How we protect your information
You type in real information about a real family. Here is exactly what happens to it — in plain words, with nothing left out.
Your answers are locked before they are stored
When your answers are saved to our system, they are locked with AES-256 encryption first. The keys are kept separately from the data. Every connection to our site is encrypted too.
What does AES-256 mean?
AES-256 is the locking method banks and governments use. Locked answers look like scrambled letters to anyone without the key. We can unlock your answers to build your documents — that is what you pay us to do — but a person who somehow got the stored data alone would see only the scramble.
Your information stays in Canada
Your answers start on the device you type them on. If you sign in to save your progress, they are encrypted and stored in Canada. Our database runs in a Canadian data-centre region. Two helpers see small pieces to do their jobs: Stripe handles your payment, and our email company sends your sign-in links and receipts. Your interview answers never go to either of them. The privacy policy spells this out.
We never see your card number
You pay on Stripe's secure page — the address starts with checkout.stripe.com. Your card details go to Stripe, not to us. We could not store your card number if we wanted to. We don't want to.
No passwords to steal
You sign in with a link we email you. There is no password, so there is no password to guess, leak, or steal. And if you forget to sign out, we sign you out for you after a short time.
What we will never ask for
We ask only what the court forms need: names, dates, addresses, and what the estate is worth. We never ask for a Social Insurance Number, a bank login, or any password. The interview even tells you not to type account numbers into descriptions.
No trackers, ever
No advertising trackers, no social-media pixels, no session recording — not on this page, not anywhere on the site. We count steps, not people: a number goes up when a step is reached, with no name and no email attached. If you come to us from an ad and later buy, we report that one sale to the ad company using its click number — never your name or your answers. The privacy policy explains both, in plain words.
Your data does not live here forever
Unfinished interviews are deleted after 12 months of no activity. Purchased packages are kept 12 months so you can re-download, then deleted. And the delete button on the account page is real: press it, and your data is removed immediately and permanently. Old backup copies are deleted on a set schedule.
Privacy questions or data requests: privacy@probateprep.ca. The full picture, including exactly what we collect and why, is in the privacy policy.