Privacy Policy

Last Updated: October 15, 2026

Quick Summary (please read the full Privacy Policy below)

What We Collect: Account info (name, email, phone), sensitive planning details (family members, assets, healthcare preferences), financial details you enter (such as income, debts and account numbers), and personal information about others you include in your estate plan (beneficiaries, executors, etc.).
AI Processing: Our AI assistant is currently powered by OpenAI; we may also use Anthropic, OpenRouter and other providers. Your data is processed by AI to assist in filling your documents, but should not be used to train AI models under our API agreements.
No Data Sales: We do not sell your personal information. Period.
Third-Party Sharing: Your name and profile photo are visible to other signed-in Sunset users. Beyond that, we share your information with other people only as you direct — attorneys or advisors you connect with, members of chats you join, and appointees you name for your Vault. We use named service providers (listed in Section 5) to operate our platform.
Your Rights: You can delete your account yourself in the app (Settings, or Profile in the iOS app), and you can access, correct, or delete your data at any time by emailing us — whether you are a registered user or someone whose information was provided by a user.
Turning AI Off: AI processing is part of the service you agree to at sign-up; you can turn it off at any time afterwards in Settings (or Profile in the iOS app).
Cookies: We use cookies for site functionality, analytics, and advertising measurement. Google Ads may set cookies on our marketing website to measure ad conversions.

1. Introduction

Welcome to Plan Your Sunset. This Privacy Policy explains how Sunset Life LLC (“we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you use our website at planyoursunset.com, our web app, our iOS app and related services (collectively, the “Services,” as defined in our Terms of Service). By using our Services, you agree to the collection and use of information as described in this policy.

2. Information We Collect

A. Information You Provide

When you create an account or use our planning tools, you may provide your name, email, phone number, address, date of birth, and sensitive planning details (family members, assets and account numbers, healthcare preferences). If you use Personal Finance, you may also provide financial details such as income, expenses, debts and retirement savings. We also store the messages you send in chats, the files you keep in your Vault and, for professional users, the profile you publish. If you upload existing documents to pre-fill your plan, we also process the information in them (see Section 4).

B. Information About Others (Third-Party Data Subjects)

Estate planning naturally involves providing personal information about other individuals — including but not limited to beneficiaries, executors, guardians, healthcare agents, powers of attorney designees, and family members. This information may include names, addresses, dates of birth, phone numbers, email addresses, and relationship details.

By providing such information, you represent and warrant that: (a) you have obtained the necessary consent or authorization from each individual whose information you provide; (b) you have informed those individuals that their data will be stored and processed by Plan Your Sunset, including by third-party AI and service providers; and (c) you have directed those individuals to this Privacy Policy. See also Section 6 of our Terms of Service. We process third-party personal information solely to provide our Services and assist in filling your requested documents. We do not contact individuals you name unless you explicitly invite them through the platform.

When a registered user provides personal information about you, we may collect and process the following categories of data: name, address, date of birth, phone number, email address, and your relationship to the user. This data is used solely to assist the user in completing their estate planning documents. We retain this data for the duration of the user’s active account. We do not contact you unless the user explicitly invites you through the platform. You may exercise your rights as described in Section 9B at any time.

If you are an individual whose information has been provided to us by a Plan Your Sunset user, please see Section 9B for your rights.

C. Attorney Verification Data

If you are a professional user (attorney or advisor) and choose to participate in our voluntary verification process, we collect and store a video recording of your verification meeting conducted via Google Meet. This recording is used solely for verification audit purposes — to confirm your identity, license, and professional standing. The recording is stored while your professional account is active and for up to 5 years after it is closed or deleted, for regulatory and audit purposes. We also store verification status, the date of verification, and any admin review notes associated with your verification request.

D. Automatically Collected Information

We collect your IP address, browser type, device info, and usage data when you visit our site.

