Skip to content
Legal

Privacy policy

Last updated: July 28, 2026

Introduction

EstateView.com and estateviewai.com ("we," "our," or "us") are committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our estate planning software and its AI-assisted features.

Information We Do Not Store

We do not store the content you submit through our services. This includes your prompts, generated outputs, the contents of documents you upload, and the filenames of those documents. Content you submit for processing is transmitted directly to third-party AI service providers and is not retained by estateview.com and estateviewai.com.

With the limited exception of (i) the pseudonymized usage metrics described in "Usage Metrics and Abuse Prevention" below and (ii) the account, subscription, and billing information described in "Subscription, Billing, and Marketing Communications" below, we do not store, retain, or maintain the content you submit through our services or other personal information on our servers.

Information Collection and Use

Information You Provide

When you use our services, you may provide:

  • Content prompts and instructions
  • Generated content requests
  • Account credentials (if applicable)

This information is processed in real-time and transmitted to third-party AI providers. With the exception described in "Usage Metrics and Abuse Prevention" below, we do not log, store, or retain this information.

Third-Party AI Services

We utilize enterprise accounts with the following third-party AI services to generate content:

When you use our services, your data is processed according to these providers’ respective privacy policies and terms of service. We utilize enterprise-level API access with these providers, which may offer additional data protection provisions compared to consumer accounts. Important: While we do not retain your data, these AI service providers may process and temporarily store your inputs according to their own data handling practices. We recommend reviewing their privacy policies for complete information about how your data is handled.

Third-Party Web Search

For certain AI features, our service may perform real-time web searches to retrieve current information such as regulatory guidance, news, or publicly available information about persons or companies. For these searches we may use the following third-party search infrastructure provider:

When a search is performed, we transmit to Tavily the search query and, where the AI retrieves the full text of a result, the URL of the requested page. We do not transmit your prompts, the contents of documents you have uploaded, or AI-generated responses to Tavily.

Our account with Tavily is configured so that queries are not retained or used to improve their services.

Web search can be enabled or disabled at any time in your account settings.

Third-Party Case Law Database

For certain AI features, our service may search a third-party legal research database to find relevant case law and verify citations. For these features we use the following provider:

When the AI searches for case law, we transmit to CourtListener the search terms generated by the AI. When the AI verifies citations in its response, we transmit the response text so that each citation can be checked against CourtListener’s database. We do not transmit your prompts or the contents of documents you have uploaded to CourtListener.

Per CourtListener’s published policy, usage logs are deleted automatically at 12 weeks where possible.

Case law search can be enabled or disabled at any time in your account settings.

Subscription, Billing, and Marketing Communications

The "Information We Do Not Store" commitment above applies to the content you submit through our services. It does not apply to the account and billing information you provide when you register for or maintain a paid subscription, which we and our providers necessarily retain to operate your subscription and, where applicable, to communicate with you.

Payment processing. Paid subscriptions are processed by Stripe, our payment processor. When you subscribe, Stripe collects and stores your payment and billing information under its own terms and privacy policy. We do not store full payment card details on our servers. Marketing and customer relationship management. To send product updates, service announcements, and marketing communications to our subscribers, we use ActiveCampaign, a marketing automation and CRM provider. We synchronize a limited set of subscriber account information from Stripe to ActiveCampaign, consisting of name, email address, and subscription details (such as plan and status). This information concerns our subscribers and account holders; it is not the content you submit through the services, and we do not transmit your prompts, uploaded documents, generated outputs, or calculator inputs to Stripe or ActiveCampaign.

ActiveCampaign retains this information until it is deleted or your account is closed, and engages its own subprocessors to provide its services, which currently include Amazon Web Services, Cloudflare, Snowflake, Zendesk, Zight, Twilio, OpenAI, and Amazon Bedrock, along with affiliated ActiveCampaign entities located outside the United States. ActiveCampaign maintains a current list of its subprocessors at https://www.activecampaign.com/legal/subprocessors We have executed a Data Processing Addendum with ActiveCampaign governing this processing.

Marketing emails include an unsubscribe link, and you may opt out of marketing communications at any time without affecting service-related and transactional messages necessary to administer your subscription.

Automatically Collected Information

We may collect minimal technical information through standard web technologies:

  • Browser type and version
  • Device information
  • IP address (for security purposes only)
  • Usage analytics (via cookies)
  • Pseudonymized AI usage metrics (see "Usage Metrics and Abuse Prevention" below)
This information is used only for service operation, security, billing, and abuse prevention.

Usage Metrics and Abuse Prevention

To support billing, capacity planning, and the detection and prevention of abuse, we collect a limited set of pseudonymized, aggregate usage metrics. For each user, on each day, these metrics may include:

  • A pseudonymized user identifier (a one-way HMAC hash of your account identifier, computed using a secret key)
  • The date of usage
  • The AI provider used (e.g., OpenAI, Google, Anthropic)
  • The model used
  • Aggregate cost incurred
  • Request count

We do not include the content of your prompts, the content of generated responses, the contents of documents you submit, or document filenames in these metrics.

