Privacy Policy

1. Introduction

LastCall ("we," "our," or "us") is operated by Alston Thompson LLC. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our storytelling and digital legacy platform at lastcall.rip.

2. Information We Collect

Information You Provide

• Account information (name, email address, password)
• Profile information (date of birth, location)
• Stories, memories, and life experiences you choose to share
• Digital vault contents (documents, photos, important information)
• Story keeper designations and contact information
• Payment information (processed securely by Stripe)

Information Collected Automatically

• Device information and browser type
• IP address and approximate location
• Usage data and interaction patterns
• Cookies and similar tracking technologies

Identity Verification

For story keepers accessing sensitive vault information, we use Plaid Identity Verification to confirm identity. Plaid collects identity documents and biometric data directly—LastCall only receives a verification status (verified/not verified) and does not store raw identity documents or biometric data.

3. How We Use Your Information

• Provide and improve our storytelling platform
• Store and protect your stories and digital vault contents
• Facilitate sharing with designated story keepers
• Process payments and manage subscriptions
• Send service-related communications
• Verify identity for vault access (via Plaid)
• Comply with legal obligations

4. Data Sharing

We do not sell your personal information. We may share data with:

• Story Keepers: People you designate to receive your stories and vault contents
• Service Providers: Supabase (database), Google Cloud (hosting), Stripe (payments), Plaid (identity verification)
• Legal Requirements: When required by law or to protect rights and safety

5. Data Retention

We retain your data as follows:

• Active Accounts: Data retained for the lifetime of your account
• Account Deletion: Personal data deleted within 30 days of request
• Stories & Vault: Retained until you delete them or close your account
• Shared Content: Content shared with keepers may persist in their access until revoked
• Anonymized Data: Aggregated, non-identifying analytics may be retained indefinitely
• Legal Holds: Data may be retained longer if required by law

This policy is reviewed annually and updated as needed to comply with applicable privacy laws.

6. SMS / Text Message Communications

LastCall sends two types of SMS, both opt-in and both carrying STOP and HELP instructions. Standard message and data rates may apply per your carrier.

Standing-text reminders (gift subscriptions)

When a subscriber sets up a LastCall subscription for a family member, they may provide that person's phone number so we can deliver periodic reminders by SMS. By providing a recipient phone number, the subscriber confirms they have that person's explicit permission to receive these messages. Frequency: at most one SMS per week per recipient. No promotional content — messages are reminders to record a story.

Collaboration channel (story contributors)

When a LastCall user invites someone to contribute to a story, the first-touch invite is sent person-to-person from the inviter's own phone via their device's native SMS app. LastCall does not originate this first SMS. Once the contributor taps the link, they land on a welcome screen where they may opt in to receive LastCall-originated SMS for two downstream events: (a) a final-draft delivery notification (one-shot) when the story author finalizes the story, and (b) up to two optional reminders if the contributor has opened the invite but not yet submitted their contribution. Contributors opt in via an unchecked checkbox on the welcome screen and may opt out at any time by replying STOP. Frequency cap: at most three LastCall-originated SMS per collaboration invite (two reminders + one final-draft delivery).

What we collect and store

• Recipient phone numbers entered at subscription creation (stored in the story_subscriptions table) or at collaboration invite creation (stored in the collaboration_invites table).
• An attestation timestamp and IP address when the subscriber confirms permission to text the recipient (standing-text channel) or when the contributor opts in at the welcome screen (collaboration channel).
• A log of opt-out events (STOP replies) so we can stop sending immediately.

Opt-out, HELP, and provider

• Recipients can opt out at any time by replying STOP (or STOPALL / UNSUBSCRIBE / CANCEL / END / QUIT). All future messages cease immediately and the corresponding LastCall subscription or collaboration invite is ended.
• For help, recipients can reply HELP to receive a brief reply with our support contact.
• SMS messages are delivered by Twilio. Standard message and data rates may apply per the recipient's carrier.
• Standing-text recipients also have full control over their own subscription from inside their LastCall account at /settings/who-can-read, including pausing or ending the relationship without texting STOP.

Phone numbers (recipient or contributor) are never shared with third parties for marketing, never sold, and never used for any purpose other than the SMS communications described above.

7. Data Security

We implement industry-standard security measures including:

• TLS 1.2+ encryption for all data in transit
• AES-256 encryption for data at rest
• Multi-factor authentication for keeper vault access
• Role-based access controls
• Regular security assessments

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Export your stories and vault contents
• Opt out of marketing communications
• Withdraw consent for data processing

To exercise these rights, contact us at privacy@lastcall.rip or jack@alstonthompson.com.

9. Children's Privacy

LastCall is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of LastCall after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: