Privacy Policy

Last updated:

Jul 16, 2026

ASSETLY PRIVACY POLICY

Last Updated: July 16, 2026

This Privacy Policy explains how Assetly (“Assetly,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with the Assetly service, which lets you store financial and legacy information, designate Recipients, and configure automated delivery of that information based on an inactivity trigger. This Policy applies to users in the United States, India, Canada, the United Arab Emirates, and elsewhere, and Section 7 describes rights specific to each of those jurisdictions.

1. Information We Collect

We collect information to provide the Service and improve it over time. The types of data we collect include:

a. Information You Provide

  • Account Information: Name, email address, password, and other details provided during sign-up.

  • Legacy and Financial Content: Information about financial accounts, digital assets, documents, notes, credentials, and other content you choose to store in your Assetly vault (“Content”).

  • Recipient Information: Names, contact details, and relationship information for the people you designate to receive Content (“Recipients”). If you provide information about a Recipient, you confirm you have the right to share it with us for this purpose.

  • Billing Information: Payment details such as card numbers and billing addresses, processed securely via our payment partners. Assetly does not itself store full card numbers.

  • Communications: When you contact us or use chat/support, we collect your message content and contact details.

b. Information We Automatically Collect

  • Usage Data: How you use the app — features accessed, time spent, and pages visited.

  • Device Information: Browser type, IP address, operating system, and device identifiers.

  • Cookies & Tracking: We use cookies, web beacons, and analytics tools to understand user behavior and improve the platform.

c. Information From Third Parties

We may receive limited data from payment processors, analytics providers, and, if you connect them, third-party integrations. We may also receive information from a Recipient or a person acting on their behalf when they interact with content delivered through the Service.

2. How We Use Your Information

We use collected information to:

  • Provide, operate, and maintain the Service, including storing and encrypting your Content.

  • Operate the inactivity-based delivery feature described in Section 3.

  • Power AI-assisted features that help you organize and enter Content; these features may process your Content through third-party AI service providers under contractual confidentiality terms.

  • Improve performance, reliability, and user experience.

  • Process payments and send invoices.

  • Respond to support requests and inquiries.

  • Send product updates, security alerts, and, where you have not opted out, promotional messages.

  • Analyze usage trends and product performance.

  • Comply with legal obligations and enforce our Terms of Service.

Our legal basis for these uses is, depending on your location and the activity: your consent, the necessity of the processing to perform our contract with you, our legitimate interest in operating and securing the Service, or compliance with a legal obligation.

3. Automated Decision-Making: The Inactivity Trigger

A core feature of the Service is automated: if you do not interact with your account for a period you configure, the Service treats this as a signal to notify and eventually grant Recipients access to designated Content (the “Inactivity Trigger”). This is an automated process with a significant effect on you and on your Recipients, so we want to be clear about how it works and its limits.

  • The Inactivity Trigger is based on account activity signals you configure, such as login history and responses to check-in prompts, and is not a verification of your actual life, health, or capacity status.

  • Where required by applicable law, you may request that a decision to release Content be reviewed, request more information about the logic involved, or contest an automated release, by contacting us before or, where release has not yet completed, during the notice period preceding release.

  • Because the Inactivity Trigger depends on settings you control and on technical systems that can fail, we cannot guarantee it will activate accurately, on time, or at all. See our Terms of Service for the related liability disclaimers.

4. How We Share Your Information

We do not sell or rent your personal information. We may share information only in these limited cases:

  • Recipients You Designate: When the Inactivity Trigger activates, or you otherwise choose to share, the specific Content you have configured is disclosed to the Recipients you selected. This is a core, expected function of the Service, not a third-party disclosure of the kind described below.

  • Service Providers: With vendors who help us operate the Service, such as hosting, analytics, payment processing, and AI processing providers, bound by confidentiality and data-protection obligations.

  • Legal Compliance: When required by law, regulation, court order, or government request, including requests from courts or authorities in the United States, India, Canada, or the UAE.

  • Business Transfers: In case of a merger, acquisition, or sale of assets, user data may be part of the transaction, subject to continued protection under a policy at least as protective as this one.

  • Your Consent: When you explicitly authorize us to share your information.

All third parties with whom we share personal information are required to protect it and use it only for the intended purpose.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account or data at any time by contacting contact@assetly.life.

