Privacy Policy

RestAssured LLC (“RestAssured,” “we,” “us,” or “our”) is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the RestAssured platform, including our website (www.restassured.life) and web application (collectively, the “Service”).

Because the Service is designed to hold highly sensitive personal information — including legal documents, financial records, and healthcare directives — we take our privacy obligations seriously. Please read this policy carefully. By using the Service, you agree to the practices described here.

1. Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information from third parties.

(a) Information You Provide Directly.

When you register for an account, complete assessments, or use features of the Service, you may provide us with the following categories of information:

• Account Information: Name, email address, password, and account preferences, and, if you choose to add them, a preferred name, phone number, date of birth, and profile photo.
• Assessment Responses: Answers to the Findability check and Life Readiness Assessment questions, covering legal, financial, healthcare, digital, and family preparedness topics. This includes your Life Profile — facts about your circumstances, such as your age range and whether you have dependents, pets, property, a business interest, a trust, or significant digital assets. If you take the Findability check without an account, your answers are stored in your browser until you create an account.
• Action Plan Notes: Notes you choose to write on items in your Action Plan.
• Personal Documents: Documents you upload to EasyVault, which may include wills, trusts, powers of attorney, advance healthcare directives, insurance policies, financial account statements, identification documents, and other personal records. EasyVault documents are stored by our document storage provider (see Section 4).
• Financial Information: Information about your financial institutions, account types, insurance coverage, and assets that you describe in your assessment responses. We do not ask for full account numbers or payment card numbers in these features. Documents you choose to upload to EasyVault, such as account statements, may contain that information.
• Digital Estate Information: Information about how your digital life is organized — for example, whether you use a password manager or have instructions for your devices and online accounts. We never ask for your passwords.
• Trust Network Information: Names, email addresses, phone numbers, relationship, role, and notes for individuals you add as Trusted Contacts.
• Report Sharing Information: If you choose to share your readiness report, the recipient’s name and email address and any personal message you include.
• Communications: Messages you send to us by email or through support channels, and messages you send to Remy, our AI conversational interface (see Section 12).
• Payment Information: If you buy a paid plan, you pay on a checkout page hosted by Stripe. Stripe, through its Link service, sells our paid plans as merchant of record, so Stripe and Link collect and process your name, email address, billing address, and payment details as the seller, under their own privacy policies. To set up your purchase we give Stripe your email address and an internal account identifier. We receive back only records of your purchases — identifiers, plan, status, amounts, tax, and dates — and never your full payment card number.
• Consent Records: Records of your acceptance of our Terms of Service and policies, including when you accepted and the browser you used, and your cookie preferences.

(b) Information Collected Automatically.

When you use the Service, we automatically collect certain technical and usage information, including:

• Device and Browser Information: IP address, browser type and version, operating system, device identifiers, and device type.
• Usage Data: Pages visited, features used, clicks and other interactions, time spent on the Service, assessment progress (such as which questions you have viewed and when), and score history.
• Log Data: Server logs recording access times, error logs, and diagnostic information.
• Cookies and Similar Technologies: We use cookies and browser storage to operate the Service, remember your preferences, and — only if you allow it — analyze usage. See Section 8 for details.

(c) Information from Third Parties.

We may receive limited information about you from our service providers — for example, delivery status for emails we send you, processing status for documents you upload to EasyVault, and, if you purchase a paid plan, records of your purchase from Stripe (see Payment Information above). We may combine this information with data we collect directly from you.

2. Sensitive Personal Information

Sensitive categories we may collect include: health and medical information (advance healthcare directives, organ donor status, healthcare proxy designations, and health documents you upload); financial information (account types, insurance policies, asset descriptions, and financial documents you upload); and government-issued identification (driver’s license, passport, Social Security Number — only if you choose to upload such documents to EasyVault). You control what sensitive information you provide. RestAssured does not require you to upload any specific document category.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: To operate the platform; generate your Findability Score, Life Readiness Assessment results, and readiness report; build your Action Plan; store your documents in EasyVault; power Remy’s guidance; keep your Trust Network list; and send report summaries you choose to share.
• Personalization: To tailor your Action Plan, assessment questions, and task recommendations to your individual situation.
• Account Management: To create and maintain your account, authenticate your identity, process payments if you purchase a paid plan, and communicate with you about your account.
• Safety and Security: To detect, investigate, and prevent fraud, abuse, unauthorized access, and other security incidents.
• Service Improvement: To analyze usage patterns, conduct research, fix bugs, and improve the features and performance of the Service. Where used for research and analytics, data is aggregated and de-identified to the extent practicable.
• Communications: To send you account-related notices, security alerts, reminders about an assessment you have started (each with a link to stop them), product updates, and — where you have opted in — marketing communications. You may opt out of marketing emails at any time.
• Legal Compliance: To comply with applicable laws, respond to lawful requests from public authorities, and enforce our Terms of Service.
• AI Features: Your assessment responses and messages to Remy are sent to our AI provider to generate Remy’s responses and your readiness report. We do not send your name, email address, or EasyVault documents to our AI provider. See Section 12.

