Privacy Policy

1. Introduction

LastCall ("we," "our," or "us") is operated by Alston Thompson LLC. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our storytelling and digital legacy platform at lastcall.rip.

2. Information We Collect

Information You Provide

• Account information (name, email address, password)
• Profile information (date of birth, location)
• Stories, memories, and life experiences you choose to share
• Digital vault contents (documents, photos, important information)
• Story keeper designations and contact information
• Payment information (processed securely by Stripe)

Information Collected Automatically

• Device information and browser type
• IP address and approximate location
• Usage data and interaction patterns
• Cookies and similar tracking technologies

Identity Verification

For story keepers accessing sensitive vault information, we use Plaid Identity Verification to confirm identity. Plaid collects identity documents and biometric data directly—LastCall only receives a verification status (verified/not verified) and does not store raw identity documents or biometric data.

3. How We Use Your Information

• Provide and improve our storytelling platform
• Store and protect your stories and digital vault contents
• Facilitate sharing with designated story keepers
• Process payments and manage subscriptions
• Send service-related communications
• Verify identity for vault access (via Plaid)
• Comply with legal obligations

4. Data Sharing

We do not sell your personal information. We may share data with:

• Story Keepers: People you designate to receive your stories and vault contents
• Service Providers: Supabase (database), Google Cloud (hosting), Stripe (payments), Plaid (identity verification)
• Legal Requirements: When required by law or to protect rights and safety

5. Data Retention

We retain your data as follows:

• Active Accounts: Data retained for the lifetime of your account
• Account Deletion: Personal data deleted within 30 days of request
• Stories & Vault: Retained until you delete them or close your account
• Shared Content: Content shared with keepers may persist in their access until revoked
• Anonymized Data: Aggregated, non-identifying analytics may be retained indefinitely
• Legal Holds: Data may be retained longer if required by law

This policy is reviewed annually and updated as needed to comply with applicable privacy laws.

6. Data Security

We implement industry-standard security measures including:

• TLS 1.2+ encryption for all data in transit
• AES-256 encryption for data at rest
• Multi-factor authentication for keeper vault access
• Role-based access controls
• Regular security assessments

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Export your stories and vault contents
• Opt out of marketing communications
• Withdraw consent for data processing

To exercise these rights, contact us at privacy@lastcall.rip or jack@alstonthompson.com.

8. Children's Privacy

LastCall is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of LastCall after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: