Privacy Policy

1. Introduction

CarryOn™ ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our estate planning platform, including our website and related services (collectively, the "Service").

2. Information We Collect

We collect information you provide directly to us, including:

• Personal identification information (name, email address, phone number)
• Account credentials (encrypted passwords)
• Estate planning data (beneficiary information, documents, checklists)
• Payment information (processed securely through Stripe)
• Communications (support messages, feedback)

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send verification codes via email or SMS for two-factor authentication
• Respond to customer service requests and support needs
• Protect against fraud and unauthorized access
• Comply with legal obligations

4. SMS/Text Messaging

When you opt in to receive SMS messages from CarryOn™, you consent to receive text messages related to account verification and security (e.g., one-time passcodes for two-factor authentication). Message frequency varies based on your account activity. Message and data rates may apply.

You can opt out of SMS messages at any time by replying STOP to any message or by updating your preferences in your account settings. For help, reply HELP or contact us at the information provided below.

We do not sell, rent, or share your phone number or SMS opt-in data with third parties for marketing purposes. Your information is shared only with service providers who assist in delivering messages (e.g., Twilio).

5. Data Security

We implement industry-standard security measures, including AES-256 encryption with per-estate keys and two-factor authentication. Your sensitive documents are encrypted at rest and in transit. Conversations with our AI features are retained as chat transcripts until you delete them and may quote documents you flag for AI analysis. AI requests are processed by xAI under a zero-data-retention configuration — xAI does not store your content after the response is returned. Under xAI's published API policy, content sent through the API is also not used to train their models.

6. Data Sharing and Disclosure

We may share your information only in the following circumstances:

• With your designated beneficiaries, as configured by you
• With service providers who perform services on our behalf (e.g., payment processing, email delivery, SMS messaging)
• To comply with applicable laws, regulations, or legal processes
• To protect the rights, property, and safety of CarryOn™, our users, or others

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. You may request deletion of your account and associated data by contacting us.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Object to or restrict processing of your data
• Data portability
• Withdraw consent at any time

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

For data access, correction, deletion, or portability requests, contact: privacy@carryon.us

For general questions about this Privacy Policy or our data practices, contact: info@carryon.us