Privacy Policy

Legadova™ — a product of Moose Pack Ventures LLC, a Moose Pack Inc. company.

Effective Date: July 13, 2026

Last Updated: July 13, 2026

This Privacy Policy explains how Moose Pack Inc ("MPI," "Legadova," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the Legadova™ voice-AI will and estate-planning application and related services (the "Service").

Legadova handles some of the most sensitive information a person can share — the contents of your will and estate plan, your family and financial details, information about your beneficiaries, and recordings of your voice. We take that responsibility seriously. This policy describes how that data is handled.

If you do not agree with this policy, do not use the Service.

1. You Must Be 18 or Older

The Service is intended only for individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected data from a minor, we will delete it.

2. Information We Collect

a. Account information. Name, email address, authentication credentials, and account settings.

b. Estate and will content (highly sensitive). The information you provide to create your documents — including the contents of your last will and testament, healthcare directives, powers of attorney, your assets and debts, real and personal property, bank and financial details, family relationships, wishes, and instructions. This is highly sensitive personal, family, and financial data.

c. Beneficiary and third-party personal data. Names, relationships, and contact or identifying details of the people you designate — beneficiaries, executors, guardians, witnesses, healthcare agents, and attorneys-in-fact.

d. Voice recordings and transcripts (biometric — see Section 8). Audio of your conversations with the AI, and the text transcripts generated from that audio, which we process to power the voice experience and to draft your documents.

e. document content (optional, premium). Spoken or video messages you choose to record and attach to bequests or leave for beneficiaries.

f. Payment information. Processed by Stripe. We receive limited billing metadata (e.g., last four digits, status); we do not store full card numbers.

g. Technical and usage data. Device, browser, IP address, log data, and interactions with the Service, collected in part through cookies (see our Cookie Policy).

3. How We Use Your Information

We use information to:

• provide the Service — power the voice AI, draft and store your documents, and enable signing and, where you choose, notarization;
• authenticate you and secure your account;
• process payments and manage subscriptions;
• communicate with you (transactional emails, updates, and, if the auto-updating subscription is active, alerts about your documents);
• improve reliability, safety, and support;
• comply with law and enforce our Terms.

We do not sell your personal information. We do not use the contents of your will, your estate data, your voice recordings, your transcripts, or your document content to train generalized AI models, and we require our AI processor to operate under terms that prohibit using your content to train its foundation models.

4. Legal Bases (EU/UK/GDPR)

Where GDPR or UK GDPR applies, we process personal data on these bases: performance of a contract (to provide the Service you request); consent (for voice processing and non-essential cookies — you may withdraw consent at any time); legal obligation; and legitimate interests (security, fraud prevention, service improvement) balanced against your rights. Special-category data (Article 9), including voice/biometric data and health-related directive content, is processed only with your explicit consent or another Article 9 basis.

5. Processors and Sub-Processors We Disclose

We share information with the following service providers strictly to operate the Service. Each is bound by contract to protect your data and use it only on our instructions:

We may add or change sub-processors and will update this list; where required, we will notify you.

Notarization. Legadova applies its own MPI Digital Notary seal — a cryptographic hash-chain record created inside our own systems — and generates a printable notary acknowledgment you complete with a licensed notary public in person. We do not currently use a third-party remote online notarization (RON) vendor, and no third party receives your documents for notarization.

6. How We Protect Your Information

• Encryption. Document content and sensitive data are stored encrypted at rest (via Supabase) and transmitted over encrypted connections (TLS).
• Access controls. Access is limited to personnel and systems that need it to operate the Service.
• Vendor diligence. Processors are selected and contracted for security and confidentiality.

No system is perfectly secure. We cannot guarantee absolute security, but we work to protect your data and will notify you and regulators of a breach where required by law.

7. Data Retention and Deletion

We are built to not keep your will.

• Document content: 30 days, then destroyed. When you finalize a will, a 30-day retention clock starts so you can re-download it. After that window we permanently delete the document text and every saved version of it, along with your conversation history, the answers extracted from it, and any executor or life-event entries. This deletion is automatic. It is not recoverable — not by you, and not by us.
• You must download and store your own executed documents. We will tell you this at the moment you finalize. After 30 days we cannot produce your will again under any circumstances, including a support request, a court order, or a subpoena — because we no longer have it.
• What survives, and why. We permanently retain your notary seal — a SHA-256 hash chain entry. A hash is a one-way fingerprint: it can confirm that a document you present is the authentic, unaltered one we sealed, but it cannot be reversed to reconstruct the document. This lets your will be verified for decades without us holding it. We also retain payment records, which we are required to keep for tax and accounting purposes; these are held by Stripe and contain no document content.
• Your account. Your account remains until you delete it, and after the retention window it holds no document content. Deleting your account removes your profile and remaining personal data within a commercially reasonable period, except where retention is required by law, for fraud prevention, or to resolve disputes.

8. Voice Data — Special Notice

Legadova offers an optional voice interface. Your voice may be considered biometric information under laws including the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), the Washington biometric law (RCW 19.375), and Article 9 of the GDPR/UK GDPR (special-category data). We treat it accordingly.

• We do not store your voice. Audio you speak is transmitted to our speech provider, converted to text, and discarded. We do not retain voice recordings, do not create or store voiceprints or any biometric template, and do not use your voice to identify you.
• We do not offer voice message storage. Legadova does not record, hold, or deliver spoken messages to your family, executors, or beneficiaries. We are not a custodian of anything after you download your documents.
• Explicit consent. Voice features are used only after your explicit, informed consent, requested before you first use them. You may decline voice entirely and use the Service by typing.
• No sale or profiting. We do not sell, lease, trade, or otherwise profit from voice data.
• Limited disclosure. Audio is disclosed only to the speech provider named in Section 5, only for the seconds required to transcribe it, and to comply with law.
• Transcripts. Text derived from your speech is treated as document content and is deleted on the same 30-day schedule described in Section 7.

9. Your Privacy Rights

a. GDPR / UK GDPR (EU/UK residents). You have the right to access, rectify, erase, restrict, and port your data; to object to processing; to withdraw consent; and to lodge a complaint with a supervisory authority. We do not use your data for solely automated decisions with legal effect; AI-assisted drafting is reviewed and controlled by you.

b. CCPA/CPRA (California) and similar U.S. state laws. You have the right to know/access, delete, correct, and port your personal information; to opt out of "sale" or "sharing" of personal information (we do not sell or share your personal information); and to limit use of sensitive personal information (which includes your estate/financial data and biometric voice data). We will not discriminate against you for exercising these rights. Where authorized agents are permitted, you may use one with proof of authorization.

c. Exercising rights. To exercise any right, contact iammvm1@gmail.com with the subject line "Privacy Request." We will verify your identity (important given the sensitivity of the data) and respond within the time required by applicable law.

10. International Transfers

We and our processors may process data in the United States and other countries. Where required, transfers of EU/UK data rely on appropriate safeguards such as Standard Contractual Clauses.

11. Children

The Service is not directed to and may not be used by anyone under 18. See Section 1.

12. Changes to This Policy

We may update this Privacy Policy. Material changes will be posted with a new "Last Updated" date and, where required, notified to you.

13. Contact and Data Subject Requests

Data Controller: Moose Pack Inc — Legadova™

Privacy / Data Subject Requests: iammvm1@gmail.com

© 2026 Legadova™ — A Product of Moose Pack Inc™. All rights reserved. *An Moose Pack Ventures LLC product.*