Williation.com - Privacy Policy

Last updated: May 2026

Who We Are

Williation is a secure digital life and legacy organisation platform. We help individuals and families store personal information, emergency contacts, digital access details, and legacy instructions in one encrypted, private vault.

We are not a legal will service, estate executor, or inheritance authority.

What Data We Collect

Account data: Name, email address, password (hashed, never stored in plain text).
Vault data: Any information you choose to store, which may include personal notes, family records, digital account credentials, financial references, identity document uploads, and emergency access instructions.
Usage data: Login timestamps, session activity, IP address, browser type.
Payment data: Billing information processed via Stripe. We do not store card numbers on our servers.
Communications: Emails you send us and notification preferences.

Why We Collect It

We do not sell your data. We do not use your vault contents for advertising.

To provide and operate the service
To authenticate your identity securely
To send wellness check and inactivity alerts
To notify emergency contacts when instructed by you
To process subscription payments
To comply with legal obligations

Legal Basis for Processing (UK & EU GDPR)

Contract: Processing necessary to deliver the service you signed up for
Legitimate interests: Security monitoring, fraud prevention, service improvement
Consent: Marketing emails (you may withdraw at any time)
Legal obligation: Where required by UK or EU law

How We Store and Protect Your Data

All vault data is encrypted at rest using AES-256
All data in transit is protected by HTTPS/TLS
Passwords are hashed using Argon2 - never stored in readable form
Identity documents and sensitive files are individually encrypted
Two-factor authentication (2FA) is available and strongly recommended
Access controls and audit logs are maintained
Sessions expire after inactivity
We monitor for breach indicators

Zero-Knowledge Approach to Vault Contents

Where possible, vault content is encrypted in a way that means we cannot read it ourselves. Your data belongs to you. You hold the keys.

Data Retention

We retain your data for as long as your account is active. If you delete your account, your data is permanently deleted within 30 days. You may also request deletion at any time.

Your Rights (UK GDPR / EU GDPR)

You have the right to:

Access a copy of your personal data
Correct inaccurate data
Delete your data (right to erasure)
Export your data in a portable format
Object to certain processing
Withdraw consent at any time
Lodge a complaint with the ICO (UK): ico.org.uk

Exercising Your Rights

To exercise any right, email: privacy@williation.com

Cookies

We use essential cookies for login sessions and security. See our full Cookie Policy at williation.com/cookies.html

Third Parties

We do not share your data with third parties for marketing purposes.

Stripe - payment processing
Email delivery provider - transactional notifications
Hosting provider - VPS infrastructure in UK/EU compliant data centres

Children

Williation is not intended for users under 18. We do not knowingly collect data from minors.

Changes to This Policy

We will notify registered users by email of any material changes. Continued use after changes constitutes acceptance.

Contact

privacy@williation.com

Back to homepage