Privacy Policy

What AllSet is (important context)

AllSet is a personal organisation tool, not a legal service.

• We do not provide legal advice
• We do not validate or enforce legal documents
• We are not a law firm, executor, or trustee

You remain fully responsible for how you use the platform and the information stored in your vault.

Who controls your data

The data controller is:

Cyrasync LTDEmail: hello@allset.life

We are responsible for how your personal data is collected and used.

What data we collect

a) Information you provide

When you use AllSet, you may provide:

• Name and email address
• Account login credentials
• Personal data stored in your vault (e.g. financial, legal, medical, contacts)
• Uploaded documents (PDFs, images, scanned files)
• Trusted contact details (name, email)

b) Automatically collected data

We collect limited technical data such as:

• IP address
• Device and browser type
• Login activity
• Basic usage data (e.g. feature interactions)

c) Payment information

Payments are processed by Stripe.

• We do not store your full card details
• Stripe processes payments securely on our behalf

How we use your data

We use your data to:

• Provide and operate the AllSet platform
• Store and organise your vault information
• Enable access for trusted contacts (when you choose)
• Send essential service emails (account, security, access notifications)
• Maintain platform security and prevent misuse
• Improve product performance and reliability

We do not sell or rent your personal data.

Trusted contacts & secret key access

AllSet allows you to grant access to your vault via a secret key.

Key points:

• Access is fully controlled by you
• You can revoke access at any time
• Generating a new key invalidates the previous one
• Access is read-only

We log access events (e.g. time and IP address) so you can see when your vault has been accessed.

Where your data is stored

Your data is stored on secure servers located in the European Union (EU).

We use trusted infrastructure providers, including:

• Amazon Web Services (hosting & storage)
• Supabase (database & authentication)

Data is not transferred outside the EU unless required for essential service providers, and appropriate safeguards are in place.

How we protect your data

We use industry-standard security measures, including:

• Encryption in transit (TLS)
• Encryption at rest (AES-256)
• Secure authentication and optional multi-factor authentication
• Role-based access controls
• Audit logging of sensitive actions

While no system is completely secure, we take all reasonable steps to protect your data.

How long we keep your data

We keep your data for as long as your account is active.

If you delete your account:

• Your vault data is permanently deleted
• Uploaded documents are removed from storage
• Your account is erased from our systems

We may retain minimal logs where required for legal or security purposes.

Your rights (GDPR)

As your data is stored in the EU, you have rights under GDPR, including:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Request a copy of your data

To exercise these rights, contact: hello@allset.life

Third-party services

We use a limited number of trusted providers to operate AllSet:

• Stripe — payments
• Supabase — authentication & database
• Amazon Web Services — infrastructure & storage
• Resend — transactional emails

These providers process data only as necessary to deliver their services.

Cookies

We use minimal cookies to:

• Keep you logged in
• Maintain security
• Ensure the platform functions correctly

You will be asked to accept or decline cookies when you visit the site.

Children's privacy

AllSet is not intended for individuals under 18. We do not knowingly collect personal data from children.

Changes to this policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via email or within the app.

Contact

If you have any questions about this policy:

Cyrasync LTD
Email: hello@allset.life
Website: https://allset.life