Privacy Statement

This statement applies to personal information collected through:

• the Platform (including the eligibility quiz, dashboard, and document uploads);
• email and other communications you have with us;
• payment transactions made via the Platform;
• automated processes (including AI-driven document extraction and court form preparation) operating on data you provide.

It does not apply to personal information you provide directly to Your Succession Lawyers (a separate legal entity), to a Referral Partner, or to any other third party. Their handling of your personal information is governed by their own privacy policies.

We collect personal information that is necessary for one or more of our functions or activities. The categories below describe what we typically collect.

2.1 Information about you (the executor or administrator)

• full name, date of birth (where required by the court);
• email address, phone number;
• residential and/or postal address;
• occupation (required for sworn court documents);
• any identifiers you provide for authentication;
• payment information (handled directly by Stripe - see section 5);
• communication history with us (support emails, chat, call notes if applicable).

2.2 Information about the deceased

• full legal name, any aliases or alternative spellings;
• date of birth and date of death;
• last known residential address and place of death;
• cause of death (where stated on the Death Certificate);
• copies of the Death Certificate and other identity documents.

2.3 Information about the estate

• contents of the Will (testator details, executor names, witness names, beneficiary clauses);
• assets and their estimated values (real estate, bank accounts, shares, superannuation, vehicles, personal effects);
• liabilities (mortgages, loans, debts);
• court reference numbers, filings, requisitions, and the Grant of Probate or Letters of Administration once issued.

2.4 Information about beneficiaries and other third parties

• full names, relationships, and contact details (if known) of beneficiaries named in the Will or eligible to take under intestacy rules;
• entitlement details (e.g. "50% of residuary estate", "the property at 123 Main Street");
• where applicable, information about persons who have made or may make claims against the estate.

2.5 Technical information

• IP address, browser type, device identifiers;
• pages visited and actions taken on the Platform;
• session and cookie data (see section 9);
• automated logs of system errors and AI-driven processing steps.

2.6 Sensitive information

Some information collected through the Platform constitutes sensitive information under the Privacy Act, including health information (for example, cause of death recorded on the Death Certificate). We collect this only where it is reasonably necessary for the preparation of a probate application and only with your consent (which you provide by uploading the Death Certificate or entering this information into the Platform).

We collect personal information:

• directly from you - when you sign up, complete the Threshold Eligibility Test, upload documents, or contact us;
• from documents you upload - using automated systems (including artificial intelligence) to extract structured fields from your Death Certificate, Will, and supporting paperwork (see section 6 for details on AI processing);
• from third parties - only where you have authorised it (for example, address autocomplete data from Google Maps if you use the property address suggestion feature);
• from the NSW Supreme Court - where the court generates a Grant of Probate, requisition, or other correspondence about your matter.

You are not required to provide all of this information, but if you withhold information that is material to your application (or which the court requires) we may not be able to assist you, and your application may be delayed, rejected, or require referral to Your Succession Lawyers or another legal practitioner.

We use your personal information to:

• assess whether your matter is suitable for the Platform's self-assisted process (the Threshold Eligibility Test);
• prepare and lodge your probate application with the NSW Supreme Court Online Registry;
• generate court documents including the Summons, Affidavit, and Inventory of Property;
• communicate with you about the status of your matter (welcome, payment receipt, affidavit-ready, requisition reminders, Grant issued, etc.);
• process payments and disbursements;
• where consented under the Terms and Conditions, refer you to Referral Partners who may assist with the administration of the estate;
• comply with legal obligations including court rules, taxation obligations, and applicable record-keeping requirements;
• improve the Platform, including by analysing aggregated (de-identified) usage patterns and AI-extraction accuracy;
• detect and prevent fraud or misuse of the Platform.

We will not use your personal information for purposes other than those stated in this Privacy Statement without first obtaining your consent (or where another exception under the Privacy Act applies, such as a court order).

Several third-party service providers help us operate the Platform. Each is engaged under contract to handle personal information only as instructed by us and only for the purposes set out in this Privacy Statement. The table below identifies our principal disclosees and the country in which their primary processing occurs.

5.1 Cross-border disclosures (APP 8)

Several of the recipients above process personal information outside Australia. By using the Platform you consent to the disclosure of your personal information to recipients located in:

• the United States (Vercel edge delivery, Stripe parent operations, Clerk, Anthropic, Twilio SendGrid, Google);
• the European Union - Germany (Sentry).

We have taken reasonable steps to ensure that each overseas recipient handles your personal information in a manner consistent with the Australian Privacy Principles. This includes contractual data-processing terms with each provider, technical safeguards (encryption in transit and at rest), and minimisation (we send only what each provider needs to perform its function).

You should be aware that, in some cases, foreign privacy laws may not provide the same protection as the Australian Privacy Act, and you may have limited recourse for breaches that occur overseas. By choosing to use the Platform you accept this risk.

If you do not wish your information to be transferred overseas, you should not use the Platform; please instead engage Your Succession Lawyers or another legal practitioner directly to handle your matter.

5.2 Disclosure to courts, regulators, and law enforcement

We may disclose personal information without your consent where required by law, including:

• in compliance with a court order, subpoena, or warrant;
• in response to a request by a regulatory authority (including the Office of the Australian Information Commissioner);
• to prevent or investigate suspected fraud or unlawful activity;
• to protect the rights, safety, or property of any person.

The Platform uses automated systems, including artificial intelligence (AI) provided by Anthropic, PBC, to:

• extract structured data fields from documents you upload (Death Certificate and Will);
• assist with completing the NSW Probate Online application form by interpreting on-screen prompts and selecting appropriate responses based on the data you have provided.

When AI processing occurs, the relevant document images and extracted text are transmitted to Anthropic's services in the United States. Anthropic processes the data only to perform the requested task and, under our contract with them, does not retain your data for model training.

You acknowledge and agree that:

• AI-driven extraction is not infallible. We display the extracted fields back to you for review and confirmation before they are used in any court document. You are responsible for satisfying yourself that the extracted data is correct.
• The Platform retains, in our systems within Australia, copies of the prompts sent to AI services and the responses returned - this is necessary for debugging, accuracy improvement, and audit purposes, and is bounded by our retention policy (section 8).
• Where you believe an automated extraction or decision has produced an outcome you wish to challenge, you may contact us at info@your-succession.com to request human review.

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. These steps include:

• Encryption in transit - all data transmitted between your browser and our servers, and between our servers and our third-party providers, is encrypted using industry-standard TLS;
• Encryption at rest - Supabase encrypts all stored data and uploaded files at rest using AES-256;
• Access control - internal access to your data is restricted to authorised personnel and is gated by individual authentication. Administrative actions on your data are logged;
• Network controls - our backend services are not directly accessible from the public internet except via our front-door endpoints, and our infrastructure is configured with the principle of least privilege;
• PII scrubbing in logs - automated logs and error reports are programmatically scrubbed of identifying information before storage or transmission to error-monitoring services;
• Regular review - we periodically review our security controls and our supplier list.

No security regime is perfect. If you believe your account has been compromised, please contact us immediately at info@your-succession.com and reset your password.

In the event of an eligible data breach (as that term is defined in Part IIIC of the Privacy Act), we will assess the breach within 30 days and, if required by law, notify affected individuals and the Office of the Australian Information Commissioner ("OAIC").

We retain personal information only for as long as is reasonably necessary for the purposes for which it was collected and as required by law.

After the retention period expires, we will destroy or de-identify the personal information unless we are required by law to retain it for a longer period.

You may at any time request the early destruction or de-identification of your personal information by contacting us at the address in section 12. We will assess each such request having regard to our legal obligations, the status of any active matter, and the interests of any third parties (including beneficiaries and the court).

The Platform uses cookies and similar technologies for:

• session management (keeping you logged in);
• remembering your preferences;
• security (detecting and preventing fraudulent sign-ins);
• aggregated, de-identified analytics about how the Platform is used.

We do not use third-party advertising cookies and we do not sell your personal information to advertisers.

You may disable cookies through your browser settings, but doing so may prevent the Platform from functioning correctly (you will not be able to remain signed in).

Under the Privacy Act, you have the following rights in relation to your personal information:

10.1 Access (APP 12)

You may request a copy of the personal information we hold about you. We will respond to such requests within a reasonable time, ordinarily within 30 days. We may charge a reasonable fee for substantial requests.

10.2 Correction (APP 13)

If you believe any of the information we hold about you is inaccurate, out of date, incomplete, or misleading, you may request that we correct it. If we agree, we will correct the information free of charge. If we disagree, we will explain our reasons in writing and, on request, will associate a statement of your view with the information.

10.3 Withdraw consent

You may withdraw consent to certain optional uses of your information at any time. In particular:

• Marketing communications - every marketing email contains an unsubscribe link.
• Referral Partner disclosures - email info@your-succession.com to opt out (per the Terms and Conditions section 6.3).

Note: withdrawing consent will not affect disclosures already made prior to receipt of your request, and may limit our ability to continue providing some Platform services.

10.4 Lodge a complaint

If you believe we have breached the Australian Privacy Principles, you may complain in writing to us first using the contact details in section 12. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Office of the Australian Information Commissioner
GPO Box 5288, Sydney NSW 2001
Phone: 1300 363 992
Web: oaic.gov.au

We may update this Privacy Statement from time to time. The "Effective Date" at the top of this document indicates when it was last revised. Material changes will be notified to you via email and/or via a notice on the Platform.

Your continued use of the Platform following the effective date of a revised Privacy Statement constitutes acceptance of the changes. If you do not agree to the changes, you must stop using the Platform.

Previous versions of this Privacy Statement are retained internally and are available on request.

If you have questions about this Privacy Statement, wish to exercise any of your rights under section 10, or have a privacy concern, please contact:

We will respond to your enquiry within a reasonable time, ordinarily within 30 days.