Privacy Policy

1. Introduction

At LastWish, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our Service.

By using LastWish, you consent to the practices described in this Privacy Policy.

2. Information We Collect

Personal Information

We collect personal information that you provide directly to us, including:

• Account Information: Name, email address, phone number, date of birth, and password
• Identity Verification: Aadhaar number, PAN card details, and other KYC documents
• Profile Information: Address, emergency contacts, and beneficiary details
• Payment Information: Billing address and payment method details (processed through Razorpay)

Sensitive Personal Information

Given the nature of our Service, we may collect sensitive personal information including:

• Health and medical information (for death verification purposes)
• Financial information and asset details
• Family and relationship information
• Personal wishes and final instructions

Automatically Collected Information

When you access our Service, we automatically collect:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, features used)
• Log data (access times, errors, and system activity)
• Location information (approximate location from IP address)

3. How We Use Your Information

We use your information to:

• Provide and maintain our Service: Create and manage your account, process payments, and deliver core functionality
• Verify identity and prevent fraud: Conduct KYC verification and ensure account security
• Facilitate post-death processes: Verify death and distribute information to designated beneficiaries
• Improve our Service: Analyze usage patterns and develop new features
• Communicate with you: Send important updates, security alerts, and service notifications
• Comply with legal obligations: Meet regulatory requirements and respond to legal requests

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

With Your Consent

We may share your information with third parties when you explicitly authorize us to do so.

Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment processing (Razorpay)
• Cloud storage and hosting
• Email delivery and communication
• Analytics and performance monitoring
• Customer support services

Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, including:

• Court orders, subpoenas, or other legal processes
• Government or regulatory authority requests
• Law enforcement requests when legally required

Business Transfers

If LastWish is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the terms of this Privacy Policy.

Post-Death Information Release

Upon your death and proper verification, we will release your designated information to your chosen beneficiaries as specified in your account settings.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption: All data is encrypted in transit using TLS and at rest using AES-256 encryption
• Access Controls: Strict role-based access controls and multi-factor authentication
• Regular Security Audits: Periodic security assessments and penetration testing
• Backup and Recovery: Regular encrypted backups with tested recovery procedures
• Audit Logging: Comprehensive logging of all access and modification activities

Important Note: While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy, including:

• Account Information: Retained until account deletion
• Post-Death Information: Retained according to your specified retention preferences
• Payment Records: Retained as required by tax and financial regulations (typically 7 years)
• Audit Logs: Retained for security and compliance purposes (typically 2 years)

When we no longer need your personal information, we will securely delete or anonymize it.

7. Your Rights

Under applicable data protection laws, you have the following rights:

• Access: Request a copy of your personal information we hold
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Portability: Request transfer of your data to another service provider
• Objection: Object to processing of your personal information in certain circumstances
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, please contact us using the information provided below.

8. International Data Transfers

Your information may be stored and processed in India and other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where required by law.

9. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can take appropriate action.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through our Service. The updated version will be effective immediately upon posting with the "Last updated" date revised accordingly.

Your continued use of our Service after any changes constitutes acceptance of the updated Privacy Policy.

11. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

• Data Protection Officer: privacy@lastwish.in
• Postal Address: LastWish Privacy Team, Bangalore, Karnataka, India
• Phone: +91-80-XXXX-XXXX

You also have the right to lodge a complaint with your local data protection authority if you believe we have violated applicable data protection laws.