Privacy Policy

Shipsure, Inc. ("we," "us," or "our") operates Safe After Me, a digital vault service for storing and sharing important information with your designated beneficiaries. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service.

We take your privacy seriously. Safe After Me is built with privacy and security as core principles, using end-to-end encryption to ensure that your most sensitive information remains private.

1. Information We Collect

1.1 Information You Provide Directly

Account Information: When you create an account, we collect:

• Email address
• Name
• Passkey credentials (stored securely, cannot be accessed by us)
• Password (if you choose password authentication - hashed and salted, cannot be accessed by us)

Vault Content: You may upload and store:

• Documents (encrypted end-to-end - we cannot access these)
• Sensitive personal information (encrypted end-to-end - we cannot access this)
• Non-sensitive vault metadata such as vault names, section names, and organizational structure
• Information about beneficiaries and vault members you designate

Billing Information: When you subscribe, our payment processor Stripe collects:

• Payment card information
• Billing address
• Transaction history

Note: We do not store your complete payment card information on our servers. Stripe handles all payment processing.

Beneficiary Access Verification: When beneficiaries request access, we may collect:

• Death certificates
• Durable Power of Attorney documents
• Medical letters confirming incapacity
• Other verification documents as needed

1.2 Information Collected Automatically

Usage Information: When you use Safe After Me, we automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited and features used
• Date and time of access
• Referring website addresses

Cookies and Similar Technologies: We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze usage patterns. You can control cookies through your browser settings.

2. How We Use Your Information

We use your information for the following purposes:

To Provide Our Service:

• Create and maintain your account
• Store your encrypted documents and data
• Enable vault sharing with designated members and beneficiaries
• Process beneficiary access requests upon death or incapacity
• Provide customer support

To Process Payments:

• Process subscription payments through Stripe
• Manage your billing and subscription status
• Process referral credits
• Send payment receipts and billing notifications

To Communicate With You:

• Send transactional emails (account creation, password resets, subscription renewals)
• Notify you of changes to our Terms of Service or Privacy Policy
• Respond to your inquiries and support requests
• Send important service announcements

To Improve Our Service:

• Analyze usage patterns and trends
• Monitor and improve system performance
• Detect and prevent fraud and abuse
• Troubleshoot technical issues

Legal Compliance:

• Comply with legal obligations and law enforcement requests
• Protect our rights and property
• Enforce our Terms of Service

3. End-to-End Encryption and Zero-Knowledge Architecture

What We Can and Cannot Access:

Safe After Me uses end-to-end encryption with a zero-knowledge architecture for your most sensitive data. This means:

We CANNOT access:

• The contents of your uploaded documents
• Sensitive personal information you store in encrypted fields
• Your encryption keys (these never touch our servers)
• The decrypted contents of your vault

We CAN access:

• Your email address and account information
• Vault metadata (names, organizational structure)
• Information about vault members and their roles
• Usage statistics and system logs
• Billing information (through Stripe)

This means that even if compelled by law enforcement or a court order, we cannot decrypt your sensitive data because we do not have the technical capability to do so.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share your information only in the following limited circumstances:

Service Providers: We work with third-party service providers who help us operate Safe After Me:

• Stripe: Payment processing (see Stripe's privacy policy at stripe.com/privacy)
• Google Cloud Storage: Encrypted data storage (see Google's privacy policy at cloud.google.com/privacy)
• Amazon SES: Email delivery service

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

Designated Vault Members: Information you explicitly choose to share with vault members, viewers, or beneficiaries will be accessible to those individuals according to the permissions you set.

Legal Requirements: We may disclose information if required by law, subpoena, court order, or other legal process. However, due to our zero-knowledge encryption, we cannot provide access to encrypted content.

Business Transfers: If Safe After Me is acquired by or merged with another company, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

With Your Consent: We may share your information for other purposes with your explicit consent.

5. Data Storage and Security

Where We Store Data:

• Your encrypted documents and data are stored in Google Cloud Storage
• Our application servers and databases are hosted in secure data centers
• All data is stored in the United States

How We Protect Your Data:

• End-to-end encryption for sensitive documents and data
• Encryption in transit using TLS/SSL
• Encryption at rest for all stored data
• Passkey authentication support for enhanced account security
• Regular security audits and updates
• Access controls and authentication for our systems
• Monitoring for suspicious activity and potential security threats

While we implement strong security measures, no system is completely secure. We cannot guarantee absolute security of your data.

6. Data Retention

Active Accounts: We retain your data indefinitely while your account is active, even if your subscription lapses.

Account Deletion: If you request deletion of your account in writing, we will:

• Delete your account information
• Delete your encrypted documents and data
• Remove your personal information from our systems

Legal Obligations: We may retain certain information as required by law, such as:

• Transaction records for tax and accounting purposes
• Records necessary to resolve disputes or enforce our agreements
• System logs for security and fraud prevention

Backups: Deleted data may persist in backup systems for a limited time before permanent deletion.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

Access: You can access your account information and data through your Safe After Me account at any time.

Correction: You can update or correct your account information through your account settings.

Deletion: You can request deletion of your account and data by submitting a written request to us.

Data Portability: You can download your data from your vault at any time.

Opt-Out of Marketing: You can opt out of promotional emails by following the unsubscribe link in those emails. Note that you cannot opt out of transactional emails related to your account and service.

Cookie Controls: You can control cookies through your browser settings.

To exercise any of these rights, please contact us using the information in the Contact Us section below.

8. Children's Privacy

Safe After Me does not have age restrictions for users. However, we encourage minors under 18 to use the service with the knowledge and involvement of a parent or guardian.

We do not knowingly collect information from children under 13 for marketing purposes. If you believe we have collected information from a child under 13 in violation of applicable law, please contact us immediately.

9. International Users

Safe After Me is operated from the United States and primarily serves users in the United States. If you are accessing our service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States.

The United States may have data protection laws that differ from those in your country. By using Safe After Me, you consent to the transfer of your information to the United States.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you.

Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.

Right to Opt-Out of Sale: We do not sell your personal information.

Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, please contact us using the information below. We will verify your identity before processing your request.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Effective Date" at the top of this policy
• Notify you by email
• Post the updated policy on our website

Your continued use of Safe After Me after changes become effective constitutes your acceptance of the updated Privacy Policy.

12. Third-Party Links

Safe After Me may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

For privacy-related inquiries, please include "Privacy Policy" in the subject line.

---

By using Safe After Me, you acknowledge that you have read and understood this Privacy Policy.