Privacy Policy

Life Box is designed around a few simple principles:

• Your information is yours.
• We collect only information reasonably required to provide and improve Life Box.
• We do not sell your personal information.
• We do not sell, rent or use the contents of your Life Box for advertising.
• We do not permit advertisers to access the contents of your Life Box.
• Access to stored information is restricted to you, people you authorize, and service providers who require limited access to perform services on our behalf.
• AI-assisted processing is used to help organize and understand your Life Box, not to turn your private documents into advertising data.
• We do not use the private contents of your Life Box to train general-purpose AI models.
• We use security, privacy and access controls appropriate to the highly sensitive nature of the information users may store with us.

Life Box is a secure digital service designed to help people organize important information about their lives.

Depending on the features you use, your Life Box may contain information such as:

• wills and estate documents;
• powers of attorney;
• insurance documents;
• banking and investment information;
• property and housing records;
• tax documents;
• business records;
• identification records;
• passwords, login instructions and digital account information;
• emergency information;
• important contacts;
• information about spouses, partners, children, dependants and family members;
• funeral, memorial or end-of-life preferences;
• instructions for executors or attorneys;
• personal messages, letters, photographs, audio or videos;
• information intended to be released following death, incapacity or another defined event;
• other documents or information a user chooses to store.

Because Life Box is intentionally designed to store important life information, some of the information users provide may be extremely sensitive.

Your Life Box may contain information about other people, including:

• spouses or partners;
• children;
• family members;
• beneficiaries;
• executors;
• attorneys;
• trustees;
• guardians;
• lawyers;
• financial advisors;
• accountants;
• insurance professionals;
• physicians or healthcare contacts;
• business partners;
• emergency contacts;
• other trusted individuals.

When you provide information about another person, you should only provide information that you are legally permitted to store and use for the purposes of your Life Box.

We process this information primarily at your direction and for the purpose of providing the Service.

We do not use information about third parties contained inside your private Life Box for independent marketing purposes.

Life Box may allow you to identify individuals who are permitted to receive or access certain information.

Depending on the features available, these may include:

• a spouse or partner;
• a family member;
• an executor;
• an attorney acting under a power of attorney;
• a lawyer;
• a trustee;
• a financial advisor;
• a designated emergency contact;
• another person authorized by you.

We may collect information about these individuals so that we can identify them, contact them, verify their identity or provide access where permitted.

Providing someone as a trusted or authorized contact does not automatically give that person access to your entire Life Box.

Access is governed by the permissions, instructions and verification procedures applicable to your account.

One of the purposes of Life Box is to make important information available to the right people when it is needed most.

You may be able to provide instructions concerning access following:

• your death;
• incapacity;
• activation of a power of attorney;
• appointment or confirmation of an executor;
• another event supported by Life Box.

Before releasing protected Life Box Content, we may require appropriate verification.

Verification may include:

• identity verification;
• confirmation of the person's authority;
• supporting legal documents;
• death certificates;
• probate or estate documentation;
• powers of attorney;
• court documents;
• lawyer verification;
• additional information reasonably required to prevent unauthorized access.

We may refuse, delay or limit access when we cannot reasonably establish that a person is authorized to receive the requested information.

Our verification procedures are security measures and do not constitute legal advice or a determination of legal rights between competing parties.

Life Box may use artificial intelligence, machine learning, document-processing technologies and automated systems to make the Service more useful.

For example, when you upload a document, Life Box may analyze it to:

• determine what type of document it is;
• identify important dates;
• recognize people, organizations or relationships;
• extract document metadata;
• identify financial, property, insurance or legal information;
• identify relevant contacts;
• suggest categories;
• create summaries;
• make information searchable;
• connect related information within your Life Box;
• identify potentially missing information;
• update your Life Box readiness assessment;
• suggest tasks or items you may want to add;
• answer questions you ask about your own Life Box.

For example, if an uploaded document identifies your spouse, insurer, executor or property, Life Box may use that information to connect relevant areas of your account.

The private contents of your Life Box are not intended to be a dataset for training general-purpose artificial intelligence models.

Life Box does not use Life Box Content to train publicly available or general-purpose AI models.

Where third-party AI or document-processing providers process Life Box Content for us, we seek to structure those services so that information is processed only to provide the requested functionality and is not used by the provider for its independent advertising or general-purpose AI model training.

Aggregated or de-identified information that cannot reasonably identify an individual may be used to understand and improve Life Box.

Life Box may analyze the information in your account to create a "Readiness" score or similar indicators.