Device recognition for account security. When you sign in, we recognize your browser using a first-party device identifier, so that — if you turn on sign-in alerts in your security settings — we can email you when your account is accessed from a device we don’t recognize. For each known device we store a one-way cryptographic hash of that identifier (never the identifier itself), a general browser and operating system description (for example, “Chrome on macOS”), the country your sign-in appears to come from, and the dates the device was first and most recently seen. Your sign-in IP address is processed to estimate that country and to protect and secure our Services, but it is not stored in your device history.

iOS app. Our iOS app contains no analytics or advertising tools. When you sign in through the app, it sends a random identifier it keeps in your device’s Keychain, so we can recognize the app as a known device; we store only its hash, as described above. The Privacy Policy and Terms links in the app open our marketing website, which uses the tools described in Section 5. If you turn on Face ID unlock for your Vault, your vault password is stored in your device’s Keychain and is never sent to us; like other Keychain data, it can be included in your own encrypted device backups. Face ID itself is handled by your device.

E. Cookies

We use cookies to enhance your experience. See Section 7 for details.

3. How We Use Your Information

We use your information strictly to:

Provide our Services and assist in filling your requested documents.
Communicate with you about your account and process payments.
Send updates (marketing communications require your consent).
Connect you with third-party professionals only when you specifically request it.
Verify professional credentials through our voluntary attorney verification process, including reviewing video recordings of verification meetings.
Understand how our Services are used and measure our advertising (see Sections 5 and 7).
Review messages reported by other users and keep chats safe.
Ensure security and comply with legal obligations.

4. Artificial Intelligence and Data Privacy

Our platform uses artificial intelligence (“AI”) tools to provide features such as our AI assistant Larry and document completion assistance. These tools are currently powered by OpenAI; we may also use Anthropic, OpenRouter and other providers (our “AI Providers”); if we add or change AI Providers, we will update this policy. For complete terms governing AI features, please also review our AI-Specific Terms. Regarding your data:

Processing: Your inputs are processed by AI Providers’ APIs to assist with responses and document completion. In a chat where Larry is on, the messages you write there — including messages to other people — are also analyzed automatically, for example to simplify them, suggest follow-ups and set reminders. Before most chat text is sent, we replace names and other personal details we detect with placeholders; when Larry fills in your documents from your answers, your answers are sent as they are. Data sent to AI Providers is limited to what these features need.
Document Import: If you upload existing documents to pre-fill your plan (for example, a previous will, an ID or an account statement), the files are stored temporarily in our file storage — not in your end-to-end encrypted Vault — and sent to our AI Providers to extract the information in them. The extracted information is shown to you for review and is added to your documents only for the fields you choose. Uploaded files are deleted as soon as the information in them has been extracted, or after a failed extraction, and any file left by a failed import is deleted automatically within 5 days of upload; the extracted information is kept with your account data.
Template Uploads (attorneys): If you upload your own document template while AI is on, its text — and, for a PDF, the file itself — is sent to our AI Providers to turn it into a reusable template. Unlike most chat text, it is sent as it is, so remove client details you do not want processed. Uploaded template files are kept with your account; when you delete your account, a file that another user’s copy of the template still uses is not deleted.
No Training: Your personal information should not be used to train AI models. We do not sell, license, or otherwise provide your data to AI companies for model training purposes. Our AI Providers process data under API agreements that prohibit use of your data for model training.
Data Retention by AI Providers: AI Providers may temporarily retain API inputs for limited periods for abuse monitoring purposes. Under their current API terms, OpenAI and Anthropic keep API inputs for up to 30 days; OpenRouter’s retention depends on the underlying model provider. We do not control AI Providers’ retention practices.
Turning AI Off: You can turn AI processing off at any time in Settings (web) or Profile (iOS app), and turn it back on later; turning it on again asks for your permission. While it is off, Larry, document import, template import and AI message helpers do not run on your requests, and your messages are not sent to AI Providers — including when other members of a group chat use Larry; once you turn it back on, messages you wrote while it was off can be included as context. Chatting with people keeps working.
Attorney-Client Privilege Warning: Communications with our AI assistant Larry may not be protected by attorney-client privilege. Information shared with Larry is processed by third-party systems. If you need privileged communication with your attorney, use a chat with Larry turned off and keep it off (a new group chat starts with Larry on unless its creator switches it off). While Larry is off in a chat, nothing in that chat is sent to AI Providers. Only the chat owner can turn Larry back on, and once Larry is on again, earlier messages in the chat, including messages written while Larry was off, can be sent to AI Providers as context.
Security: Our AI Providers process your data strictly to deliver services to us, subject to confidentiality and data processing agreements. Cohere, which ranks help-center articles for Larry, works under its own terms (see Section 5).