  • If the Inactivity Trigger activates and Content is released to Recipients, we retain a record of that release, for example timestamps and delivery logs, for a limited period to resolve disputes and meet legal obligations, even after your account is closed.

  • Where we are notified, or reasonably determine, that an account holder has died, we will retain and handle remaining Content in accordance with your account settings, applicable law, and, where relevant, instructions from a verified legal representative of your estate.

  • We may retain limited information beyond account closure to comply with legal obligations, resolve disputes, and enforce our agreements.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption of data in transit (TLS/HTTPS), access controls, authentication mechanisms, and secure hosting infrastructure. Assetly is designed around a zero-knowledge, end-to-end encryption architecture for Content stored in your vault, meaning Content is encrypted using keys derived from information only you control, such as your master password.

This design has an important consequence: in most configurations, Assetly cannot decrypt your Content and cannot recover it for you if you lose your master password, recovery key, or other access credential. Loss of these credentials may result in permanent, unrecoverable loss of access to your Content, including for your designated Recipients. You are responsible for safeguarding your credentials and any recovery mechanism you set up.

While we work hard to safeguard your data, no online system is completely secure, and we cannot guarantee that unauthorized access, loss, or disclosure will never occur. If a security incident affects your personal information, we will notify you and, where legally required, the relevant regulator, such as under U.S. state breach-notification laws, India’s CERT-In reporting requirements, Canada’s PIPEDA breach-reporting obligations, or the UAE’s Personal Data Protection Law, within the timeframe required by applicable law.

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal information, and to withdraw consent to marketing. To exercise these rights generally, contact us at contact@assetly.life; we aim to respond within the timeframe required by applicable law.

a. United States

If you are a California resident or a resident of another state with a comprehensive privacy law, you have the right to know what personal information we collect, to request access to or deletion of it, to correct inaccurate information, and to opt out of the sale or sharing of personal information (Assetly does not sell personal information) and of certain targeted advertising. You may exercise these rights by contacting us; we will not discriminate against you for doing so.

b. India

Under the Digital Personal Data Protection Act, 2023, you have the right to access a summary of your personal data and processing activities, to correction and erasure of your personal data, to grievance redressal, and to withdraw consent at any time. You also have the right to nominate another individual to exercise your rights on your behalf in the event of your death or incapacity, which you may configure in your account settings. Our Grievance Officer for India can be reached at grievance@assetly.life.

c. Canada

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, you have the right to access your personal information, request corrections, and file a complaint with us or with the Office of the Privacy Commissioner of Canada if you believe we have not handled your information appropriately.

d. United Arab Emirates

Under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, you have the right to access, correct, erase, and restrict the processing of your personal data, to object to certain processing, and to lodge a complaint with the UAE Data Office.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Keep you signed in.

  • Analyze platform usage and performance.

  • Remember preferences and improve personalization.

You can manage or disable cookies through your browser settings, but some features may not function properly if you do so.

9. Third-Party Services

Assetly may link to or integrate with third-party apps, payment processors, or websites. We are not responsible for the privacy practices or content of those third parties. Please review their privacy policies before using their services.

10. Children’s Privacy

Given the financial and legacy-planning nature of the Service, Assetly is not directed to, and may not be used by, individuals under 18 years of age. We do not knowingly collect personal data from minors. If we learn that we have, we will promptly delete it.

11. International Data Transfers

Assetly and its service providers may process and store information in countries other than the one in which you reside, including the United States. Where we transfer personal information across borders, we use appropriate safeguards required by applicable law, such as standard contractual clauses, to ensure your information continues to receive an appropriate level of protection, consistent with the requirements of the U.S. state privacy laws, India’s Digital Personal Data Protection Act, 2023, Canada’s PIPEDA, and the UAE’s Federal Decree-Law No. 45 of 2021.

12. Updates to This Policy

We may update this Privacy Policy periodically to reflect new features, laws, or security updates. The latest version will always be available on this page with the effective date updated above. Where changes are material, we will provide additional notice, such as by email or in-app notification.

13. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, contact us at: contact@assetly.life. Users in India may also contact our Grievance Officer at contact@assetly.life.

This document is a template prepared for planning purposes and does not constitute legal advice. It should be reviewed and adapted by a licensed attorney and, for India, a designated Grievance Officer or Data Protection Officer as required, in each jurisdiction in which Assetly operates before publication.