These may be based on factors such as:

• documents you have added;
• categories you have completed;
• information that appears to be missing;
• account configuration;
• trusted contacts;
• estate information;
• insurance information;
• financial information;
• instructions or messages;
• other recommended items.

Readiness scores are estimates intended to help organize information.

They are not guarantees that your estate, family, finances, legal affairs or emergency preparations are complete.

Some information generated by Life Box may be inferred from information you provide. Where required by applicable law, you may have rights concerning automated processing and information derived from it.

We may use personal information to:

Life Box may use third-party payment providers, including Paddle, to process subscriptions and payments.

Payment providers may collect information such as:

• name;
• billing address;
• email;
• payment method;
• transaction information;
• tax-related information.

Payment card information submitted through a payment provider is processed by that provider according to its own privacy and security practices.

Life Box may receive information concerning your transaction, subscription, billing status and payment history without storing your complete payment card number.

We use trusted service providers to operate Life Box.

These may include providers of:

• cloud infrastructure;
• database hosting;
• file storage;
• authentication;
• email;
• payments;
• security;
• monitoring;
• customer support;
• analytics;
• artificial intelligence;
• document analysis;
• backup and disaster recovery.

These companies may process personal information on our behalf only to the extent reasonably required to perform their services.

We take reasonable measures to select providers capable of appropriately protecting the information entrusted to them and use contractual, technical and organizational protections where appropriate.

Service providers are not permitted to sell Life Box Content or use it for their own advertising purposes.

We may disclose personal information in limited circumstances.

Life Box does not sell your personal information.

We do not sell Life Box Content.

We do not provide the contents of your Life Box to data brokers.

We do not provide your private documents to advertisers for targeted advertising.

Our business model is based on providing the Life Box service to customers, not monetizing the private contents of their accounts.

Life Box is designed to store highly sensitive information, and we treat security as a core product requirement.

Depending on the system involved, safeguards may include:

• encryption in transit;
• encryption at rest;
• authentication controls;
• role-based access controls;
• database access policies;
• restricted administrative access;
• logging;
• monitoring;
• secure software-development practices;
• infrastructure protections;
• backups;
• incident-response procedures;
• service-provider security requirements.

Access to personal information by Life Box personnel is limited to circumstances where access is reasonably necessary to:

• provide support;
• maintain the Service;
• investigate security issues;
• comply with legal obligations;
• perform other authorized business functions.

No internet service, storage system or security technology can guarantee absolute security.

Users are also responsible for protecting their account credentials and should use strong, unique passwords and any additional security features Life Box makes available.

Life Box is a Canadian-focused service, but some infrastructure and service providers may process or store information outside your province or outside Canada.

As a result, information may be subject to the laws of another jurisdiction and may be lawfully accessible to courts, governments, law enforcement or regulatory authorities in that jurisdiction.

Where we transfer personal information to service providers for processing, Life Box remains responsible for using appropriate measures to protect personal information under applicable Canadian privacy requirements.

Where required, we assess privacy implications associated with transferring or processing information outside the applicable jurisdiction.

We retain personal information only for as long as reasonably necessary for:

• providing your Life Box;
• maintaining your account;
• fulfilling the purposes described in this Privacy Policy;
• satisfying legal requirements;
• resolving disputes;
• maintaining security;
• preventing fraud;
• enforcing agreements.

Different categories of information may have different retention periods.

Life Box Content will generally remain associated with your account while your account remains active unless you delete it or instruct us otherwise.

When information is no longer required, we take reasonable measures to delete, destroy or de-identify it.

Information that has been deleted may remain temporarily in encrypted backups, system logs or disaster-recovery systems until those systems are overwritten according to their normal retention schedules.

We may retain limited records where required by law or reasonably necessary for fraud prevention, security, accounting, dispute resolution or compliance.

You may request deletion of your Life Box account.

Account deletion may result in permanent deletion of documents, messages, instructions and other information stored in your Life Box.

Because the purpose of Life Box may include preserving information for future release, we may require additional identity verification before processing a deletion request.

We may also provide warnings or confirmation steps before permanently deleting information.

Certain information may need to be retained for legal, accounting, security or regulatory purposes.

Subject to applicable law and appropriate identity verification, you may have the right to:

• request access to personal information we hold about you;
• request information about how your information has been used or disclosed;
• correct inaccurate personal information;
• update account information;
• withdraw consent where consent is the applicable basis for processing;
• request deletion of information in certain circumstances;
• request information concerning automated processing where applicable;
• request a copy of qualifying computerized personal information in a structured and commonly used technological format where applicable;
• make a privacy complaint.

