Privacy Policy
Effective September 14, 2026
1. What this covers
This policy describes how probateplan.store (“ProbatePlan”, “we”) handles information about the people who use it. It applies to the public website and to the application behind sign-in.
2. What we collect
Account information
Your name and email address, supplied by whoever invited you; your role in the plan; and, if you set one, a password stored only as a salted hash. Sign-in links are single-use and only a hash of each link is stored.
Plan content
Everything participants enter into a plan: answers to the estate profile questions, assets, debts, expenses, bills, tasks, notes, approvals and signature names, and the documents uploaded to it. This will ordinarily include personal and financial information about the deceased person, about heirs and creditors, and about the participants themselves. It is entered by the family, for the family; see “Who can see it” below.
Activity
A log of changes to the plan — what changed, who changed it, and when — visible to every participant in that plan. Sign-in events record the network address they came from.
Technical information
Standard web-server logs (address, time, page requested, browser type) kept for security and troubleshooting. We do not use analytics services, tracking pixels, or advertising cookies. The site sets one session cookie so you stay signed in, and stores your light-or-dark theme choice in your own browser.
3. How we use it
- To operate the service: show the plan to its participants, save changes, generate exports, send sign-in and invitation emails.
- To keep it secure: detect misuse, investigate problems, keep the activity log honest.
- To respond when you contact us.
- For the attorney-contact program, only if you have opted in (section 5).
We do not sell personal information, and we do not use plan content for advertising, profiling, or training anything.
4. Who can see it
The other participants in your plan. A plan is shared by design. Everyone the administrator has invited can see the plan's content, the documents, the activity log, and the names and roles of the other participants. Choose what you enter with that in mind.
Service providers that host the service and deliver its email. They process data only to provide those services to us. At present these are our hosting provider (servers in the United States) and our transactional email provider, which handles sign-in links and invitations and therefore sees participants' names and email addresses.
When the law requires it — for example a valid court order — or when necessary to protect the rights or safety of a person or of the service. We will tell the plan administrator when we are permitted to.
Nobody else. The site is excluded from search engines apart from this public page, the home page, and the Terms of Service.
5. Attorney contact — optional, and off by default
Many families reach a point where they need an attorney and do not know where to start. If you would like to hear from one, you can opt in under Account to be contacted by a probate attorney licensed in your state.
This is entirely optional. It is off for everyone until they choose to turn it on for themselves. Opting in is personal to you; it does not affect the other participants, and it is not recorded in the plan's shared activity log.
What is shared when you opt in: your name, your email address, the state you selected, and the fact that you are a participant in a probate matter. That is all.
What is never shared: anything about the estate. Not the decedent's name, not any figure, document, answer, note, task, deadline, or the identity of any other participant. An attorney who contacts you starts from nothing but your name, your email, your state, and the fact that you asked.
Who may contact you: an attorney licensed and in good standing in the state you selected, whose practice includes probate or estate administration. We check licensure against the state's public bar records before making an introduction. Beyond that we do not vet, endorse, or take responsibility for any attorney, and any relationship you form is between you and them.
Compensation: we do not sell your information. If we are ever compensated by an attorney for an introduction, that will be stated here and on the opt-in control before it applies, and it will not change what is shared.
Withdrawing: turn it off under Account at any time. We will make no further introductions from that moment. An attorney already introduced may still have your contact details; ask them directly to stop.
6. How long we keep it
Plan content is kept for as long as the plan exists, because settling an estate takes months or years and the family needs the record. Rows and documents that a participant removes are archived rather than destroyed, so an accidental deletion can be undone; they are removed for good when the plan is deleted. Sign-in links are purged shortly after they expire. Server logs are kept for a limited period for security purposes.
To have a plan deleted, its administrator can contact us at support@probateplan.store. We confirm with the administrator because the content belongs to the family, not to any one participant. Backups are overwritten on a rolling schedule after deletion.
7. How we protect it
- All traffic is encrypted in transit (HTTPS with HSTS).
- Sign-in is by single-use, expiring emailed links; passwords, where set, are stored as salted scrypt hashes and are never emailed or shown to anyone.
- Uploaded documents are checked by their contents, not their name, before they are stored; are stored under random names; and are served only to signed-in participants, never from a public location.
- The application runs under a locked-down service account with write access only to its own data directory.
No system is perfectly secure. If we learn of a breach affecting your information, we will notify affected participants and the plan administrator as required by law.
8. Your choices
- See and correct your information: it is all visible and editable in the plan, and your own name and email are shown under Account.
- Export the plan as CSV or PDF at any time.
- Leave a plan by asking its administrator to remove you.
- Delete a plan through its administrator, as described above.
- Opt out of attorney contact under Account, at any time.
Residents of states with privacy laws granting additional rights (such as California, Colorado, Virginia and others) may exercise them by contacting us. We do not sell or share personal information for cross-context advertising, and we do not discriminate against anyone for exercising a privacy right.
9. Children
ProbatePlan is for adults settling an estate. It is not directed to anyone under 18 and we do not knowingly collect information from them. Plan content may of course refer to minor heirs; that is entered by the adults in the plan.
10. Changes
We may update this policy. The effective date will change, and for material changes we will notify participants by email or a notice in the application. Anything that would widen what is shared under the attorney-contact program will require you to opt in again.
11. Contact
Privacy questions or requests: support@probateplan.store.