Table of Contents
Privacy Policy
Last Updated: October 23, 2025
Welcome to My Last Word LLC ("My Last Word," "we," "us," or "our"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website www.mylastword.net (the "Site") and related services (the "Service").
By using the Site, you agree to this Privacy Policy and our Terms of Service.
1. Who We Are
My Last Word LLC ("My Last Word," "we," "our," or "us") is a Nevada-based digital legacy platform designed to help individuals securely create, store, and distribute their final messages, wills, and estate documents. Our platform uses verified government data and blockchain technology to ensure that your information and last wishes are protected, authenticated, and delivered only when appropriate.
We operate as a document automation and storage service, not a law firm. Our mission is to simplify end-of-life communication and estate planning by combining encryption, verified death records, and blockchain notarization to ensure that your last word is never lost.
Our services are accessible through our website at www.mylastword.net and may include related mobile applications, APIs, and digital tools. All operations, hosting, and data storage comply with U.S. data protection laws and SOC 2 / ISO 27001 security standards.
2. Information We Collect
To provide secure and verified digital legacy services, My Last Word collects only the information necessary to create, verify, and deliver your documents and final messages. We never sell your data and only share it when required by law or to perform essential service functions.
A. Information You Provide to Us
When you use our platform, you may provide the following information voluntarily:
- Personal Identification Data: Full name, date of birth, email address, phone number, and mailing address.
- Identity Verification Data: Partial or full Social Security Number (used solely for verification through the Death Master File API).
- Account Credentials: Login details such as username, password, and security authentication factors.
- Payment Information: Credit or debit card details processed securely through PCI-DSS compliant third-party payment providers.
- Uploaded Content: Wills, estate documents, photos, videos, letters, or any "final messages" you upload for storage and posthumous delivery.
- Recipient Information: Names and contact details of heirs, beneficiaries, or other individuals designated to receive your content.
B. Information Automatically Collected
When you visit or interact with our website or apps, we automatically collect certain technical data to help secure and improve our platform, including:
- Device Information: Browser type, operating system, device identifiers, and hardware information.
- Usage Data: IP address, login activity, session duration, and navigation behavior on the platform.
- Cookies & Analytics: We use essential and analytical cookies to maintain session security, improve performance, and personalize user experience.
C. Information from Third Parties
To verify user status and maintain the integrity of our posthumous delivery system, we may securely collect or confirm limited information from trusted partners and official databases:
- Death Verification Data: Weekly encrypted API checks against the MicroBilt Death Master File Validation service, which confirms user status via Social Security Administration data.
- Blockchain Verification Records: Metadata created during blockchain notarization of your documents, containing transaction hashes but never revealing private content.
- Legal or Compliance Sources: If required, information may be validated through licensed notaries, attorneys, or government agencies to fulfill legal requirements for wills or trusts.
D. Sensitive Information
We recognize that your data may include sensitive personal and emotional content. All information—whether textual, visual, or recorded—is encrypted using AES-256 standards and stored securely on AWS servers within the United States.
We will never access or read your private "final messages," except for technical or legal reasons where required to maintain system functionality or comply with lawful requests.
3. How We Use Your Information
We use the information we collect solely to provide secure, verified, and personalized digital legacy services. My Last Word does not sell or trade personal data and limits data use to functions that enable the safe creation, storage, and distribution of your final materials.
A. To Provide and Maintain Our Services
We use your data to:
- Create and manage your My Last Word account.
- Generate and store digital wills, trusts, and final messages.
- Enable document uploads, secure storage, and recipient delivery.
- Verify your status through Death Master File validation and trigger posthumous message delivery upon confirmed death.
- Execute blockchain notarization for authenticity and tamper-proof verification.
B. To Ensure Security and Compliance
We process certain technical and personal data to:
- Authenticate user identity and protect against unauthorized access.
- Maintain platform integrity through multi-factor authentication (MFA), IP monitoring, and encryption.
- Comply with applicable U.S. privacy, estate, and electronic will laws, including the Uniform Electronic Wills Act.
- Conduct internal audits and legal reviews to ensure ongoing compliance with data protection regulations (e.g., SOC 2 / ISO 27001 frameworks).
C. To Communicate with You
We may contact you for purposes such as:
- Account notifications, updates, or password recovery.
- Confirming designated heirs or message recipients.
- Announcing important policy changes, feature updates, or system maintenance.
- Providing user support and responding to inquiries.
You can manage or opt out of most non-essential communications through your account settings or by contacting us directly at privacy@mylastword.net.
D. To Improve and Develop Our Platform
We analyze anonymized or aggregated usage data to:
- Identify performance issues and enhance security.
- Improve user experience, dashboard design, and app functionality.
- Develop new features, integrations, or estate automation tools.
No personally identifiable information (PII) is shared or analyzed for marketing purposes without your explicit consent.
E. To Fulfill Legal or Ethical Obligations
We may disclose certain information if required by:
- Court orders, subpoenas, or lawful government requests.
- Compliance investigations involving fraud, security incidents, or misuse of the platform.
- Estate execution or probate authorities, if legally necessary to fulfill your documented wishes.
4. Death Verification
One of the core features of My Last Word is its ability to securely and accurately determine when a user has passed away, so that final messages, documents, and digital wills can be released only at the right time — never prematurely, and never without verification.
A. How Verification Works
My Last Word uses a verified, automated system to confirm a user's death through official and secure sources.
- We perform weekly encrypted API checks against the MicroBilt Death Master File Validation service, which securely interfaces with the Social Security Administration's Death Master File (SSDI) database.
- The process compares encrypted Social Security Numbers of active users against national death records.
- Only a simple match/no-match confirmation is returned — we never receive or store any additional government data beyond this verification flag.
- When a match is confirmed, the user's account is automatically flagged as "Deceased – Pending Verification" until a second confirmation cycle completes to eliminate false positives.
B. Double Verification & Delay Safeguards
To prevent accidental or false activation:
- A two-step verification process runs before any messages or documents are released.
- The system waits for a minimum of seven (7) days between initial and secondary verification cycles.
- During this period, designated heirs or next-of-kin may be notified of a pending release for manual confirmation if enabled by the user's settings.
- If a false report or discrepancy is detected, the release is automatically paused pending manual review.
C. What Happens After Verified Death
Once verified, the system securely executes the user's pre-set release instructions:
- Encrypted "final messages," wills, and documents are decrypted and distributed to the designated recipients via secure email or private download links.
- Blockchain notarization records are cross-referenced to confirm authenticity and prevent tampering.
- A permanent audit log of the release is stored on the blockchain for transparency and legal proof.
D. Privacy & Data Protection
The verification process is read-only — My Last Word does not alter, submit, or modify any record in the SSDI database. All data transmitted during death verification:
- Is encrypted end-to-end (AES-256) both in transit and at rest.
- Is used solely for verification purposes and is not shared, sold, or reused for any other reason.
- Remains fully compliant with the U.S. Privacy Act, GLBA, and relevant federal data-handling laws.
E. User Consent
By using our services, you acknowledge and consent to the use of Death Master File Validation solely for the purpose of death verification and message release automation. This consent is a condition of service because it enables the secure and automatic operation of My Last Word's core functionality — ensuring that your final words are delivered only when appropriate and in full accordance with your intent.
5. Message Storage and Retention
My Last Word is designed to protect your information and preserve your final messages for as long as necessary to fulfill your intent — while minimizing unnecessary data storage. All documents, media, and metadata are encrypted, monitored, and subject to strict retention policies that balance security, privacy, and posthumous delivery integrity.
A. Secure Storage
- All user data — including wills, final messages, and attached media — is stored on encrypted AWS S3 servers within the United States.
- Files are encrypted using AES-256 encryption at rest and TLS 1.3 in transit.
- Message metadata (timestamps, recipients, and blockchain reference IDs) is stored separately from message content to prevent correlation or unauthorized access.
- Blockchain notarization records contain hash values only, never the message content itself, ensuring public verification without data exposure.
- Multi-factor authentication (MFA) and access logging are enforced across all administrator and system interfaces.
B. Retention Periods
Your stored materials remain encrypted and available under the following retention framework:
- Active Subscribers: All content remains stored and editable for as long as your subscription remains active.
- Lapsed or Cancelled Accounts: Upon cancellation or non-payment, your data will be retained securely for up to 12 months. During this grace period, we will preserve your materials to ensure they can still be released if a verified death occurs.
- Free Tier Users: We retain a single "last message" indefinitely unless the user deletes it manually.
- Verified Deceased Accounts: Once death verification and distribution are completed, all non-essential system data is archived and anonymized after 90 days. Audit logs and blockchain proofs remain permanently preserved for legal and authenticity verification.
C. User Control and Deletion
- You may download, edit, or permanently delete your stored content at any time through your account dashboard.
- Requests for complete account deletion can be made at privacy@mylastword.net; deletion will occur within 30 days, except where retention is required by law or pending estate execution.
- Deleted files are irreversibly wiped from active servers and backup cycles using certified data-destruction protocols (NIST 800-88 Rev. 1 standards).
D. Backups and Disaster Recovery
- Encrypted backups are created daily and stored in geographically separate data centers to ensure redundancy and business continuity.
- Backup files are encrypted using unique keys and are accessible only to authorized system engineers under dual-control procedures.
- Disaster-recovery drills are performed regularly to validate restoration integrity.
E. Limited Access Policy
No employee or contractor may view or access user content unless strictly necessary to resolve a verified technical or legal issue. All access is logged, reviewed, and subject to confidentiality agreements and disciplinary enforcement.
6. Legal Basis for Processing (GDPR-Style Transparency)
Although My Last Word LLC operates within the United States, we follow the privacy and transparency principles of the General Data Protection Regulation (GDPR) and similar international privacy frameworks to ensure that all users understand how and why their personal data is processed.
We process personal information only when one or more of the following lawful bases apply:
A. Contractual Necessity
We process your data when it is necessary to perform our agreement with you — specifically, to:
- Create and maintain your account;
- Store and deliver your final messages and documents;
- Verify your identity and death status; and
- Execute the digital release of your materials according to your instructions.
Without this processing, My Last Word cannot provide its core services.
B. Consent
We rely on your explicit consent to process certain types of data, including:
- Collection of your Social Security Number (for secure death verification);
- Storage of personal, sensitive, or emotional content (final messages, media, letters);
- Delivery of your materials to designated recipients after verified death.
You may withdraw consent at any time by updating your account settings or contacting privacy@mylastword.net, though this may disable some or all features.
C. Legitimate Interests
We may process limited data where necessary to pursue our legitimate interests, provided those interests do not override your rights or freedoms. This includes:
- Improving platform security, performance, and reliability;
- Preventing fraud, misuse, or unauthorized access;
- Conducting internal analytics to enhance user experience (with anonymized or aggregated data only).
D. Legal Obligations
We may process or disclose your data to comply with applicable laws, including:
- Valid court orders, subpoenas, or regulatory requests;
- State or federal estate-planning or privacy regulations;
- Recordkeeping and anti-fraud requirements.
E. Vital Interests and Posthumous Integrity
In limited cases, we may process data to protect your vital interests or to ensure the ethical and accurate delivery of your legacy after verified death. This includes retaining encryption keys and verification records necessary to execute your final wishes securely.
7. Sharing and Disclosure
My Last Word LLC treats your information and digital legacy materials as strictly confidential. We do not sell, trade, or rent user data under any circumstances. Information is shared only when necessary to operate the platform securely, fulfill your documented wishes, or comply with legal obligations.
A. Service Providers and Partners
We may share limited, encrypted data with carefully vetted third-party service providers who help us operate and maintain our platform. These include:
- Hosting and Storage Providers (e.g., AWS) – for encrypted data storage and redundancy.
- Authentication & Security Services (e.g., Auth0, Firebase) – to manage logins, MFA, and access control.