We share your data with the service providers below, which help us operate our Services; with other Sunset users as described below; and where the law requires it or in a business transfer:

AI Processing: OpenAI — powers our AI assistant Larry and document completion features; we may also use Anthropic, OpenRouter and other AI providers. It processes text inputs you provide during AI interactions and documents you upload for import or as templates (see Section 4).
Knowledge-Base Search: Cohere — ranks help-center articles for Larry’s answers. It receives the search query Larry writes — with names, contact details, addresses and identity or account numbers that we detect replaced by placeholders — together with our help-center articles, which contain no user data. Cohere’s terms allow it to use this data to improve its services.
Hosting and Storage: DigitalOcean — hosts our application servers, database and file storage, so the information you store in Sunset resides there. Amazon Web Services — stores our encrypted backups (Amazon S3).
Content Delivery and Security: Cloudflare — delivers our website and app and protects them from attacks; all traffic to Sunset, including your IP address, passes through Cloudflare.
Email Delivery: Mailgun — sends account, security and notification emails, so it receives your name, email address and the content of those emails.
Sign-In: Google — if you choose to sign in with Google, Google confirms your identity to us and shares your name, email address and profile photo.
Advertising: Google Ads — we use Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. Google may set cookies (such as _gcl_au and _gcl_aw) to attribute conversions to ad clicks. Google processes this data under its own privacy policy. We do not use Google Ads remarketing or interest-based advertising.
Analytics: Umami — privacy-focused analytics for our marketing website and web app, run for us on a server hosted by our development contractor. Umami does not use cookies, does not store personal data, and does not track users across websites.
Payment Processing: Stripe — processes subscription payments and stores payment method information.
Financial Data: Plaid — if you choose to connect a financial account, Plaid facilitates a one-time import of your account information (such as account names, types and balances). We close the connection right after the import and do not keep access to your account.
Analytics: PostHog — helps us understand how people use our website and web app. In the web app, PostHog events are linked to your account (user ID, name and email address) and can be linked to your visits to our marketing website. Microsoft Clarity — records session replays and heatmaps in our web app, linked to your user ID. Clarity masks all text on the page in these recordings. Neither runs in our iOS app; the Privacy Policy and Terms links in the iOS app open our marketing website, where PostHog runs without being linked to your account.
Customer Support: Intercom — powers our help center and support chat on our marketing website (planyoursunset.com).
Website Forms: Mailchimp — receives the email address and state you enter in the waitlist and contact forms on our marketing website.
Video Meetings: Zoom — hosts video meetings you schedule from a chat. We send Zoom the meeting title and time; Zoom processes the call itself when participants join.
Third-Party Professionals: Once you are connected with an attorney or advisor (they accept your request, you accept theirs, or you sign up through their invitation), they can see your name and contact details and read your estate planning documents in Sunset — your will, power of attorney and healthcare documents, including the people, assets and addresses in them — so they can review them and help you prepare them. The connection does not give them access to your Vault. Their access lasts as long as the connection; you can end it at any time. If a professional has completed our verification process, their “Verified” badge is visible to other users — this indicates that we have confirmed their identity and license through a recorded video call.
Other Sunset Users: Your name and profile photo can be seen by other signed-in users (for example, in chats and the professional directory). Members of a chat see the messages you post there (not your private questions to Larry) and your email address. Appointees you invite for your Vault see your name and email address and, once enough of their keys are provided and any waiting period you set has passed, can open your Vault. A professional’s published profile, including the contact details on it, is visible to all signed-in users.
Video Conferencing: Google Meet and Google Calendar — used to book and hold attorney verification calls. Google processes video call and booking data under its own privacy policy. Verification recordings are stored in our Google Workspace account (Google Drive) while the professional’s account is active and for up to 5 years after it is closed or deleted (see Section 8). Email you send to hi@planyoursunset.com is also handled through Google Workspace.
Legal Requirements: We may disclose information if required by law or subpoena.
Business Transfers: In the event of a merger or sale, your data may be transferred to the new owners.

