Privacy Policy

Transfera ("Transfera", "we", "us") is operated by Transfera Legal Technologies Pvt. Ltd., an estate planning and estate settlement platform built for individuals, families, executors, and enterprise partners in India. This policy explains what personal data we collect through transfera.in and our mobile and web applications, why we collect it, how it is protected, and the choices you have.

Transfera is not a law firm and does not provide legal advice. Documents our platform generates (such as draft Wills) are tools to help you organize your estate; we recommend independent legal review for anything you intend to execute, and our Terms of Service describe this in more detail.

Account information — your name, email address, phone number, and the password you choose (stored only as a salted cryptographic hash, never in plain text).

Estate and family information — details you provide about your assets and liabilities, nominees, executors, and beneficiaries, and documents you choose to upload (identity proofs, death certificates, policy documents, bank statements).

Secure Vault contents — financial and legal information you store for your executor to access after your passing. Vault contents are encrypted; where our zero-knowledge vault design is used, the key to decrypt them is split and escrowed such that Transfera itself cannot read the contents without the conditions you set being met.

Letters to Family — any personal messages you write for named recipients. These are encrypted at rest with a key kept separate from your Secure Vault key, are never shown to your executor, and are permanently deleted from our systems immediately after being emailed to the recipient (or if you delete the draft yourself).

Video attestation recordings — if you use our Will video-attestation feature, we record and store the video, a transcript of what was said, and an automatically generated attestation certificate.

Gmail data (optional, read-only) — if you choose to connect your inbox, see Section 3 below; this is entirely separate from the rest of this section and is subject to additional restrictions.

Usage data — log data such as IP address, browser type, device information, and pages visited, used only to operate, secure, and improve the service.

Transfera offers an optional "Automated Vault Connection" feature that, with your explicit consent via Google's own OAuth sign-in screen, requests the gmail.readonly scope. We request only read-only access — Transfera cannot send, delete, or modify any email, and cannot create forwarding rules on your account.

With this access, Transfera periodically searches your inbox for messages that look like a bank or financial statement (matching on sender and subject patterns such as "account statement" or "bank statement", combined with the presence of an attachment) and downloads only the attachments of those specific messages, so they can be organized into your Secure Vault.

Transfera's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We do not read, use, or share any part of your inbox beyond the bank-statement-matching messages described above.
• We never use Gmail data for advertising or marketing purposes, and never sell it.
• We never use Gmail data to train generalized AI or machine-learning models.
• Gmail data is only transferred to the extent necessary to provide the vault-organization feature itself (for example, to our encrypted storage provider), and only under contractual confidentiality and data-protection obligations.
• Only automated systems — never a human reviewer — access your Gmail data in the ordinary course of providing this feature. A human may access it only with your explicit consent, to investigate abuse or a security incident, to comply with applicable law, or for our own internal operations where the data has been aggregated and anonymized.

You can revoke Transfera's access to your Gmail account at any time from your Google Account permissions page, or by disconnecting the Automated Vault Connection from within Transfera. Revoking access does not delete attachments we have already stored in your vault; you can delete those separately from your dashboard.

• To provide the core service: Will drafting, Secure Vault storage, nominee and executor management, video attestation, Letters to Family, and automated estate-settlement assistance for executors.
• To verify death certificates and other documents you or a claimant submit, including automated checks and, where flagged for review, manual review by our team.
• To notify nominees, executors, and named letter recipients at the appropriate time, as the platform's design requires.
• To communicate with you about your account, security, and service updates.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To comply with legal obligations under Indian law.

Some features use automated systems, including third-party AI service providers bound by contractual confidentiality and data-protection terms, to help draft documents, answer questions grounded in your own case information, or transcribe and validate a video attestation. These providers process the minimum data necessary to perform that specific task and do not use it to train their own general models.

Your data is stored and processed in India, consistent with the Digital Personal Data Protection Act, 2023 (DPDP Act). Sensitive data — including Secure Vault contents, Letters to Family, and uploaded documents — is encrypted with AES-256-GCM, both at rest and in transit (TLS). Passwords are never stored in plain text.

Access to production systems is restricted to authorized personnel on a need-to-know basis, and all access is logged.

We retain your account and estate data for as long as your account is active, or as needed to provide the service to you and any executor or nominee you have designated. Letters to Family are deleted automatically the moment they are delivered (see Section 2). You may request deletion of your account and associated data at any time by contacting us at transfera.in@gmail.com, subject to any retention we are legally required to maintain (for example, records relevant to an in-progress estate settlement an executor is relying on).

Subject to applicable law, including the DPDP Act, you have the right to access, correct, and request deletion of your personal data, to withdraw consent for optional features (such as the Gmail connection) at any time, and to lodge a complaint with the relevant data protection authority. To exercise any of these rights, contact us at transfera.in@gmail.com.

We do not sell your personal data. We share data only with: service providers who process it on our behalf under contractual confidentiality obligations (such as cloud hosting and storage, and the AI service providers described above); your designated nominees or executors, strictly as the platform's design requires (for example, granting Secure Vault access to a verified executor after a death certificate is verified); and when required by law, regulation, or valid legal process.

Transfera is intended for adults (18 years or older) managing or settling an estate. We do not knowingly collect personal data from children.

We may update this policy from time to time. We will post the updated version here with a revised "Last updated" date, and for material changes, we will make reasonable efforts to notify you directly.

Questions about this policy or your data can be sent to transfera.in@gmail.com.