- Payment Processors – to securely handle billing and subscription payments under PCI-DSS compliance.
- Death Verification Services (MicroBilt Developer API) – to confirm user status via secure, read-only access to the Social Security Death Master File.
- Blockchain Infrastructure – to notarize document hashes for proof of authenticity, without revealing message content.
All service providers are bound by strict confidentiality, data protection, and non-use agreements, ensuring your data cannot be accessed or repurposed for any external use.
B. Designated Heirs and Recipients
We share your encrypted content only:
- After confirmed death verification through our double-confirmation process;
- With the specific individuals or entities you personally designate within your account settings;
- Through secure, time-limited access links or encrypted email delivery.
Recipients cannot view, modify, or access other users' content, and every transmission is logged on the blockchain for transparency.
C. Legal and Compliance Disclosures
We may disclose information if required by law or legal process, such as:
- In response to valid court orders, subpoenas, or warrants;
- To comply with estate settlement, probate, or trust administration requirements;
- To prevent or investigate fraud, cybercrime, or misuse of our platform;
- Where disclosure is necessary to protect the rights, property, or safety of My Last Word, its users, or the public.
Any such disclosure is limited strictly to what is legally required, and we will notify you or your legal representative when permitted by law.
D. Corporate Events
In the event of a merger, acquisition, restructuring, or sale of assets, we may transfer limited user data as part of the transaction, provided that:
- The receiving entity agrees to uphold equal or stronger privacy protections;
- You are notified in advance and given the opportunity to opt out or delete your data if applicable.
E. Anonymized and Aggregated Data
We may share non-identifiable, aggregated data for analytics, research, or platform improvement. This data cannot be used to identify individual users and never includes personal content, Social Security information, or message data.
8. Data Security
My Last Word LLC is built on a foundation of privacy, encryption, and trust. Protecting your personal information and digital legacy is our highest priority. We use industry-leading technologies and strict internal protocols to ensure your data remains confidential, secure, and tamper-proof throughout its lifecycle.
A. Encryption Standards
- All data is encrypted in transit and at rest using AES-256 encryption and TLS 1.3 secure communication protocols.
- Uploaded files, wills, and final messages are stored in encrypted form on Amazon Web Services (AWS S3), which meets SOC 2 Type II, ISO 27001, and FedRAMP compliance standards.
- Encryption keys are managed through a secure Key Management Service (KMS) with strict access control and periodic rotation.
- Sensitive identifiers (such as Social Security Numbers) are further hashed and salted before use in death verification API calls.
B. Multi-Layer Access Protection
- Every user account is protected by multi-factor authentication (MFA) and session-level security tokens.
- Administrative and system-level access requires dual authorization and is logged and audited regularly.
- Employee and contractor access is restricted to the minimum necessary data, and all personnel are bound by confidentiality and cybersecurity training requirements.
- Attempts at unauthorized access trigger automated alerts and security incident protocols.
C. Blockchain-Based Data Integrity
To ensure authenticity and prevent tampering:
- Each document or message stored is registered on a blockchain ledger with a unique cryptographic hash that proves its integrity.
- No private or readable user data is ever stored on the blockchain — only a digital fingerprint that confirms document authenticity without revealing content.
- This immutable record provides verifiable proof that your materials have not been altered or deleted without authorization.
D. Monitoring and Incident Response
- The platform uses continuous intrusion detection and anomaly monitoring systems to detect and block suspicious activity in real time.
- In the unlikely event of a data breach, affected users will be notified within 72 hours (or sooner, where legally required).
- A dedicated Security Response Team conducts forensic investigations, logs incidents, and implements corrective actions immediately.
E. Secure Development Practices
- All code is developed and reviewed following OWASP Top 10 best practices.
- Regular penetration testing and third-party security audits are performed to identify and remediate potential vulnerabilities.
- Version control, dependency monitoring, and automated testing ensure the integrity of our infrastructure at every deployment.
F. Your Role in Security
While we take extensive measures to safeguard your information, data security also depends on you:
- Use strong, unique passwords and enable MFA.
