Privacy Policy

• Account data — your email address and authentication records, and the profile details you add such as your name and whether you are based in the diaspora.
• Your estate-planning answers — this is sensitive personal information. It includes family and relationship details, identity details, your assets and their approximate values, your beneficiaries and what each is to receive, guardianship wishes, trustees and executors, and any healthcare wishes you record.
• Generated documents — the draft will, trust deed, power of attorney or healthcare directive we produce from your answers.
• Transaction records — the amount, currency, status and provider reference for each payment. We do not store your card number.
• Support and audit records — messages you send us, and logs of significant events such as emergency document access.

We use your information to generate your documents, to run your account and vault, to take payment, to provide support and legal-review services when you request them, and to release documents to a verified executor or nominated emergency contact under the conditions described in the service. We do not sell your information and we do not use your estate-planning answers for advertising.

• Supabase — database, authentication and private document storage.
• Stripe — card payment processing for diaspora users.
• Paynow — payment processing within Zimbabwe.
• Our hosting and email providers — serving the website and sending transactional notifications such as invitations and access alerts.

These providers process data on our instructions for the purposes above. We do not disclose your plan contents to any other third party except where you ask us to, or where we are legally obliged to.

Talent Africa Inc. operates the platform and is responsible for the account, vault and technical processing. DRT, a firm of legal practitioners, is responsible for personal information handled when legal services are rendered to you — review, estate administration and conveyancing — and is bound by its professional obligations of confidentiality. The formal controller allocation between the two is subject to confirmation in the final policy.

• Row-level access control in the database, scoped to your user account.
• A private per-user document vault; files are not publicly addressable and downloads use short-lived links issued only after your ownership is checked.
• Encryption in transit, and encryption at rest for stored documents.
• Staff access is limited by role. Staff see plan metadata; plan contents are reachable only by you, an assigned practitioner, or a verified executor after death.
• Emergency document access is logged and the owner is notified.

No system is perfectly secure, and we make no claim to any security certification.

You can access and correct your information from your account at any time, and you can ask us to delete it. Deletion has a limit: where documents have been executed or where legal services have been rendered, the legal practice may be required to retain records for a period. We will tell you when that applies rather than silently keeping data.

We keep your plan data and documents for as long as your account is active, because the point of the service is that your will can be found when it is needed. Superseded document versions are retained as part of the record rather than deleted. After account closure we delete or anonymise data that we are not required to retain.

If you are in the diaspora, your card payment is processed outside Zimbabwe, including in the United States, by our payment processor. Our hosting and email providers may also process data outside Zimbabwe. Your plan contents remain within the platform's own storage and are not sent to payment processors.

We treat Zimbabwe's Cyber and Data Protection Act as the governing framework for the handling of personal information described here.

For a privacy request or a question about this policy, contact us through the support channel in your account or at the contact address published on this site.