1. Overview
Inhira, Inc. (“Inhira,” “we,” “us,” or “our”) is committed to protecting your privacy and the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and protect information through our website, applications, and related services (collectively, the “Services”). By using our Services, you agree to the practices described in this policy.
Inhira is a technology company, not a law firm. We do not provide legal advice, legal representation, or attorney-client relationships. The information and documents generated through our Services are based on the information you provide and general legal requirements. They are not a substitute for advice from a licensed attorney.
2. Information We Collect
Information You Provide
We collect information you voluntarily provide, including: account information (name, email address, phone number, password); identity verification details (date of birth, address, and government ID for notarization); estate planning information (family details, asset information, beneficiary designations, guardianship preferences); payment information (processed by our secure payment provider); and communications you send to us, including survey responses and feedback.
Information Collected Automatically
When you use our Services, we automatically collect device information (browser type, operating system, device identifiers), usage data (pages visited, features used, time spent), general geographic location based on IP address, and information through cookies and similar technologies as described in Section 10.
Data Retention Summary
Account and estate planning data is retained for the lifetime of your account plus 7 years after closure. Payment records are retained for 7 years as required by tax and financial regulations. Usage analytics are retained in identifiable form for 24 months; anonymized and aggregated data may be retained indefinitely. Support communications are retained for 3 years.
3. Sensitive Personal Information
Due to the nature of estate planning, we may collect information classified as “Sensitive Personal Information” under applicable privacy laws, including Social Security numbers (required for notarization and certain legal documents), government-issued identification, financial account information, health-related preferences (your wishes regarding medical care and life-sustaining treatment), and family and dependent information (names, dates of birth, and relationships of beneficiaries, guardians, and agents).
We use Sensitive Personal Information only to provide the estate planning Services you have requested. This information is never used for advertising, profiling, or any purpose unrelated to your estate plan. You have the right to limit our use of Sensitive Personal Information to what is necessary to perform the Services.
4. How We Use Your Information
We use the information we collect to provide, maintain, and improve our estate planning Services; generate legally compliant documents based on your specifications; facilitate online notarization sessions with commissioned notaries; process payments and prevent fraud; send transactional communications (confirmations, updates, security alerts); provide customer support; send marketing communications with your affirmative consent (you may unsubscribe at any time via the link in every email or by contacting us); analyze usage patterns to improve user experience; and comply with legal obligations.
We never use your estate planning information for advertising purposes. Your sensitive personal and family information is used solely to provide our Services and is never shared with advertisers or data brokers.
5. Information Sharing & Disclosure
We do not sell, rent, or trade your personal information. We share information with trusted third parties only as necessary to operate our Services, including cloud hosting and infrastructure providers, payment processors, notarization platforms, email delivery services, AI service providers (for document generation assistance and user guidance), and analytics providers (with anonymized data where possible).
We use artificial intelligence to assist in generating estate planning documents, providing educational guidance, and reviewing your plan for completeness. AI-generated content is based on the information you provide and applicable state law. All documents are available for your review before finalization. AI is used as a tool to assist you — it does not make legal decisions on your behalf.
We may disclose your information if required by law, subpoena, court order, or other legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others. In the event of a merger, acquisition, or sale of assets, your information may be transferred, and we will notify you before your information becomes subject to a different privacy policy.
Financial Account Data Aggregation
When you connect your bank, brokerage, or retirement accounts to enable Inhira’s trust-funding workflow or asset-inventory features, we use Plaid Inc. (“Plaid”) as our financial-data aggregation provider. Plaid securely retrieves read-only account information — including account type, balances, holdings, liabilities, and the identity information on file with your financial institution — from the institutions you choose to connect. Inhira receives this data from Plaid in encrypted form and uses it solely to populate your estate plan’s asset inventory, generate per-institution trust-funding workflows, and power the Plan Health analysis described in this policy. Inhira is read-only across this integration: we do not move money, initiate payments, or alter your accounts in any way. You may disconnect any institution and revoke Plaid’s access at any time through your account settings. Plaid’s own privacy practices are described at plaid.com/legal.