- Do not share your account credentials or login codes.
- Log out after each session on shared devices.
- Notify us immediately at security@mylastword.net if you suspect unauthorized access or account compromise.
9. International Data Transfers
My Last Word LLC is headquartered and operates primarily in the United States, where all servers, encrypted storage, and blockchain nodes are located. By using our services, you acknowledge that your personal data may be transferred to, processed, and stored in the United States or other jurisdictions that may not have the same level of data protection as your home country.
A. Compliance with Cross-Border Data Regulations
For users located in the European Union (EU), United Kingdom (UK), Canada, or other regions with comprehensive data protection laws, we take steps to ensure your information receives an equivalent level of protection consistent with applicable legal standards. These steps include:
- Implementing Standard Contractual Clauses (SCCs) as approved by the European Commission for lawful data transfers;
- Limiting data transfers to partners or service providers that maintain GDPR- or SOC 2-compliant frameworks;
- Conducting risk assessments to ensure data handling practices meet or exceed EU and UK privacy expectations;
- Encrypting all transferred data end-to-end so that no third party can access readable content during transit or processing.
B. Storage Location
All user data, wills, and final messages are securely hosted on AWS data centers located in the United States. Backup servers and blockchain validation nodes may operate in additional secure regions (such as Canada or the EU) to ensure redundancy and uptime, but your data remains encrypted and unreadable without decryption keys stored exclusively within the U.S.
C. User Consent for International Transfers
By creating an account or using our services, you consent to the transfer of your personal data to the United States and its processing in accordance with this Privacy Policy. This consent ensures we can:
- Store and protect your encrypted information;
- Perform death verification through authorized U.S. databases;
- Execute message delivery and blockchain notarization under consistent operational standards.
D. Safeguards and Oversight
We maintain data protection agreements with all partners and subprocessors to ensure consistent adherence to privacy and security obligations regardless of jurisdiction. Periodic audits, compliance certifications, and encryption verifications are conducted to confirm the ongoing integrity of international data handling practices.
10. Your Rights
At My Last Word LLC, we believe that you should have full control over your personal information and how it is used. Depending on your location and applicable privacy laws (including the General Data Protection Regulation (GDPR), UK Data Protection Act, and California Consumer Privacy Act (CCPA)), you may have specific rights related to your personal data.
You can exercise any of these rights by emailing privacy@mylastword.net. We will respond to all verified requests within the timeframes required by law.
A. Right to Access
You have the right to request a copy of the personal data we hold about you, including account details, stored documents, verification history, and message metadata. We will provide this information in a structured, commonly used, and machine-readable format upon verified request.
B. Right to Correction
If any of your personal information is incomplete or inaccurate, you may correct it directly within your account settings or by contacting us. We will promptly update the information in all applicable systems.
C. Right to Deletion ("Right to Be Forgotten")
You may request that we delete your personal information and all related stored materials at any time. Upon verified request:
- Your data will be permanently deleted from active systems within 30 days;
- Backup data will be purged in accordance with our retention schedule (see Section 5);
- Blockchain records associated with your documents will remain as non-identifiable hashes for authenticity verification only.
Please note that we may retain limited information when necessary to:
- Comply with legal obligations;
- Resolve disputes;
- Prevent fraud or abuse of our platform.
D. Right to Restrict or Object to Processing
You may request that we stop or limit processing of your personal data in certain situations — for example, if you contest its accuracy or wish to pause non-essential processing while we verify your request.
E. Right to Data Portability
You can request a downloadable, machine-readable copy of your stored content (documents, messages, or wills) to transfer to another service provider or for personal backup.
F. Right to Withdraw Consent
If we rely on your consent to process certain data — such as death verification via SSDI, or delivery of posthumous messages — you may withdraw that consent at any time by updating your settings or contacting us. However, withdrawing consent may disable or limit our ability to provide certain features or services.
G. Right to Non-Discrimination (California Residents)
If you exercise your privacy rights under the California Consumer Privacy Act (CCPA), you will not receive discriminatory treatment, pricing, or access limitations as a result.