4. How We Share Your Information

We share information only in the following limited circumstances:

• Service Providers: We share information with vendors who perform services on our behalf. These providers are contractually bound to use your information only to perform services for RestAssured and in accordance with this Policy. Our current key service providers are:

• Report Sharing: If you choose to share your readiness report, we email the person you name a summary of your report — including your overall score and score band, a short summary, highlights from your strengths and Action Plan, and any personal message you add. The email is sent through our email provider, Resend. To prevent abuse, we keep a record of each share and store the recipient’s email address only in a one-way hashed form. Once delivered, the email is outside our control.
• Trust Network: The Trust Network is an informational tool for your own use — a place to record the people you would want involved and how to reach them. Adding someone to your Trust Network does not share any of your information with them, does not give them access to your account or your EasyVault documents, and does not cause us to contact them.
• Legal Requirements: We may disclose your information if required by law, subpoena, court order, or other governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of RestAssured, our users, or the public.
• Business Transfers: If RestAssured is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your information is transferred and becomes subject to a different privacy policy.
• With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.
• Aggregated and De-identified Data: We may share aggregated, de-identified data that cannot reasonably be used to identify you, for research, analytics, marketing, or other business purposes.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Your account information, profile, assessment responses, Life Profile, readiness reports, Action Plan notes, and Trust Network list are kept while your account is open. When you delete your account, we first give you a copy of your account data (see Section 7) and then permanently delete all of it straight away, including your profile photo.
• Documents stored in EasyVault are retained until you ask us to delete them or you close your account. In-app deletion of individual EasyVault documents is not yet available; until it is, contact us at support@restassured.life and we will delete the documents you specify. If you have documents in EasyVault when you close your account, our support team will complete the closure with you, and we will delete your documents from our storage provider within 90 days of your request unless a legal hold applies. When you replace a document, its earlier versions are kept with it and deleted with it.
• We do not store the content of your conversations with Remy. We keep limited records of each exchange — such as the time, message length, and safety classification — for rate limiting, safety, and reliability, for the life of your account. Conversations from before our 2026 rebuild were stored in full; they are included in your data export and deleted with your account.
• Records of report shares are retained for the life of your account.
• If you purchase a paid plan, payment records are retained for 7 years, with the link to your account removed, to comply with tax and financial recordkeeping obligations.
• Log data and usage analytics are retained for up to 24 months.

Residual copies of deleted information may remain in our service providers’ routine backups for a limited period until they are overwritten. You may request deletion of your personal information at any time as described in Section 7. We may retain certain information as required by law or for legitimate business purposes such as fraud prevention, even after a deletion request.

6. Data Security

We implement technical, administrative, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, and destruction, including:

• Encryption of data in transit using TLS (Transport Layer Security).
• Encryption of data at rest, including all EasyVault documents, which are encrypted at rest by our document storage provider.
• Multi-factor authentication (MFA) using an authenticator app, available to all users.
• Role-based access controls limiting employee access to user data.
• Vulnerability monitoring, with annual third-party penetration testing planned.

Despite these measures, no security system is impenetrable. We cannot guarantee the absolute security of your information. In the event of a data breach affecting your rights and freedoms, we will notify affected users as required by applicable law.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information. To exercise any of these rights, contact us at support@restassured.life.

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete information. You can also update much of your information directly in the Service.
• Deletion: You may request that we delete your personal information, subject to certain exceptions (e.g., legal obligations, fraud prevention). You can delete your account yourself from Profile › Account & security › Delete your account; we give you a copy of your account data first. If documents are stored in EasyVault, our support team completes the closure with you (see Section 5).
• Data Portability: You can download a machine-readable (JSON) copy of the information in your account, including your profile, assessment responses, Life Profile, readiness reports, Action Plan notes, Trust Network list, consent records, purchase records, and a list of your EasyVault documents, from Profile › Account & security › Export your data. You can download the EasyVault documents themselves from EasyVault, or ask us at support@restassured.life.
• Opt-Out of Reminders and Marketing: You can stop assessment reminder emails at any time with the link in any reminder. You may opt out of marketing emails at any time by clicking “unsubscribe” in any marketing email or by contacting support@restassured.life.
• Withdraw Consent: Where we process your data based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Restriction: You may request that we restrict processing of your information in certain circumstances.

We will respond to verifiable requests within 45 days. We may need to verify your identity before fulfilling a request. We will not discriminate against you for exercising your privacy rights.