Vault Data: Data stored in your personal Vault is protected by zero-knowledge encryption and is not shared with any third party, including our AI Providers, except the appointees you name (see Other Sunset Users above). We do not hold decryption keys for Vault data and cannot access its contents.

We do not sell your personal information to any third party.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect the security, confidentiality, and integrity of your personal information. These safeguards include encryption of data in transit, encryption at rest of our database, your Vault files and our backups, access controls, and regular security assessments.

What we process: Our estate planning tools collect names, contact information, family relationships, and asset descriptions to assist in filling document templates. Our forms do not ask for Social Security numbers or financial account credentials (such as online banking passwords). Our forms limit bank account numbers to their last 4 digits; investment account and life insurance policy numbers are stored as you enter them (full or partial) so your documents can identify those assets. Documents you upload for import, which may show full account or ID numbers, are deleted right after the information is extracted (see Section 4). However, because our Services require account credentials (email address and password), the New York SHIELD Act applies to our platform, and we maintain safeguards accordingly.

Vault (Zero-Knowledge Encryption): Our Vault feature uses zero-knowledge encryption — your Vault data is encrypted on your device before transmission, and we do not hold the decryption keys. Due to our zero-knowledge architecture, we do not have the technical ability to access or decrypt the contents of your Vault. This means we cannot produce Vault contents for any purpose, including in response to valid legal process. We will comply with all valid legal requests to the fullest extent technically possible, including by providing any non-encrypted metadata in our possession. Vault data stored in our backup archives remains encrypted with your keys and is inaccessible to us. File names, file types, sizes and categories of your Vault files are not encrypted, so we can list your files for you; avoid putting sensitive details in file names.

In the event of a data breach involving your personal information, we will notify you and applicable authorities within 30 days of discovery, as required by the New York SHIELD Act.

Our estate planning questionnaires may collect health-related information for healthcare proxy and directive purposes. Such medical information is treated as private information under the SHIELD Act and is subject to the same security and notification obligations.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. Cookies and Tracking

We use cookies to operate our website and application. The types of cookies we use include:

Essential Cookies: Required for core site functionality such as authentication, navigation, and security.
Analytics Cookies: Help us understand how visitors interact with our website and application, including which pages are visited, how long users spend on each page, and how they navigate between sections. This data is used to improve our Services.
Advertising Cookies: Set by Google Ads on our marketing website to measure the effectiveness of our advertising campaigns. They help us see whether visitors who come from our ads go on to click a link to our app. We do not use these cookies for remarketing or interest-based advertising.

We do not sell or rent cookie data. Google (for Google Ads conversion tracking on our marketing website) and Microsoft (for Clarity in our web app) receive data from their cookies and process it under their own privacy policies, as described in Section 5.

You can control or delete cookies through your browser settings. Disabling cookies may affect the functionality of our Services.

8. Data Retention

Estate planning documents are intended to remain valid and accessible for decades. We retain your personal information to ensure long-term document recovery and continuity. For full details, please see our Data Retention Policy.

Key points:

