Privacy Policy

Your estate planning documents contain some of the most private information in your life. We take that responsibility seriously. This policy explains, in plain English, exactly what we do with your data and what we will never do.

When you use TrustGuard, we collect:

• Account information — your name, email address, and password (stored securely using industry-standard hashing).
• Documents you upload — PDFs of your trusts, wills, powers of attorney, and other estate planning documents.
• Information extracted from your documents — names of people, roles (like trustees and beneficiaries), asset descriptions, and key provisions. See “How We Protect Sensitive Information” below for what we deliberately exclude.
• Your review responses — answers you provide during annual reviews and any revision requests you create.
• Basic usage data — information about how you use the app so we can improve it (pages visited, features used).

Estate documents often contain Social Security numbers, bank account numbers, and dates of birth. We have built multiple layers of protection to handle this:

• We strip sensitive numbers before saving. When our system reads your documents, it automatically removes Social Security numbers, full bank or investment account numbers, and full dates of birth before anything is written to our database. This is done by both our AI instructions and a separate automated scrubber as a safety net.
• Your original files are stored securely. Uploaded documents are stored in private, encrypted cloud storage (Vercel Blob) separate from your account data. Document downloads are authenticated and served directly by TrustGuard — no publicly accessible file URL is ever exposed to the browser.
• Certain fields are encrypted at the application level. Highly sensitive content like family letters and survival kit entries are encrypted before being written to the database.

• We don't keep the full text of your documents. When something is worth your attorney's attention, we keep the sentence or two it came from and where in the document it sits — not the whole document.
• To read a document, a copy of it goes to Anthropic, the company that provides the AI. We delete that copy as soon as the reading finishes — whether it succeeded or failed — and we check that it is gone rather than assuming it.
• We don't record Social Security numbers, full account numbers, or dates of birth. The system is built not to take them, and anything that slips through is stripped before it is saved.
• Your uploaded documents are encrypted before they are stored, by us — not only by the company that hosts the storage.
• You can export everything we hold, at any time, and you can delete your account. Deleting removes your documents and everything we extracted from them.
• Anthropic may keep operational logs of requests for up to 30 days under their own policy. That is separate from the document copy, which we delete ourselves as soon as the reading finishes.

TrustGuard uses Anthropic's Claude AI to read and analyze your documents. Here is exactly how that works:

• When you upload a document, the text content is sent to Anthropic's Claude API so it can identify the people, assets, and provisions in your estate plan.
• Claude is also used to generate your annual review summaries, checklist items, and revision request drafts.
• When we analyze a document, a copy of it is uploaded to Anthropic so Claude can read it. We delete that copy as soon as the analysis finishes — whether the analysis succeeded or failed — and we confirm the deletion rather than assuming it. If a deletion cannot be confirmed, that is recorded and retried until it succeeds.
• Under Anthropic's default API retention policy, request and response data sent to the Claude API is retained by Anthropic for up to 30 days for abuse monitoring, after which it is deleted. See Anthropic's privacy and data retention policies for the current terms.
• We instruct the AI not to extract or return Social Security numbers, full account numbers, or full dates of birth.

• Uploaded documents are stored in Vercel Blob, an encrypted cloud storage service.
• Account data and extracted information are stored in a PostgreSQL database hosted by Neon, a trusted cloud database provider.
• All data is transmitted over encrypted connections (HTTPS/TLS).

We never share your documents or personal information unless you explicitly ask us to. Here is how sharing works:

• Attorney sharing is user-controlled. If you choose to send a revision request to an attorney through TrustGuard, only the specific information in that request is shared — and only because you initiated it.
• We never sell your data. Not to advertisers, data brokers, or anyone else. Period.
• We never share your data for marketing purposes.
• We may share data if required by law (such as a valid court order), and we will notify you if legally permitted to do so.

We use Resend, a transactional email service, to send you important account-related emails such as:

• Email verification when you sign up
• Password reset requests
• Annual review reminders (if you opt in)
• Important updates about your account

We do not send marketing or promotional emails. Every email we send is related to your account or your estate plan.

You have full control over your data:

• Access. You can view and download all of your documents and data at any time through your account. Your settings page includes an “Export my data” action that produces a JSON file containing your profile, uploaded documents, extracted people and assets, reviews, amendment history, and payment history.
• Deletion. You can delete individual documents from the document list, or delete your entire account from your settings page. When you delete your account, we remove your uploaded files from storage, delete your extracted document data, reviews, checklists, revisions, family letters, survival kit entries, and subscription, and anonymize your account record so it can no longer be used to identify you. Amendment and payment records linked to completed work are retained for legal, financial, and attorney recordkeeping obligations, but PII-bearing fields are scrubbed.
• Correction. You can update your personal information at any time through your account settings.

If you have pending amendment work in progress, you'll need to complete or cancel it before deleting your account. If you need help, email us at hello@trytrustguard.com.

In the event of a data breach affecting your information, we will notify you within 72 hours of confirmed incident detection. Notifications will explain, to the extent known at the time: what happened, what information was affected, what we are doing in response, and what you can do to protect yourself.

You can report a suspected security issue any time by emailing hello@trytrustguard.com.

If we make meaningful changes to this policy, we will notify you by email and update the date at the top of this page. We will never reduce your privacy protections without giving you notice and a choice.

If you have questions about how we handle your data, email us at hello@trytrustguard.com. We are happy to explain anything in more detail.