Some rights may be subject to legal limitations or exceptions.

We may need to verify your identity before fulfilling a request to prevent unauthorized disclosure.

Because a Life Box may contain information about multiple people, we may also need to protect the privacy rights of other individuals when responding to access requests.

Where we rely on your consent to collect, use or disclose personal information, you may withdraw that consent subject to legal or contractual restrictions and reasonable notice.

Some information is necessary to provide Life Box.

Withdrawing consent for processing that is essential to the Service may mean that we can no longer provide some or all Life Box functionality.

Optional uses of information will be treated separately where required.

Life Box uses automated technologies to help users organize and understand their information.

Automated systems may:

• classify documents;
• extract information;
• identify connections;
• recommend missing items;
• calculate readiness indicators;
• rank search results;
• generate summaries.

Life Box is not intended to make legally binding decisions about you solely through automated processing.

Where applicable law provides additional rights concerning decisions based exclusively on automated processing, we will provide the information and review mechanisms required by law.

Life Box may use cookies, local storage and similar technologies.

These technologies may be used for:

• authentication;
• account security;
• remembering preferences;
• maintaining sessions;
• preventing fraud;
• measuring website performance;
• understanding product usage.

Where legally required, we will request consent before using non-essential cookies or similar technologies.

Life Box does not use the private contents of your Life Box to create advertising profiles.

We may collect limited technical and product-usage information to understand how Life Box performs.

This may include:

• pages viewed;
• features used;
• device type;
• browser type;
• operating system;
• approximate location derived from an IP address;
• timestamps;
• error logs;
• referral information;
• performance data.

Where practical, we seek to keep analytics information separate from the private contents of users' Life Boxes.

We may send service-related communications such as:

• account verification messages;
• security alerts;
• payment or subscription notices;
• important product notices;
• privacy or policy updates;
• trusted-contact communications;
• access verification requests.

These communications may be necessary to provide the Service.

We may also send optional marketing communications where permitted by law.

You can unsubscribe from promotional email using the unsubscribe mechanism provided in those messages.

Unsubscribing from marketing does not prevent us from sending essential account, security, transactional or legal communications.

Life Box is not intended for independent use by children who are not legally capable of providing the required consent in their jurisdiction.

A parent, guardian or other authorized adult may store information relating to children where appropriate as part of their own Life Box.

If we discover that an account has been created by a child contrary to applicable requirements, we may take steps to restrict or delete the account.

If we become aware of unauthorized access, loss or disclosure of personal information, we will investigate the incident and take reasonable steps to contain it, mitigate potential harm and prevent recurrence.

Where required by applicable privacy law, we will notify affected individuals and the appropriate privacy regulator.

We maintain records of privacy and security incidents where required.

Life Box is based in Canada and is designed to operate in accordance with applicable Canadian privacy laws.

Depending on the circumstances and location of an individual, these may include:

• the Personal Information Protection and Electronic Documents Act (PIPEDA);
• applicable provincial private-sector privacy legislation;
• Quebec's Act respecting the protection of personal information in the private sector;
• Alberta's Personal Information Protection Act;
• British Columbia's Personal Information Protection Act;
• successor or replacement privacy legislation;
• other applicable privacy requirements.

Where provincial legislation applies instead of or in addition to federal law, we will seek to comply with the applicable requirements.

Life Box has designated responsibility for its privacy program.

Questions, complaints and privacy requests can be directed to:

The Privacy Officer is responsible for overseeing Life Box's privacy practices and responding to privacy-related inquiries and complaints.

If you have a concern about how Life Box handles your personal information, please contact our Privacy Officer first so that we can investigate and respond.

You may also have the right to contact or make a complaint to the Office of the Privacy Commissioner of Canada or the applicable provincial privacy authority.

Nothing in this Privacy Policy limits rights available to you under applicable law.

Life Box will evolve, and our privacy practices may evolve with it.

We may update this Privacy Policy periodically to reflect:

• new features;
• changes in technology;
• changes in service providers;
• changes in our business;
• changes in privacy law;
• improvements to our privacy practices.

When we make material changes, we will provide appropriate notice.

The date at the top of this Privacy Policy identifies when it was most recently updated.

Where required by law, we will obtain additional consent before using personal information for a materially new purpose.

Questions about privacy at Life Box can be sent to:

For privacy rights requests, please include enough information for us to identify your account and understand your request.

For your protection, do not email passwords, financial documents, identification documents or other highly sensitive Life Box Content directly to our privacy email address unless specifically instructed to do so through a secure process.