H. Right to Lodge a Complaint
If you believe your privacy rights have been violated, you have the right to contact us directly at privacy@mylastword.net. If you are located in the European Union, you also have the right to file a complaint with your local Data Protection Authority (DPA). For U.K. residents, you may contact the Information Commissioner's Office (ICO).
Verification of Requests
For your protection, we may ask you to verify your identity before processing any data request. This ensures that your information is released only to you or an authorized agent acting on your behalf.
11. Cookies and Tracking Technologies
My Last Word LLC uses cookies and similar technologies to help our website and platform function securely, improve performance, and enhance your user experience. We keep our use of tracking technologies minimal and never use invasive or third-party ad tracking tools.
A. What Are Cookies?
Cookies are small data files stored on your device when you visit a website. They allow us to remember your preferences, maintain secure sessions, and measure basic performance analytics.
Cookies may be:
- Session Cookies – temporary cookies that are deleted when you close your browser.
- Persistent Cookies – stored on your device for a set period or until you delete them.
- First-Party Cookies – set directly by My Last Word.
- Third-Party Cookies – set by service providers who help us operate core platform functions (e.g., login or analytics).
B. Types of Cookies We Use
Essential (Strictly Necessary) Cookies
- Enable login sessions, form submissions, and account authentication.
- Required for the platform to function properly.
- These cookies cannot be disabled in our systems.
Security and Authentication Cookies
- Used to prevent fraudulent logins, maintain session integrity, and detect unauthorized access.
- Examples include MFA tokens or API session keys (via Auth0 or Firebase).
Performance and Analytics Cookies
- Collect anonymous statistics on how visitors use our website (e.g., page load times, navigation flows).
- Help us improve design, reliability, and usability.
- We use privacy-friendly tools such as privacy-mode Google Analytics or self-hosted analytics that anonymize IP addresses.
Preference Cookies
- Remember your language, theme, or login settings for future sessions.
- Optional and can be cleared at any time.
C. Managing Cookies
You can control or delete cookies at any time by adjusting your browser settings. Most browsers allow you to:
- Block cookies altogether;
- Delete existing cookies;
- Receive alerts when a website sets a new cookie.
If you disable essential cookies, certain features of the platform (such as secure login or file uploads) may not work correctly.
For browser-specific instructions, visit: www.allaboutcookies.org or your browser's "Help" section.
D. Other Tracking Technologies
We may also use limited tracking technologies such as:
- Local Storage – for saving in-session settings or encrypted draft data that never leaves your device;
- Log Files – to record IP addresses and system activity for security monitoring;
- Web Beacons or Pixel Tags – used internally for email delivery confirmation (never for advertising).
All such technologies follow the same security and consent principles as cookies.
E. Consent for Non-Essential Cookies
Where required by law (e.g., under GDPR or the UK ePrivacy Directive), we will display a cookie banner asking for your consent before setting non-essential cookies. You may withdraw or change your consent at any time via our website's "Cookie Preferences" panel.
12. Children's Privacy
My Last Word LLC is intended for adults aged 18 and older. We do not knowingly collect, store, or process personal information from anyone under the age of 18. Our platform deals with legal, financial, and end-of-life documentation that requires adult consent and contractual capacity.
A. No Use by Minors
- Users must be at least 18 years old to create an account or use any feature of the My Last Word platform.
- By registering, you confirm that you meet the minimum age requirement and have the legal authority to enter into a binding agreement.
- We do not offer services to minors, and no portion of our website or app is structured to attract them.
B. Parental or Guardian Involvement
If we discover that we have inadvertently collected personal data from a child under 18, we will:
- Immediately delete the data from our systems; and
- Notify the parent or guardian (if identifiable) of the incident.
Parents or guardians who believe their child may have provided information to My Last Word can contact us directly at privacy@mylastword.net for immediate assistance.
C. Compliance Framework
This policy complies with:
- The Children's Online Privacy Protection Act (COPPA) in the United States;
- The GDPR Articles 8 and 12 governing children's consent in the European Union and United Kingdom;
- Applicable international privacy standards regarding minors' data protection.
