Privacy Policy

At One Step After, Inc. ("we," "us," "our"), we are committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our online platform and website (the "Service"). Please read this policy carefully.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with our practices, you may not use the Service. This Privacy Policy is incorporated by reference into our Terms of Service.

1. Information We Collect

We collect information you provide, information about how you use the platform, and certain information automatically from your device.

1.1 Information You Provide

Account and contact data. When you create an account or make a purchase, we collect your name, email address, billing address, phone number, payment information, and account credentials.

Estate profile and asset information. We collect estate-related data you enter into the Service, including information about assets, beneficiaries, documents, and other estate matters. We process this information solely to deliver the Service to you and do not access or review specific estate profile information except as necessary to operate and support the Service.

Information about third parties. If you input personal information about other individuals (such as a spouse, family member, beneficiary, or Collaborator), you represent and warrant that you have the authority or consent of those individuals to do so, and that such collection and processing complies with applicable law.

Communications and feedback. We may collect personal information when you contact us for support, provide feedback, or otherwise communicate with us, including records of those communications.

Photographs and uploads. If you upload images or other files to the Service, we store this content as part of your account.

1.2 Information Collected Automatically

Usage data. We automatically collect information about your device and how you interact with the Service, including IP address, browser type, device type, pages visited, and interaction data.

Communication interaction data. We or our service providers may collect information about your interactions with our emails and other communications, such as whether you open or click on emails. We may use pixel tags (also known as clear GIFs or web beacons), which may be embedded invisibly in our emails, to collect this information.

Session and interaction recording. We may use session-replay or similar technologies that record users’ interactions with the Service, including clicks, mouse movements, scrolls, and keystrokes, to help us diagnose usability issues and improve the Service.

Cookies and similar technologies. We and our service providers use cookies, web beacons, pixels, local shared objects, and similar technologies to collect information about your use of the Service, recognize your visit, track your interactions, and improve your experience. See Section 8 for more detail.

2. How We Use Your Information

We use your information to operate the Service, communicate with you, improve our platform, and with appropriate disclosure for marketing and partner referrals.

2.1 Service Delivery and Operations

We use your information to provide and operate the Service, create and manage your account, process transactions, resolve billing matters, authenticate your identity, provide customer support, and communicate important service-related notices.

2.2 Aggregated and De-Identified Data

We may derive, collect, or generate de-identified and/or aggregated data based on your use of the Service, including data derived from the content you submit. This de-identified data does not identify you personally. One Step After owns all such de-identified and aggregated data and may use it without restriction, including for product development, research, analytics, and marketing purposes.

2.3 Automated Features and AI

The Service may include AI-assisted features or other automated tools, such as Lysi, that use the information you provide to generate suggestions, summaries, guidance, or next steps. To produce a relevant response, information from your estate profile may be transmitted to and processed by third-party AI providers acting on our behalf under agreements that restrict their use of that information. Your information is not used to train third-party AI models: model training is disabled with our AI provider, and we configure our processing systems not to retain request logs. You control which areas of your estate profile these features may access, and you are responsible for evaluating and acting on any output. Certain laws may provide you with the right to object to the automated processing of your personal information; please contact us to exercise that right.

2.4 Marketing and Partner Referrals

We may use information about your use of the Service including the types of features you use and general characteristics of the estate information you provide to present you with offers, recommendations, or information about related products and services, including from third-party partners. This personalization is designed to surface resources relevant to your situation.

Disclosure of financial relationships: One Step After may have financial relationships with third-party service providers or affiliates whose products or services are presented through the Platform. We may receive compensation if you choose to purchase from or engage with these partners. Such compensation may influence which partners are featured.

You may opt out of marketing and non-essential partner communications at any time. See Section 7 for your choices.

2.5 Research and Improvement

We may analyze how the Service is used to improve and develop our products and generate insights. Where we use information for research, model development, or statistics, we use de-identified or aggregated data that does not identify you. We do not use the contents of your estate profile to train AI models.

2.6 Compliance and Protection

We may use your information to protect against misuse of the Service, comply with legal and regulatory requirements, protect the rights, property, and safety of One Step After and others, prevent fraudulent or illegal activity, and enforce our Terms of Service.

3. How We Share Your Information

We do not sell or rent your personal information. We share it only as described below.

Service providers. We share information with trusted third-party service providers who perform functions on our behalf, such as payment processing, data hosting, analytics, and email delivery. Service providers are required to protect your information consistent with this Privacy Policy.