Pseudonymization, not anonymization. The user identifier stored in our metrics is a one-way hash and cannot be reversed to identify you from the hash alone. However, because we retain the secret key used to generate the hash, we are able, when necessary, to compute the hash for a specific known user account and match it against our metrics. For this reason, we describe these metrics as pseudonymized rather than anonymous, and we treat them as personal data for purposes of applicable data protection laws (including the GDPR, where applicable). When we may match metrics to a specific user. We will only attempt to associate usage metrics with a specific user account in the following circumstances:
  • Investigating suspected abuse, including (without limitation) generation of excessive cost, automated or scripted usage inconsistent with normal human use, and violations of our terms of use
  • Responding to a billing dispute initiated by the user
  • Responding to a lawful request from a governmental or judicial authority

Possible outcomes of an abuse investigation may include rate limiting, suspension or termination of the account, and recovery of costs in accordance with our terms of use.

Access and authorization. The secret key used to generate these hashes, and the ability to query the metrics database, are restricted to authorized personnel. Decisions to associate metrics with a specific user account are governed by an internal policy.

Cookies and Tracking Technologies

The marketing pages set no cookies. The application itself — including its not-found page and the signup page — uses cookies necessary for the site to function, and loads Google Analytics, which sets its own cookies to measure aggregate usage. We do not send client data or analysis contents to Google. You can disable cookies through your browser settings, or block analytics with any standard browser or extension control, though this may limit some features.

Analytics: We may use analytics services (e.g., Google Analytics) to understand site usage. These operate under their own privacy policies.

Data Sharing

We do not sell, trade, or rent your information to third parties.

Third-Party Processors: Content you submit is transmitted to our AI service providers (OpenAI, Google, and Anthropic) for processing. Search queries generated for the features described in "Third-Party Web Search" above are transmitted to Tavily. Case-law search queries and AI-generated response text used for citation verification are transmitted to CourtListener for the features described in "Third-Party Case Law Database" above. These providers operate under their own privacy policies and data processing agreements. Our enterprise agreements with the AI service providers include:
  • Commitments not to use your data for model training (where applicable)
  • Enhanced security and data protection measures
  • Business Associate Agreements (where applicable)
Subscription, Payment, and Marketing Processors: When you maintain a paid subscription, we share a limited set of subscriber account information (name, email address, and subscription details) with Stripe for payment processing and with ActiveCampaign for marketing and customer relationship management, as described in "Subscription, Billing, and Marketing Communications" above. We do not sell or share your personal information for cross-context behavioral advertising. Legal Requirements: We may disclose information if required by law, court order, or governmental request.

Data Security

While we do not store the content you submit, we implement security measures to protect data during transmission and to protect the limited metrics described above:

  • SSL/TLS encryption
  • Secure API connections to OpenAI, Google, and Anthropic
  • Regular security assessments
  • Enterprise-grade authentication and access controls
  • Restricted access to the secret key and metrics database used for usage metrics

Data Retention

We do not retain the content of your sessions. Once your session ends, transmitted content is not stored on our servers.

Pseudonymized usage metrics, as described in "Usage Metrics and Abuse Prevention," are retained for 12 months for the purposes of billing, capacity planning, and abuse prevention, after which they are deleted or further aggregated such that they can no longer be associated with an individual user.

Third-Party Retention:
  • OpenAI: Enterprise API data may be retained for up to 30 days for abuse monitoring, then deleted (unless otherwise specified in enterprise agreements)
  • Google: Data retention policies vary; review Google’s privacy policy for details
  • Anthropic: Enterprise API data retention policies apply; review Anthropic’s privacy policy for details
  • Tavily: Per our account configuration, Tavily does not retain queries or use them for service improvement; review Tavily’s privacy policy for details
  • CourtListener: Per their published privacy policy, usage-related logs are deleted automatically when 12 weeks old where possible; review CourtListener’s privacy policy for details
  • Stripe: Payment and billing records are retained in accordance with Stripe’s policies and applicable financial and legal recordkeeping requirements; review Stripe’s privacy policy for details
  • ActiveCampaign: Subscriber contact and subscription data is retained until deleted or your account is closed; archived contacts may persist in backups for a limited period per ActiveCampaign’s data retention schedule; review ActiveCampaign’s privacy policy for details
Please consult each provider’s privacy policy for their current data retention practices.

Users in the European Economic Area and United Kingdom

If you are located in the European Economic Area or the United Kingdom, the pseudonymized usage metrics described above are considered personal data under the GDPR and UK GDPR. We process this data on the basis of our legitimate interests in operating, securing, and preventing abuse of our services, and in accordance with our contractual obligations to you. You may have rights to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. To exercise any of these rights, please contact us at estateview@gassmanpa.com.

Third-Party Service Provider Information

OpenAI
  • Services Used: ChatGPT API
  • Data Processing: Enterprise API terms apply
  • Privacy Policy: https://openai.com/privacy
  • Contact: privacy@openai.com

Google
Anthropic
Tavily
  • Services Used: Tavily Search and Extract APIs
  • Data Processing: Account configured to disable use of query data for service improvement
  • Privacy Policy: https://tavily.com/privacy
  • Contact: support@tavily.com

CourtListener
  • Services Used: CourtListener Case Law Search, Citation Lookup, Opinion Retrieval, Citation Network, Judge Lookup, and Related Cases APIs
  • Data Processing: Usage-related logs deleted automatically at approximately 12 weeks per CourtListener’s published policy
  • Privacy Policy: https://www.courtlistener.com/terms/#privacy
  • Contact: https://www.courtlistener.com/contact

Stripe
  • Services Used: Payment processing for paid subscriptions; source of subscriber and subscription data synchronized to ActiveCampaign
  • Data Processing: Stripe terms and privacy policy apply
  • Privacy Policy: https://stripe.com/privacy
  • Contact: https://support.stripe.com

ActiveCampaign