of your Estatey account and associated account data at any time by contacting us at the email below.
• Access and correction: Since your estate planning data lives in your own Google Drive, you have direct, full control to view, edit, or delete it at any time.

7. Data Retention

• Account information (email, hashed password) is retained for as long as your account is active.
• Encrypted Google OAuth refresh tokens are retained until you revoke access or delete your account.
• Uploaded financial documents and extracted data are not retained on our servers beyond the time needed to process and save them to your Google Drive.

8. Children's Privacy

Estatey is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:

Email: privacy@estatey.app
Website: https://estatey.app

This policy is intended to satisfy Google's OAuth verification requirements for applications requesting access to Google Drive via the drive.file scope, including the Google API Services User Data Policy Limited Use requirements.