1. Overview
SiraMint (we, us) respects your privacy. This policy describes personal data we process when you use our website and application, and the choices you have.
2. Information we collect
Account data: name, email address, phone number if provided, password hash, role, and organization membership.
Profile and KYC data: if you choose identity verification, we receive status and reference data from our verification partner. We do not store raw government ID images unless required for a feature you explicitly use and consent to.
Vault content: asset details, ownership records, documents, trust structures, approval history, messages you submit through forms, and audit logs generated by your activity.
Billing data: subscription status, transaction references, wallet balance events, and voucher redemptions. Payment card details are handled by payment processors where applicable, not stored in full on our servers.
Technical data: IP address, browser type, device information, pages viewed, and cookies needed for security and session management.
3. How we use information
- Provide, secure, and improve the SiraMint service
- Authenticate users and enforce permissions you set
- Process subscriptions, wallet top-ups, and firm billing
- Send transactional email such as invitations, approvals, password resets, and wellness checks you configure
- Respond to support requests and contact form messages
- Detect abuse, fraud, and security incidents
- Comply with legal obligations
4. Legal bases (where applicable)
Depending on your location, we rely on contract performance, legitimate interests in operating a secure platform, consent for optional features such as marketing email, and legal obligation where required.
5. Sharing
We do not sell your personal data. We share information only with:
- People you authorize: co-owners, family contacts, and firms you engage, according to permissions you set
- Service providers: hosting, email delivery, identity verification, payment processing, and analytics under contractual safeguards
- Legal requests: when required by law or to protect rights, safety, and integrity of the service
- Business transfers: in connection with a merger, acquisition, or asset sale, with notice where practical
6. Retention
We keep account and vault data while your account is active. If you close your account, we delete or anonymize personal data within a reasonable period, except where we must retain records for legal, tax, audit, or dispute resolution purposes.
7. Security
We use access controls, encryption in transit, monitoring, and least-privilege practices for staff systems. No online service can guarantee absolute security. You are responsible for protecting your password and reviewing who has access to your vault.
8. Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or export personal data, and to object to or restrict certain processing. Contact us through the contact page to submit a request. We may need to verify your identity before responding.
9. Cookies and similar technologies
We use essential cookies for login sessions and security. We do not use invasive third-party advertising cookies on the authenticated application. Public marketing pages may use basic analytics as configured by your deployment.
10. International transfers
Data may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.
11. Children
SiraMint is not directed at children under 16. We do not knowingly collect personal data from children. Contact us if you believe a child has provided data and we will take appropriate steps.
12. Changes
We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use after changes take effect means you accept the revised policy.
13. Contact
Privacy questions: use the contact form or the email address listed on our website.
14. Legacy planning data
Wellness settings: inactivity thresholds, vacation mode dates, and family contact details you configure for wellness notifications.
Legacy deputies: names, email addresses, and access tokens for people you designate as legacy deputies.
Wills and codicils: draft content, uploaded signed documents, and amendment history you store in your vault.
Legacy messages: personal messages and delivery preferences intended for release after verified death.
Farewell videos: when enabled, video files may be uploaded to Cloudinary or a similar media provider configured by your platform administrator. Those providers process files under their own privacy terms.
Legacy content remains private until release rules you configure are satisfied and death verification is completed according to platform procedures.