What we can see
Your email address, the name and state you enter, the names and contact details of the people you list, the titles and categories of vault items, the sharing level you chose for each item, when you checked in, and the messages we send on your behalf. We need these to run the check-ins and to contact the right people at the right time.
What we cannot see
The details inside each vault item (the institution, account reference, and notes) and every attached document are encrypted on your device, with a key made from your passphrase, before they are sent to us. What we store is scrambled text that cannot be read without that key. We do not hold your passphrase, your recovery code, or your executor’s code, and we cannot open your vault, even if ordered to, because the key is not ours to give.
Who else sees anything
Your trusted contacts and your executor (the person who handles things) receive only what the check-ins have reached, as described in the app. We use Supabase to host the database and storage, Vercel to serve the app, Resend to send email, Twilio to send text messages, and Stripe to take payment. Each receives only what it needs to do its job. We do not sell data and do not run advertising.
How long we keep it, and deleting it
Your data is kept while your account exists. Ask us to delete your account and we remove your profile, people, encrypted vault, documents, and message history, along with the sealed copies kept for your executor. Records we must keep for payment or legal reasons are kept only as long as required.
How it is protected
Your key is made on your device from your passphrase, using standard, well-tested methods (PBKDF2 with 600,000 rounds, then AES-256-GCM encryption). Our database also checks, record by record, that each person can reach only their own (Postgres row-level security), so a fault in the app alone cannot expose them. Details are in the security notes published with the source.
Your rights
You can export or delete your data at any time by asking. If you live somewhere with specific privacy laws, for example California or the European Union, those rights apply and we honor them.
Questions
Write to support@ezecutor.co. We answer privacy questions within a few business days.