8. Cookies and Tracking Technologies

We use cookies and similar technologies, such as browser local storage, to operate and improve the Service. They fall into three categories, which you can manage at any time through the cookie preferences on our Service:

• Strictly Necessary: Required for the Service to function, including keeping you signed in, protecting your account, saving your progress, and remembering your cookie choices. These cannot be turned off.
• Functional: Remember your preferences and settings to personalize your experience. Used only if you allow them.
• Analytics: Help us understand how people use the Service so we can improve it. We use Amplitude for analytics only if you allow analytics cookies. Analytics data is linked to your account identifier, never to your name or email address, and we do not send your assessment answers, EasyVault documents, or Remy conversations to our analytics provider.

You can also control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service. See Section 14 for how we respond to Global Privacy Control and Do Not Track signals. Our pages also load fonts from Google Fonts, which receives your IP address and browser information when a page loads. Our Cookie Policy lists each cookie and similar technology we use.

9. Children’s Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information promptly. If you believe a child has provided us with their information, please contact us at support@restassured.life.

10. California Privacy Rights (CCPA/CPRA)

(a) Categories of Personal Information Collected.

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA: (1) Identifiers (name, email address, phone number, IP address, account identifier); (2) Personal information under California Civil Code §1798.80 (financial account information, insurance information); (3) Characteristics of protected classifications (age range and date of birth, if you provide them); (4) Commercial information (records of plans you purchase); (5) Internet or network activity (usage data, device information); (6) Sensitive personal information (health/medical information, financial data, government ID — only if voluntarily uploaded); (7) Inferences drawn from assessment responses to generate readiness scores and personalized recommendations.

(b) No Sale of Personal Information.

We do not sell personal information as defined under the CCPA/CPRA. We do not share personal information for cross-context behavioral advertising.

(c) Your CCPA Rights.

California residents have the right to: (1) Know what personal information we collect, use, disclose, and sell; (2) Delete personal information we have collected, subject to exceptions; (3) Correct inaccurate personal information; (4) Opt out of the sale or sharing of personal information (not applicable as we do not sell or share); (5) Limit use of sensitive personal information to the purpose for which it was collected; (6) Non-discrimination for exercising CCPA rights.

(d) Submitting a CCPA Request.

California residents may submit requests to know, delete, or correct by contacting us at support@restassured.life or by mail to RestAssured LLC, 985 Lake Street, #1024, Wayzata, MN 55391. We will verify your identity before processing your request and respond within 45 days, extendable by an additional 45 days with notice.

(e) Authorized Agents.

California residents may designate an authorized agent to submit CCPA requests on their behalf. We may require the agent to provide proof of authorization and may verify the identity of the requesting consumer directly.

11. Third-Party Services and Links

The Service relies on the third-party service providers listed in Section 4 and may link to third-party websites, such as resources in our resource library. These third parties operate under their own privacy policies. We encourage you to review the privacy policies of any third-party service you access through or in connection with our Service. RestAssured is not responsible for the privacy practices of third-party services.

A current list of sub-processors is available upon request at support@restassured.life.

12. AI Features and Automated Processing

RestAssured uses artificial intelligence and automated processing to generate your Findability Score, Life Readiness Assessment results, readiness report, Action Plan, and Remy’s conversational guidance. These outputs are based on the information you provide and are intended as organizational and educational tools only — not legal, financial, or medical advice.

We do not use automated decision-making that produces legal or similarly significant effects concerning you. Your readiness scores and recommendations do not affect your eligibility for insurance, credit, employment, or other regulated determinations.

To generate Remy’s responses and your readiness report, we send your assessment responses, Life Profile, and the messages you send to Remy to our AI provider, OpenAI. We do not send your name, email address, or EasyVault documents to our AI provider. OpenAI does not use this data to train its models, and may retain it for a limited period for abuse monitoring under its terms. We do not store the content of your Remy conversations (see Section 5), and we do not use identifiable conversation content to train AI models without your explicit consent.

13. Where Your Information Is Stored

RestAssured is based in Minnesota and operates within the United States. Your information, including EasyVault documents, is stored and processed in the United States. If you access the Service from outside the United States, please be aware that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to the United States.

14. Global Privacy Control and Do Not Track

If your browser sends a Global Privacy Control (GPC) signal, we treat it as a choice to turn off functional and analytics cookies, and we will not show you the cookie banner. A choice you make yourself in our cookie preferences takes precedence.

Some browsers transmit “Do Not Track” (DNT) signals to websites. Because there is no industry standard for how websites should respond to DNT signals, we do not currently alter our data collection practices in response to DNT signals. We will revisit this if a standard emerges. You may exercise opt-out rights as described in Sections 7 and 8.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email to the address associated with your account or by posting a prominent notice within the Service at least 30 days before the change takes effect. For non-material changes, we will update the “Last Updated” date at the top of this Policy. We encourage you to review this Policy periodically. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

• Support and Privacy Requests: support@restassured.life
• Mailing Address: RestAssured LLC, 985 Lake Street, #1024, Wayzata, MN 55391
• Website: www.restassured.life/legal/privacy

We will respond to privacy-related inquiries within 45 days of receipt. For requests requiring identity verification, the response period begins upon successful verification.