Effective date: October 21, 2026

Who we are and what this covers

This privacy policy covers trusteddirective.com, the public website, and the Trusted Directive app on the web (app.trusteddirective.com), iPhone and Android, all run by Trusted Directive L.L.C. (“we,” “us”). It applies when you browse the site, join the waitlist, request a demo, contact us, or create and use a vault account.

When you share documents or name a trusted contact, the consent agreements you accept inside the app also apply to those choices. You’ll see them before anything is shared.

Information you give us

Waitlist signups: your email address, plus which page you signed up from.
Demo requests: your name, email address, firm name, and whether you’re an advisor or an attorney.
Contact messages: whatever you choose to include in your message, plus your email address so we can reply.

The website itself has no accounts, no payment forms, and no fields that ask for anything sensitive. Accounts and payments happen in the app, described next.

Information in the app

Your account: your name, email address, and password. The password is handled by Amazon Cognito and stored only in protected form; we never see it. If you turn on two-step sign-in, Cognito stores that setting too.
Your vault: the documents you upload, their names, and the details you add to them.
People you add: the names and email addresses of trusted contacts you invite, and the instructions you set for them.
Activity records: a log of actions on your account (for example uploads, identity verification, and release requests), kept so you and we can see what happened and when.

Identity verification

Before your vault opens, we confirm you are who you say you are. Trusted contacts verify when they create their account. We use Stripe Identity, run by Stripe, Inc., for this check.

Stripe asks for a photo of your government ID (driver’s license, passport, or ID card) and a live selfie, and compares your face to the ID photo. That comparison uses facial geometry, which some laws treat as biometric information. Stripe asks for your consent before it captures anything.
We never receive your ID images, your selfie, or any facial data. Stripe holds those under the Stripe Privacy Policy.
We receive only the result and a few verified details: your name as it appears on the ID, your date of birth, the ID’s expiration date, and the last four digits of the ID number. We use them to show your Verified ID card in the vault and to make sure only verified people can receive documents.
When you delete your account, we ask Stripe to delete the verification data it holds for you.

Payments

Subscriptions are billed through Stripe. You enter your card on Stripe’s secure page; we never see or store your full card number. We keep your Stripe customer reference, your plan, and your trial and renewal dates so the app knows what you have access to. Stripe sends receipts and renewal reminders.

Information collected automatically (analytics)

We use PostHog, a product analytics service, to understand how this site is used. PostHog is loaded on every page and collects:

Pages you view, in what order, and how you arrived (referrer and campaign parameters)
Interactions such as clicks on buttons and links, and form submissions (the fact that a form was submitted and from which page — analytics events do not capture what you typed)
Technical details: browser type, device type, operating system, screen size, and IP address
A randomly generated identifier stored in a cookie or your browser’s local storage, used to recognize repeat visits

This data is processed by PostHog, Inc. on its U.S. cloud (us.i.posthog.com). We use it to see which pages are read, where visitors come from, and where the site is confusing — nothing more.

We also use Google Analytics 4 (measurement ID G-ZXVJZ4CVNZ), provided by Google, to measure overall site traffic. In short: we use PostHog (product analytics) and Google Analytics 4 (traffic measurement). We do not use advertising networks or ad-targeting cookies, and we do not sell or rent any information about you to anyone.

Visitor identification on our professional pages. On the pages written for financial advisors, estate attorneys and partner-program terms, and on our product-comparison pages, we also use Instantly (Instantly.ai) website visitor identification. It attempts to match a visitor from a U.S. business network to a professional profile — typically name, business email address, job title, company and LinkedIn profile — using Instantly’s business-contact data together with the pages visited on this site. To make that match, Instantly’s script also calls LiveIntent, an identity service that links your browser to a business contact record using cookies and your IP address. We use that only to follow up with professionals who appear interested in the partner program. It is not used on the pages written for families, on any sensitive-topic page, or in the vault application, and it does not work for visitors outside the United States, and it only runs after you accept the cookie notice on this site. We do not sell this information. To opt out, decline the cookie notice, use a content blocker, or email us and we will delete any profile matched to you. You can also ask Instantly directly to delete your profile: opt out of Instantly.

Our hosting provider, Vercel, also keeps standard server logs (such as IP address and requested URL) for operating and securing the site.

How we use your information

To run your vault: store your documents, verify your identity, and carry out the sharing and release instructions you set
To bill your subscription and send account emails (sign-in codes, receipts, security and release notices)
To send a short series of getting-started emails after you sign up, which you can turn off at any time
To email your invitation when Trusted Directive opens (waitlist)
To reply to demo requests and set up a demo (a real person answers)
To respond to questions sent through the contact form
To understand site traffic and improve the pages (analytics, in aggregate)

Joining the waitlist gets you a launch invitation, not a marketing drip. Every marketing or getting-started email includes a way to opt out, and asking to be removed removes you. Account and security emails keep coming while you have an account, because they tell you about your vault.

Who processes your information

We use a small set of service providers to run the site and the app. Each receives only what it needs to do its job:

Amazon Web Services — hosts the app and stores vault documents (encrypted), handles sign-in (Amazon Cognito), sends account email (Amazon SES), and runs the app’s AI assistant (Amazon Bedrock, which does not use your content to train models)
Stripe — identity verification and payments, as described above
Vercel — hosts the website and the form endpoint
Formspree — relays form submissions (waitlist, demo, contact) to us by email
Notion — stores the waitlist and demo-request list so we can send invitations
MailerLite — sends waitlist and getting-started emails
PostHog — product analytics on the website and in the app
Google (Google Analytics 4) — website traffic measurement, as described above
Sentry — error monitoring in the app, so we can find and fix crashes

Beyond these providers, we disclose personal information only if the law requires it. We never sell it.

How vault documents are protected

Vault documents are encrypted at rest with AES-256 via AWS KMS. Decryption is restricted to narrowly-scoped service roles, so no employee has standing access to document content. Professionals linked to a vault see document metadata only, never content. A trusted contact receives only the documents you choose, under the instructions you set. The full inventory of deployed controls is on the security page.

How long we keep information

Your account and vault: for as long as you have an account. When you delete your account in Settings, we delete your documents, your records, and your sign-in, and ask Stripe to delete your verification data. We keep billing records as long as tax law requires.
Waitlist and demo requests: until we’ve sent your invitation or completed your request, and for a reasonable period afterward — or until you ask us to delete them, whichever comes first.
Contact messages: as long as needed to resolve your question.
Analytics data: retained under PostHog’s standard retention settings and reviewed only in aggregate.

Your choices and rights

Access, correction, deletion: ask us what we hold about you, ask us to fix it, or ask us to delete it — contact us and we’ll do it. No forms, no fee, no friction. You can also delete your account yourself from Settings in the app.
Email: unsubscribe from any email we send, or ask to be removed from the waitlist entirely.
Analytics: blocking cookies or using a content blocker will stop PostHog from tracking your visit; the site works fine without it.

Depending on where you live (for example, the EU/EEA, the U.K., Québec, or California), you may have additional statutory rights over your personal information, including rights to access, portability, correction, and deletion. We honor requests under those laws through the same channel: contact us.

Children

The app is for adults 18 and older. This website is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

If this policy changes, we’ll update it here and change the effective date at the top. If a change meaningfully affects information you’ve already given us — like the waitlist — we’ll email you about it before it takes effect, not after.

Contact

Questions about privacy, or a request about your information? Use the contact form — a real person answers within one business day.