Privacy & security

Privacy Policy

Effective November 2, 2026 · service-2026-11-02-v2. Before I Pass™ is operated by Wealth On Main Street Inc. Applicable intellectual property is owned by LCIP Holdings Inc.; it is not identified here as the operator of customer information. The service is intended for people aged 18 or older.

Your private writing

Your memories, interview answers, recipient information, values, stories and documents are encrypted on your device before they are saved. This is separate from account and business information, such as your email, plan, purchase status and marketing preference.

Your vault passphrase and separate recovery key protect the key that unlocks your saved writing. Our team has no master key or account tool for reading your stored private writing.

Your vault passphrase and recovery key are not sent to our servers. Your unlocked writing key is held in device memory and cleared when you lock, sign out, switch accounts, close the tab, or after 15 minutes idle. Encrypted recovery copies may remain on your device for up to seven days; you can clear them in Account.

What we store

We store account information, including email and plan, encrypted writing and document history, progress and save dates. Where applicable, we also store service access, purchase/referral information and separate marketing preferences. Recipient names and narratives remain inside encrypted writing.

We also store the accepted service-notice version and timestamp, and writing usage categories, timestamps and numeric counters. These contain no source prompts, responses, private names or memories.

Your saved private writing is restricted to your account. Authorized service staff may manage necessary account and business information, but have no content-reading or export tool for your vault.

Why we process information

We use necessary account information to provide sign-in, saving, recovery, service access and support. Your writing supports the documents you request. Service acceptance records show which notice you agreed to and when. Usage counts help protect service availability; they do not contain your private prose.

Supply only the information needed for your legacy writing. When you choose to describe relatives or other people, consider their privacy and avoid unnecessary sensitive details. Do not submit information you are not entitled to provide.

Account password vs. vault passphrase

Your sign-in password and your vault passphrase are separate. Resetting your sign-in password lets you back into your account, but does not decrypt your content. You still need your passphrase or recovery key.

If you lose both your passphrase and your recovery key, your private content is permanently unrecoverable. We cannot recover it for you.

What this does not protect against

  • A compromised device — malware, a keylogger, or a malicious browser extension can see what you type.
  • A modified version of the application code. Web apps are delivered by the server each visit; if that code were tampered with, it could capture content before encryption.
  • Voice input: if you turn on speech-to-text, your browser or operating system provider may process the audio and transcript under their own policies.
  • Anything you print, download, or share yourself.
  • Requested AI-assisted writing involves processing outside your device, as explained below.
  • Metadata: we can see that an account exists, when it was used, and roughly how far along it is.

What we don't do

  • No marketing use of your private writing and no customer-relationship-system transfer of it.
  • No emailing of your letters and no public share links.
  • No saving or logging of plaintext AI source prompts or responses.

Deleting your data

From Account settings you can export your decrypted content to your device, delete your writing, or delete your account entirely. Deletions are permanent.

You can review and correct your writing in the interview and document editor. Files you download, print or share are outside the vault. We do not promise immediate removal of infrastructure backups or state an unverified backup retention period.

AI-assisted writing and international processing

Before I Pass uses xAI as its AI service provider. When you request creation or improvement of a document, the information needed for that document is temporarily decrypted on your device and securely sent through the application server to xAI in the United States. Your saved writing remains encrypted.

The application requests no storage of AI responses and checks the provider’s configured privacy controls before accepting generation. It does not save or log the private sources or responses as plaintext. These safeguards are not an absolute guarantee about all provider or infrastructure retention. AI writing can contain errors; review and edit every draft.

Infrastructure and other service providers

Before I Pass™ is developed and hosted using Lovable and Lovable Cloud. Supabase provides database and authentication infrastructure used by the application. Supabase is a separate service provider and is not owned by Lovable. Account information, encrypted saved writing and service records are processed through this infrastructure. We have not verified all hosting regions, backup locations or support-access arrangements and do not claim all information stays in one country.

HighLevel / GoHighLevel is not connected. If connected in the future, it may handle customer and communication information, such as name, email, contact details, purchase information, support history and marketing preferences, subject to an updated notice where needed. Private letters, interview answers, memories, recipient narratives and generated legacy documents must not be routed to it.

No payment processor is currently integrated for taking payments. This policy does not name or promise an unselected payment service.

Optional marketing and independent partners

Marketing is optional, separate from service acceptance and off unless you choose it. Your preference, notice version and date are recorded separately. You can withdraw it in Account without losing product access.

Ascendant Financial is an independent marketing and referral partner of Wealth On Main Street Inc. They are independent businesses, with no parent, subsidiary or corporate ownership relationship and no expected ownership relationship currently contemplated.

Agreeing to receive Wealth On Main Street information about partner offerings does not authorize sharing a customer list, transferring your contacts to Ascendant Financial, direct Ascendant marketing, or sharing private legacy writing. If you later request an introduction or partner service, separate authorization would be needed before transferring relevant contact information. No referral-transfer system is connected.

Privacy questions and rights

Wealth On Main Street Inc. is responsible for privacy questions, access, correction and deletion requests. Account settings provide the current self-service writing export, correction and deletion options. A direct privacy contact address has not yet been supplied; it must be provided before public availability. Your statutory privacy rights are not waived.