How we protect your information

Getting into your account

• Two-step sign-in with an authenticator app, plus one-time recovery codes.
• We check new passwords against lists of passwords known to have been exposed in other companies' breaches.
• You can see every device your account has been used from, remove any of them, and sign out everywhere from Settings.
• We email you when your account is used from a device we have not seen before.
• Before anything serious — deleting your account or creating a link that shares your plan — we ask you to confirm it's you again.

How your information is stored

• Everything is encrypted in transit (HTTPS) and encrypted at rest on our database.
• The most sensitive free-text fields — account notes, estate details, funeral wishes — get a second layer of encryption with keys held outside the database.
• We never store full bank or investment account numbers. Only the last four digits are kept, and we never ask for banking passwords.
• Estate documents default to location only: you record where the will or deed is kept — safe, bank, or lawyer — rather than uploading it. Uploading files is an opt-in you turn on yourself.
• Where your information lives. Our database, uploaded documents, and their backups are hosted on Amazon Web Services in the United States (Ohio region). Email delivery, AI processing of your questions and documents, and technical and error logs are also handled by providers outside Canada, in the United States and the European Union. We do not currently hold data in Canada. Information held outside Canada can be reached by the courts and authorities of those countries. We assess every provider, require contractual safeguards, and never allow your information to train third-party AI models. Full detail is in our Privacy Policy.

Who can see what

• Each household is walled off from every other household at the database level, not just in the app.
• Family members get the role you give them — owner, executor, contributor, or viewer — and only see what that role allows.
• Links you share expire quickly and can only be opened a limited number of times: up to 3 days and 5 opens for bank account cards, 14 days and 10 opens for plan summaries. Bank cards also require a PIN, which locks out after repeated wrong attempts.
• You are emailed the first time any share link is opened, and your household activity log records it.

How long we keep things

• Your plan information is kept while your account is open.
• Security and activity logs are kept for 365 days, then deleted automatically.
• Email delivery records are kept for 90 days.
• Expired share links and their PINs are purged nightly.
• Deleting your account removes your data from our live systems; backups age out on their own schedule.

Reporting a problem

If you believe you have found a security vulnerability, we want to hear from you. Write to security@eldridge-path.com. Our disclosure policy is published at /.well-known/security.txt. Please give us a reasonable window to fix the issue before making it public, and do not access another family's data while testing. We will not pursue legal action against researchers who follow that policy.

Privacy and Canadian law

Eldridge Path is subject to PIPEDA and Quebec's Law 25. Our privacy officer is reachable at privacy@eldridge-path.com. Full details on what we collect and why are in our Privacy Policy.