Privacy Policy

1.1 AfterWill (“AfterWill”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website, platform, and related services (the “Services”).

1.2 We handle personal data in accordance with the Personal Data Protection Act 2012 of Singapore (the “PDPA”). This Policy applies to personal data in our possession or under our control, including personal data collected on our behalf by third parties we engage to provide the Services.

1.3 AfterWill is built on a privacy-by-design principle: we ask for as little personal data as possible, and we ask for identifying details only when you choose to use features that require them. By using the Services, you consent to the collection, use, and disclosure of your personal data as described in this Policy.

2.1 “Personal data” means data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which we have or are likely to have access.

3.1 Anonymous Drafts. When you begin a will draft without an account, you may use nicknames and labels (for example, “older son” or “OCBC account”) instead of real names or identifying details. Information entered in an Anonymous Draft is not intended to identify any individual, and we ask you not to enter real names, NRIC numbers, or contact details at this stage.

3.2 Account information. When you create an account, we may collect your name, email address, and authentication information from your chosen sign-in provider (for example, Google Sign-In).

3.3 Will and estate information. When you choose to finalise your will, we collect the information needed to prepare it, which may include your full name, NRIC or other identification details, residential address, and details of your assets, beneficiaries, executor, guardians, and similar matters. This may include personal data relating to other individuals (see Clause 4).

3.4 Payment information. When you make a payment, our payment processor collects your payment details. We receive only limited transaction information (such as a payment reference, amount, and date) and do not store your full payment card or bank account details.

3.5 Technical information. We may automatically collect device and usage information, such as your IP address, browser type, operating system, and how you interact with the Services.

4.1 If you provide personal data about other individuals (for example, beneficiaries, executors, guardians, or witnesses), you confirm that you are authorised to provide it and that you have obtained their consent (or that an applicable exception under the PDPA applies) for us to collect, use, and disclose it as described in this Policy.

We may collect personal data:

• when you use the Services and enter information;
• when you create or sign in to an account;
• when you communicate with us by email or other means;
• when you make a payment; and
• automatically, through cookies and similar technologies.

Depending on your interactions with us, we may use your personal data to:

• provide, operate, and maintain the Services, including generating your draft will;
• create and manage your account;
• process payments and maintain payment records;
• respond to your enquiries, requests, feedback, and complaints;
• facilitate, where you choose, the review or witnessing of your will by a Partner Firm;
• send you service-related communications and, where you have consented, updates and newsletters;
• improve and develop the Services, including through analytics carried out on anonymised data;
• maintain the security and integrity of the Services and detect, prevent, and address fraud or misuse; and
• comply with applicable laws, regulations, and lawful requests by public authorities.

We may disclose your personal data to:

• service providers who help us operate the Services (for example, cloud hosting and IT providers);
• our payment processor, to process transactions;
• a Partner Firm, where you choose to engage legal review or witnessing services;
• our professional advisers, where necessary;
• government or regulatory authorities, or other parties, where required or permitted by law, or to protect our rights or the safety of our users or the public; and
• a successor entity, in connection with a merger, acquisition, reorganisation, or transfer of our business or assets.

We do not sell your personal data.

8.1 We use cookies and similar technologies to operate the website, remember your preferences and draft session, and understand how the Services are used.

8.2 We limit our use of cookies to what is reasonably necessary and use analytics in a privacy-conscious manner consistent with guidance issued by the Personal Data Protection Commission. You can configure your browser to refuse cookies, but some features of the Services may not function properly if you do.

9.1 Some of our service providers may store or process personal data outside Singapore. Where we transfer personal data overseas, we take reasonable steps to ensure that it receives a standard of protection comparable to that under the PDPA, in accordance with the Transfer Limitation Obligation.

10.1 We retain personal data for as long as your account remains active, or as required or permitted by applicable law. We do not delete personal data except in the following circumstances:

• you request deletion of your personal data or account through the "Delete my account" function in your settings, in which case we will action your request within 90 days; or
• deletion is required or permitted under applicable law, including the Personal Data Protection Act 2012 (Singapore).

11.1 We implement reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access, disclosure, alteration, or destruction. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

12.1 We maintain procedures to manage suspected data breaches. Where a data breach is likely to result in significant harm to affected individuals, or is of a significant scale, we will notify the Personal Data Protection Commission and affected individuals as required under the PDPA.

13.1 You may request access to, or correction of, the personal data we hold about you. We may charge a reasonable fee for an access request and will respond within the timeframes required under the PDPA. In some cases we may be unable to provide access (for example, where doing so would affect the privacy of others or breach confidentiality), and we will give you reasons where required.

13.2 You may withdraw your consent to our collection, use, or disclosure of your personal data at any time by contacting our Data Protection Officer. If you withdraw your consent, we may be unable to continue providing the Services to you. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal, or any processing that we are required or permitted to carry out under applicable law.

14.1 The Services may contain links to third-party websites and services that are not operated by us. We are not responsible for their privacy practices, and we encourage you to review their privacy policies before providing any information.

15.1 The Services are intended for individuals who are at least 21 years of age, which is the minimum age to make a will in Singapore. We do not knowingly collect personal data from individuals under that age for the purpose of making a will.

16.1 We may update this Policy from time to time. We will post the updated Policy and indicate the date on which it was last updated. Your continued use of the Services after the updated Policy takes effect constitutes your acceptance of it.

17.1 We have appointed a Data Protection Officer (DPO) to oversee our compliance with the PDPA. If you have any questions, requests, or complaints regarding your personal data or this Policy, please contact our DPO at dpo@afterwill.sg.

17.2 If we are unable to resolve your concern to your satisfaction, you may contact the Personal Data Protection Commission of Singapore.

18.1 This Policy is governed by and construed in accordance with the laws of Singapore.