Skip to main content

Privacy Policy

Last updated: March 7, 2026

The short version: We collect only what we need to operate LastingPath and contact you about the service. We do not sell your data. We do not share it with third parties for marketing. You can request deletion at any time.

1. Who We Are

LastingPath ("we," "us," or "our") is a software service that helps families and funeral professionals manage the administrative paperwork required after a death. Our contact email is support@lastingpath.com.

2. What We Collect

We collect information in the following situations:

Waitlist Sign-Up

Name, email address, and your role (family member or funeral professional). We use this solely to contact you about LastingPath's launch and updates.

Partner Application (Funeral Homes)

Your name, funeral home name, state, email, phone (optional), case volume, and how you heard about us. We use this to evaluate and respond to partnership applications.

Estate Intake Checklist

When you use the free checklist tool, you may enter information about the deceased (name, date of death, state, estate details) and your own contact information. This data is used only to generate your personalized checklist and is not sold or shared with third parties.

Usage Data

Standard web analytics such as pages visited, browser type, and referring URL. This is used to understand how the product is used and to improve it.

3. How We Use Your Information

  • To contact you about LastingPath early access, product updates, and your waitlist position
  • To respond to partner applications and schedule follow-up conversations
  • To generate your personalized estate administration checklist
  • To improve the product based on usage patterns
  • To comply with legal obligations

We do not use your information to send unsolicited marketing, sell advertising, or profile you for third-party purposes.

4. How We Store Your Data

Your data is stored securely on Supabase (PostgreSQL), which provides encryption at rest and in transit. We take reasonable technical measures to protect your information from unauthorized access, disclosure, or loss.

We do not store payment card data directly — payments are processed by Stripe, which maintains its own PCI-DSS compliance. Death certificate images and sensitive documents are encrypted at rest and in transit.

5. Sharing Your Information

We do not sell, rent, or trade your personal information. We may share data only in these limited circumstances:

  • Service providers: Trusted vendors who process data on our behalf under confidentiality agreements, including: Supabase (database & authentication), Stripe (payment processing, PCI-DSS compliant), Anthropic (AI-powered chat and document assistance via Claude), Plaid (bank account discovery for Concierge tier), Resend (transactional email delivery), and Sentry (error monitoring with PII scrubbing enabled). For details about our data sub-processors, see our Data Processing Agreement.
  • Legal requirements: If required by law, court order, or to protect the rights and safety of others.
  • Business transfer: In connection with a merger, acquisition, or sale of assets, with appropriate notice to you.

6. Sensitive Information

LastingPath may handle sensitive personal information including Social Security numbers, financial account details, and health-related information as part of the estate administration process. We treat this information with heightened care, use it only as necessary to provide the service, and do not share it except as required to complete the service (e.g., submitting a form to a government agency on your behalf with your explicit approval).

7. Your Rights

You have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (right to be forgotten)
  • Opt out of marketing communications at any time

To exercise these rights, email us at support@lastingpath.com. We will respond within 30 days.

8. AI-Powered Features

LastingPath uses AI services powered by Anthropic (Claude) to provide features including:

  • AI chat assistant (Sage) for estate administration guidance
  • AI-generated letters to institutions and creditors
  • Document explanation and creditor analysis

When you use these features, relevant estate information (such as the deceased's name, date of death, state, and your questions) is sent to Anthropic's servers for processing. This data is used solely to generate responses and is subject to Anthropic's Privacy Policy. AI features are available to Family+Support and Concierge tier users.

AI chat messages are stored in our database to maintain conversation history. You can delete all AI chat data by deleting your account.

9. Cookies & Analytics

We use minimal cookies necessary for the website to function (session management, form state). We do not use third-party advertising cookies.

We use Vercel Analytics and Umami (self-hosted) for anonymous usage analytics. These services are only loaded after you provide consent via our cookie banner. You can manage your cookie preferences at any time by clearing your browser's local storage.

10. Data Retention

We retain your data for as long as your account is active or as needed to provide you with the service. Specifically:

  • Estate data: Retained until you delete your account. Upon deletion, all estate data, documents, AI chat history, and associated records are permanently removed within 24 hours.
  • Waitlist & partner data: Retained until you unsubscribe or request deletion.
  • Database backups: Our database provider (Supabase) maintains encrypted backups with a 30-day recovery window. Deleted data may be recoverable from backups during this period, after which it is permanently purged.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Right to delete: You may request deletion of your personal information, subject to certain exceptions.
  • Right to opt-out of sale: We do not sell your personal information. We do not share your data with third parties for their own marketing purposes.
  • Non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, email support@lastingpath.com or use the "Do Not Sell My Info" link in our footer. We will respond within 45 days.

12. Children's Privacy

LastingPath is not directed at children under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us immediately.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email (if you are on our waitlist) or by posting a notice on our website. The "Last updated" date at the top of this page will always reflect the most recent version.

14. Contact

Questions about this Privacy Policy? Email us at support@lastingpath.com.