13. Data Retention and Deletion
My Last Word LLC retains your information only as long as necessary to fulfill the purposes described in this Privacy Policy — including the secure creation, verification, and posthumous delivery of your final materials — or as required by applicable law.
We balance retention with privacy: keeping your encrypted data available to carry out your wishes while minimizing long-term exposure risk.
A. General Retention Schedule
- Active Accounts: Your information, documents, and final messages are stored securely for as long as your account remains active.
- Inactive or Cancelled Accounts: If your subscription expires or you cancel service, we retain your data for up to 12 months to preserve your ability to reactivate or to ensure posthumous delivery in the event of verified death during that period.
- Free Tier Users: One "last message" may be stored indefinitely unless deleted by the user.
- Verified Deceased Accounts: Once a user's death has been confirmed and all designated materials have been released, non-essential data is archived for 90 days and then permanently deleted or anonymized.
- Legal Retention: Certain transaction logs, payment records, and blockchain integrity hashes may be preserved as long as necessary to comply with legal, accounting, or regulatory obligations.
B. User-Initiated Deletion
You may delete your account or specific content at any time by:
- Using your account dashboard's "Delete Account" or "Delete File" options; or
- Submitting a verified request to privacy@mylastword.net.
Upon confirmation:
- Personal data will be removed from active systems within 30 days;
- Encrypted backups will be overwritten during the next automated cycle (typically within 90 days);
- Blockchain records tied to deleted materials will remain as non-identifiable proof-of-existence hashes, containing no readable personal data.
C. Secure Deletion Standards
All deletions follow certified data-destruction procedures:
- Permanent erasure compliant with NIST 800-88 Rev. 1 standards;
- Cryptographic key invalidation to make residual data unrecoverable;
- Regular verification of deletion logs and automated system reports.
D. Exceptions
We may retain certain minimal data temporarily if necessary to:
- Resolve disputes or investigate security incidents;
- Comply with law enforcement or court orders;
- Prevent fraud or abuse of the My Last Word platform.
All retained data in such cases remains encrypted and access-restricted.
14. Your Messages and Recipients
At the heart of My Last Word LLC is your ability to create and deliver personal messages, documents, and media to loved ones after your verified passing. We take the confidentiality, control, and security of your final communications extremely seriously.
A. User Ownership and Control
- You retain full ownership and intellectual property rights over all messages, media, and documents you upload.
- My Last Word acts solely as a secure custodian and delivery service, not as an editor, publisher, or legal agent.
- We will never read, modify, or release your content without verified authorization as outlined in our Death Verification Policy (Section 4).
- You may edit, delete, or reassign recipients for your messages at any time before verification of death.
B. Message Encryption and Storage
- All messages are encrypted end-to-end using AES-256 encryption.
- The platform stores only encrypted data; message contents are not accessible to My Last Word employees or system administrators.
- Metadata (such as message creation date and recipient email) is stored separately from the message body to protect your privacy.
- Each message is cryptographically hashed and registered on the blockchain to establish proof of authenticity and timestamp integrity.
C. Designating Recipients
- You may assign individuals, groups, or institutions (such as family, attorneys, or trustees) as recipients.
- Recipient identities are encrypted and stored securely until activation.
- My Last Word verifies recipient contact validity periodically to prevent failed deliveries or outdated addresses.
- Recipients will only receive access to messages specifically addressed to them. No one can view or request another user's messages under any circumstance.
D. Message Delivery Upon Verified Death
When a verified death match is confirmed:
- The system initiates a two-step verification process to prevent errors or premature release.
- Once confirmed, messages are decrypted and securely delivered to each designated recipient via encrypted email link or private secure download portal, depending on the user's delivery settings.
- Blockchain logs and timestamp records confirm authenticity and ensure each message can be validated but never altered.
- No message is ever released based solely on a single verification event.
E. Recipient Access and Privacy
- Recipients are required to authenticate their identity before viewing any delivered message.
- Access links are time-limited, encrypted, and cannot be shared or forwarded.
- My Last Word does not grant recipients permanent storage rights; each file remains available only for the duration the sender originally specified.
- Recipients cannot edit, reply to, or alter the message in any form.
F. Legal and Ethical Considerations
- My Last Word LLC is not responsible for the personal, emotional, or legal content of messages created by users.
- Users are solely responsible for ensuring that messages comply with applicable laws and do not contain illegal, defamatory, or threatening material.
- In rare cases where a message is reported as potentially unlawful (e.g., containing threats or criminal instructions), My Last Word may temporarily suspend its release pending legal review — but will not read or disclose message contents without a valid legal order.
15. Legal Disclaimer
My Last Word LLC provides a secure digital platform for users to create, store, and deliver personal messages, wills, and estate-related documents. While we take every measure to protect your data and ensure your materials are handled according to your instructions, certain legal and practical limitations apply.
A. Not a Law Firm or Legal Advisor
- My Last Word LLC is not a law firm and does not provide legal, tax, or financial advice.
- Any documents, wills, or estate plans generated through our platform are created through automated document generation tools and should not be considered legal advice.
- Users are encouraged to consult a licensed attorney in their jurisdiction to ensure that all estate documents comply with local laws and meet their personal legal needs.
B. Accuracy and User Responsibility
- Users are solely responsible for the accuracy, completeness, and legality of all information, documents, and content they upload or generate through the platform.
- My Last Word does not verify or guarantee the legal validity of user-created wills, trusts, or other legal instruments.
- Any automated legal templates provided are intended for convenience and general informational purposes only.
C. Third-Party Integrations
- My Last Word may integrate with external APIs or partners (e.g., MicroBilt, AWS, blockchain networks, payment processors).
- While we carefully select and audit these partners, we do not control their systems and are not responsible for their independent practices, policies, or outages.
- Users agree that certain services rely on third-party infrastructure and therefore may experience temporary interruptions or limitations outside of My Last Word's control.
D. Data Transmission and Risk
- Despite the use of industry-leading encryption and security standards, no internet-based system can guarantee absolute protection from unauthorized access, data loss, or service interruptions.
- By using the platform, you acknowledge and accept these inherent risks associated with online services.
- My Last Word LLC will not be liable for indirect, incidental, or consequential damages arising from data breaches, technical failures, or unauthorized access, except where required by law.
E. Force Majeure
We are not responsible for delays or failures in performance caused by events beyond our reasonable control, including but not limited to acts of God, cyberattacks, technical malfunctions, power outages, government restrictions, or natural disasters.
F. Governing Law and Jurisdiction
This Privacy Policy and all related terms are governed by the laws of the State of Nevada, United States, without regard to conflict-of-law principles. Any disputes arising under or related to this policy shall be resolved exclusively in the state or federal courts located in Clark County, Nevada.
16. Updates to This Policy
My Last Word LLC may update this Privacy Policy from time to time to reflect changes in our technology, legal obligations, or business practices. When we make updates, we do so transparently and in a way that allows you to stay informed about how your data is handled.
A. Notification of Changes
- The "Last Updated" date at the top of this Policy will always indicate the most recent revision.
- If we make material changes—for example, introducing new data uses, expanding third-party integrations, or altering your rights—we will provide clear notice through email to your registered address; and/or prominent notice on our website or dashboard.
- Minor updates, such as formatting corrections or clarifications, may be made without prior notice.
B. Continued Use as Acceptance
By continuing to use the My Last Word platform after any update takes effect, you acknowledge and agree to the revised terms. If you do not agree with any changes, you may request account deletion at privacy@mylastword.net at any time.
C. Version Archive
For transparency, prior versions of this Privacy Policy will remain archived and available upon request for at least two years following revision.
17. Contact Information & Complaints
If you have any questions, concerns, or complaints regarding this Privacy Policy or your personal data, you may contact us at:
For users located in the European Union, you also have the right to contact your local Data Protection Authority (DPA). For U.K. residents, complaints can be directed to the Information Commissioner's Office (ICO).