Legal
Effective date: January 1, 2026 · ExitUs LLC
ExitUs is built on the premise that your most sensitive documents should be private — even from us. This policy explains what we collect and why.
We collect information you provide directly — your email address, documents you upload, and the names and contact details of beneficiaries you designate. We also collect standard server logs (IP addresses, browser type, timestamps) to operate and secure the service.
Your email is used to identify your account, send security notifications, and (if you opt in) occasional product updates. We do not sell, rent, or share your personal information with third parties for marketing purposes. We use service providers (cloud storage, email delivery) bound by confidentiality agreements.
Documents are encrypted before they leave your device using AES-256-GCM encryption. Your master encryption key is derived from your password using Argon2id. ExitUs staff cannot read the contents of your documents. Even in the event of a data breach, your documents remain unreadable without your personal key.
When you add a beneficiary, we store their name, email, and the access permissions you configure. Beneficiaries receive an invitation email and can access the portal once they accept. Their personal information is used solely to provide the vault access service you've configured.
Your account and all associated data are retained while your subscription is active and for 30 days after cancellation, during which you may download your data. After that period, your data is permanently and irreversibly deleted. You may request deletion at any time from your account settings.
We use only functional cookies necessary to operate the service (session management). We do not use tracking cookies, advertising cookies, or third-party analytics that identify you across other websites.
You have the right to access, correct, or delete your personal information at any time. You may export your data or close your account from the Account settings page. For requests or questions, contact us at privacy@exitus.com.
We will notify you by email of material changes to this policy at least 30 days before they take effect. Your continued use of the service after that date constitutes acceptance of the updated policy.