Account Data: Retained for the duration of your active account. When you delete your account in the app, it is permanently deleted from active systems 30 days after you confirm (our daily deletion run completes it within one day after that date); until then you can cancel by signing in again and choosing Cancel deletion. Upon a valid deletion request by email, your data is removed from active systems within 30 days.
Analytics Data: Usage events already sent to PostHog (linked to your user ID, name and email address) and Clarity session replays are not deleted when you delete your account; they are kept under the retention settings of those services. You can ask us at hi@planyoursunset.com to delete your PostHog data.
Security and Billing Records: Records of security events (such as sign-ins, Vault access and account deletion), identified only by account and record IDs, are kept for five years for security and legal purposes, including after your account is deleted. Payment and billing records stay with our payment processor, Stripe, which keeps them under its own retention policies and legal obligations.
Chat Reports and Blocks: If you report a message, we keep a copy of the reported text to review it; that copy and any comment you added are removed 30 days after the report is resolved, and the report record itself is deleted 180 days after resolution. If someone reports one of your messages, a copy of it is kept for review even if you delete the message or your account, until 30 days after the report is resolved. The list of people you have blocked is kept until you unblock them or delete your account.
Backup Archives: Backup archives cannot be selectively modified without compromising backup integrity and disaster recovery capabilities. Backup archives are retained for up to 5 years and then automatically deleted. If a backup is restored, any previously deleted data will be identified and re-deleted before restored data is made available to users.
Third-Party Data: Personal information you provide about other individuals (beneficiaries, executors, etc.) follows the same retention schedule as your account data.
AI Interaction Logs: Retained for the duration of your active account to maintain conversation history.
Documents Uploaded for Import: The files are deleted as soon as the information in them has been extracted, or after a failed extraction, and any file left by a failed import is deleted automatically within 5 days of upload; the information extracted from them is retained with your account data.
Verification Recordings: Video recordings from attorney verification calls are retained for as long as the professional’s account is active and are used solely for verification audit purposes. After account termination or deletion, recordings may be retained for up to 5 years for regulatory and audit purposes. You may request earlier deletion by contacting us at hi@planyoursunset.com — we will delete from active systems within 30 days of your request (subject to backup retention).

For details on backup archive retention, deletion procedures, and the technical limitations of selective backup deletion, please see our Data Retention Policy.

9. Your Rights

A. Registered Users

Depending on your location, you have the right to:

Access the personal data we hold about you.
Correct inaccuracies.
Request deletion of your data.
Opt out of marketing emails.
Turn AI processing off (Settings, or Profile in the iOS app).

You can delete your account yourself: in the web app go to Settings → Delete account, in the iOS app go to Profile → Delete Account. Your account is then scheduled for permanent deletion 30 days after you confirm. During those 30 days you are signed out on all devices, your subscription will not renew, and you can cancel the deletion at any time by signing in again and choosing Cancel deletion, or with the link in the confirmation email. We email you a reminder 7 days and 1 day before the date, and a confirmation once your account is deleted. Deleting your account removes your profile, estate documents and assets, your vault and its files, chats you created (for all of their members), and your messages in other people’s chats. Likewise, a chat you are in is deleted, with your messages in it, when the member who created it deletes their account.

To exercise any of these rights by email, write to hi@planyoursunset.com.

B. Third-Party Data Subjects (Non-Users)

If you believe that a Plan Your Sunset user has provided your personal information through our platform, you have the right to:

Request confirmation of whether we hold your personal information.
Access the personal data we hold about you.
Request correction of inaccuracies.
Request deletion of your personal information.

To exercise these rights, please email us at hi@planyoursunset.com with sufficient information to identify you and the user who may have provided your data. We will respond within 30 days.

In the event of a data breach involving your personal information, we will notify you in accordance with applicable law, even if you are not a registered user of our platform.

10. California Residents

Our Services are not currently available to residents of the State of California. Our platform has not been adapted for compliance with the California Consumer Privacy Act (CCPA) or the California Privacy Rights Act (CPRA). If you are a California resident, you are not authorized to use our Services. Any use of our Services by California residents is at their own risk and in violation of our Terms of Service.

We intend to extend our Services to California residents in the future and will update this Privacy Policy accordingly.

11. Children’s Privacy

Our Services are not intended for individuals under 18. We do not knowingly collect personal information from children under the age of 13. If we learn that we have collected personal information from a child under 13, we will promptly delete that information. If you believe we have collected information from a child under 13, please contact us at hi@planyoursunset.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated Privacy Policy on our website with a revised “Last Updated” date. Your continued use of our Services after an updated Privacy Policy is posted constitutes your acceptance of the changes. If you do not agree, you may stop using the Services.