Privacy Policy

This Privacy Policy explains how ALAO (“we”, “us”, or “our”) collects, uses, shares, and protects information when you use our website, applications, and related services (collectively, the “Services”).

By using the Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.

Account information: name, email address, authentication details, and profile information you provide when you sign up or update your account.

Estate-planning content: documents, contacts, beneficiaries, asset inventory details, signatures, and files you upload or create in ALAO.

Connected services: if you link cloud storage providers (such as Google Drive, Dropbox, or Box), we receive the access needed to sync or store files you choose to connect.

Usage and device data: log data, IP address, browser type, device identifiers, pages viewed, and approximate location derived from IP, used to operate and improve the Services.

Communications: messages you send through contact forms, support requests, or email.

When you connect Google, ALAO may access your Google account profile information for sign-in and the Google Drive files you choose to connect in the estate-planning workflow.

We use that Google data only to authenticate your account, connect and manage your Drive connection, support file selection and estate-planning features, and keep the connection working over time.

We store Google access and refresh tokens encrypted at rest so we can maintain the connection and revoke it when you disconnect Drive or delete your account.

We do not sell Google user data, use it for advertising, or use it outside the user-facing features you asked ALAO to provide.

ALAO’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Provide, maintain, and improve the Services, including document creation, storage, access management, and notifications.

Authenticate users, secure accounts, and prevent fraud or abuse.

Communicate with you about your account, product updates, and support.

Comply with legal obligations and enforce our Terms of Service.

Analyze aggregated usage to understand product performance (we do not sell your personal information).

Service providers: vendors who help us host infrastructure, send email, process authentication, or provide customer support, under contractual confidentiality and security obligations.

Participants you invite: people you designate as contacts, beneficiaries, or document participants may receive access to information you choose to share with them.

Legal requirements: when required by law, regulation, legal process, or to protect the rights, safety, or property of ALAO, our users, or others.

Business transfers: in connection with a merger, acquisition, or sale of assets, subject to continued protection of personal information.

We do not sell personal information or share it for cross-context behavioral advertising.

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and access controls for sensitive estate data.

No method of transmission or storage is completely secure. You are responsible for keeping your login credentials confidential and for using strong authentication practices.

We retain account and estate-planning information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

Google access and refresh tokens are retained only while the connection is active or while needed for debugging, backups, or legal obligations, and we revoke them when you disconnect the connection or delete your account.

You may request deletion of your account and associated data, subject to legal retention requirements and information already shared with invited participants.

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to certain processing.

You can update many account details in Settings. For other requests, contact us using the Contact option on our website.

You may disconnect linked cloud providers at any time from your storage settings.

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

We may process and store information in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Material changes may also be communicated by email or in-product notice.

Questions about this Privacy Policy or our data practices can be sent through the Contact form on the ALAO website, or by emailing the support address listed in your account communications.