Legal obligations. We may disclose your information if required by law, such as in response to a subpoena, court order, or other applicable legal process, or to protect the rights, property, or safety of One Step After or others.

Business transfers. In the event of a merger, acquisition, financing, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity.

With your consent. We may share your information for other purposes with your explicit consent.

We do not share personal information collected through any SMS short code program with third parties for their own marketing purposes.

4. Data Hosting and Security

We take reasonable steps to protect your data. No system is completely secure.

We implement security measures designed to maintain the confidentiality, integrity, and availability of your data, including encryption of data in transit and at rest. Certain sensitive identifiers, such as tax identification numbers and the last four digits of account numbers, receive an additional layer of AES-256 field-level encryption using a key assigned to your estate. Access to your records is further restricted by row-level access controls. The cloud infrastructure we build on holds SOC 2 Type II certification; that certification is held by our infrastructure providers rather than by One Step After.

The Service is hosted on third-party cloud infrastructure located in the United States, and access to production systems is limited to authorized personnel. Professional (firm) accounts are required to use two-factor authentication.

While we strive to protect your data, no system is completely secure. By using the Service, you acknowledge that One Step After cannot guarantee absolute protection of your data. In the event of a data breach, we will take appropriate steps to mitigate harm and notify you as required by applicable law. One Step After shall not be liable for any unauthorized access, loss, alteration, or disclosure of your data that occurs despite our reasonable security measures.

We encourage you to use strong, unique passwords and to keep your login credentials confidential.

5. Data Retention and Account Deletion

We retain your data as long as needed to operate the Service and meet our legal obligations. When your account closes, we’ll offer a data export before deleting your profile.

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, exercise or defend legal claims, and prevent fraudulent or abusive activity.

There may be occasions where we are unable to fully delete, anonymize, or de-identify your personal information due to technical, legal, regulatory, or other operational reasons. Where this is the case, we will take reasonable measures to securely isolate your personal information from any further processing until deletion is possible.

Upon cancellation or closure of your account unless terminated due to suspected or confirmed unauthorized access, fraud, or illegal activity we will:

1. Make available an export of the information you entered into your estate profile. You generate this export yourself, while logged in, from the Settings area of the application; and

2. Delete your account and all associated estate profile data, including documents you uploaded.

The export summarizes the information in your estate profile and will not include images, attachments, or other non-text assets. Account deletion is immediate and cannot be undone, so you should generate and download your export first. If your account is terminated due to unauthorized access, fraud, or illegal activity, we may withhold the export at our discretion.

Certain limited records are retained after deletion because we are required or permitted to keep them: records of your acceptance of our Terms and Privacy Policy, transaction records held by our payment processor, and records of transactional emails we sent you. These records do not include the contents of your estate profile.

6. Your Rights and Choices

You have rights over your personal information. Here’s how to exercise them.

Access and correction. You may access and update your personal information through your account settings.

Deletion. You may request that we delete your personal information. Please note that certain information may need to be retained for legal, regulatory, or operational reasons as described in Section 5.

Opt out of marketing communications. You may opt out of marketing emails by following the unsubscribe instructions in any marketing email, or by adjusting your communication preferences in your account settings, or by contacting us at legal@onestepafter.com. If you receive marketing text messages from us, you may opt out by replying STOP.

To help protect your privacy and the security of your information, we may ask you to verify your identity before we can fulfill a data rights request. If we cannot verify your identity, we may not be able to service your request until proper verification is provided.

Depending on where you live, you may have additional state- or country-specific rights with respect to your personal information. Please contact us for more information.

7. Communications

By creating an account, you consent to receive essential service communications from One Step After, including account notifications, service updates, and legal or policy notices. These communications cannot be opted out of while your account remains active.

You may opt out of marketing communications and non-essential partner communications at any time by following the unsubscribe instructions in any marketing email, adjusting your communication preferences in your account settings, or contacting us at legal@onestepafter.com.

8. Cookies and Tracking Technologies

We and our service providers use cookies, web beacons, pixel tags, local shared objects, and similar technologies (collectively "cookies") to collect information about your use of the Service, recognize your visit, track your interactions, and improve your experience.

You can control the use of cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of the Service.

9. Third-Party Links and Services

The Service may contain links to or integrations with third-party websites and services. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing any personal information.

One Step After may receive compensation from third parties for referrals or integrations, which may influence whether and how those services are presented within the Platform. See Section 2.4 for more information.

10. Children’s Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected personal information from someone under 18, we will take steps to delete it promptly.