6. Data Security
We implement industry-standard security measures to protect your personal information, including AES-256 encryption for data at rest and in transit, role-based access controls, scoped session management with automatic session revocation on password change, encrypted at-rest storage of sensitive credentials, append-only audit logging of administrative actions, and database row-level security to ensure customers can only access their own data. While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We continually work to protect your information using commercially reasonable measures.
7. Data Breach Notification
In the event of a data breach that compromises your personal information, we will notify affected users via email within 72 hours of becoming aware of the breach, provide a description of the nature of the breach and the types of information involved, describe the steps we are taking to investigate and remediate the breach, provide guidance on steps you can take to protect yourself, and notify applicable state attorneys general and regulatory authorities as required by law. We comply with the breach notification requirements of every state in which our users reside.
8. Data Retention
We retain your information for as long as necessary to provide our Services and fulfill the purposes described in this policy. Account and estate planning data is retained for the lifetime of your account plus 7 years after closure. Payment records are retained for 7 years as required by tax and financial regulations. Communication logs are retained for 3 years. Identifiable usage analytics are retained for 24 months. You may request deletion of your account and associated data at any time, subject to our legal obligations to retain certain records.
9. Your Privacy Rights
All users may request access to, correction of, or deletion of their personal information, receive their data in a portable format, and opt out of marketing communications at any time. To exercise any of these rights, contact us at privacy@inhira.com. We will respond within 30 days.
California Residents (CCPA/CPRA)
Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, California residents have additional rights, including the right to know what personal information is collected, used, shared, and sold; the right to delete and correct personal information; the right to opt out of the sale or sharing of personal information (we do not sell or share your data for cross-context behavioral advertising); the right to limit the use of Sensitive Personal Information; and the right to non-discrimination for exercising privacy rights.
Categories of personal information we collect include: identifiers (name, email, phone, IP address); financial information; protected classification characteristics (age, marital status); internet activity; geolocation data (state-level from IP); and sensitive personal information (SSN, government ID, health preferences, financial accounts). In the preceding 12 months, Inhira has not sold any personal information and has not shared personal information for cross-context behavioral advertising purposes.
To submit a CCPA request, email privacy@inhira.com or use the request form in your account settings. We will verify your identity before processing your request and respond within 45 days.
Other State Privacy Laws
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws may have additional rights under their respective state laws, including the right to access, correct, delete, and obtain a copy of personal data, and the right to opt out of targeted advertising, the sale of personal data, and profiling. To exercise any state-specific right, contact privacy@inhira.com.
10. Cookies & Tracking Technologies
We use cookies and similar technologies to enhance your experience. Essential cookies are used for site functionality, security, and authentication (session to 1 year). Functional cookies remember your preferences and form data (1 year). Analytics cookies help us understand usage patterns with anonymized data (2 years). Marketing cookies measure effectiveness with your consent (90 days). You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our Services. We honor Do Not Track browser signals.
11. Third-Party Links & Services
Our Services may contain links to third-party websites, services, or applications that are not operated by us, including links in our blog, email communications, and educational content. We are not responsible for the privacy practices of these third parties. When you click a link to a third-party site, you are subject to that site's privacy policy. Our inclusion of a link does not imply endorsement of the linked site or its practices.
12. Children's Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@inhira.com, and we will take steps to delete such information.
13. Governing Law & Dispute Resolution
This Privacy Policy is governed by the laws of the State of Maryland, without regard to its conflict of law provisions. Any dispute arising from this policy shall first be resolved through good-faith negotiation. If the dispute cannot be resolved within 30 days, either party may pursue resolution through binding arbitration administered by the American Arbitration Association, or in the state or federal courts located in Maryland. Claims will be brought individually and not as part of a class action or representative proceeding.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date, notify registered users by email at least 30 days before changes take effect, and display a notice on our website. Your continued use of our Services after changes become effective constitutes acceptance of the updated policy.
15. Contact
If you have questions about this Privacy Policy or our data practices, contact us at privacy@inhira.com. For general inquiries, contact support@inhira.com.
Inhira®