Privacy Policy

Introduction

Falconbay LLC, doing business as Falcon Bay Services (“Falcon Bay,” “we,” “us,” or “our”) provides digital-estate planning, discovery, administration, recovery, security-cleanup, legacy-management, document-digitization, and related concierge services.

This Privacy Policy explains how Falcon Bay collects, uses, discloses, retains, and protects personal information when you visit our websites, communicate with us, create an account, purchase or use our services, or provide information to us in connection with another person’s digital estate.

Because our services can involve sensitive personal and family information, we seek to collect only information reasonably necessary to provide, secure, and administer the services you request.

Information We Collect

Depending on the service you use and the information you choose to provide, we may collect the following categories of information.

Contact and account information. This may include your name, email address, telephone number, mailing address, account identifiers, communication preferences, and account-security information.

Digital Estate Content. This includes information you ask Falcon Bay to organize, document, preserve, recover, administer, or act upon, such as digital-estate inventories, online accounts, subscriptions, cloud services, domains, devices, social-media accounts, digital files, photographs, correspondence, legacy instructions, family or executor roadmaps, and related records.

Identity, death, and authority information. Where necessary to perform a service, we may collect identity documents, date-of-birth information, documentation used to verify a death, court or estate documents, letters testamentary or administration, powers or authorizations, and other information used to determine whether a person is authorized to request an action.

Information about other people. You may provide information concerning beneficiaries, family members, executors, personal representatives, trustees, attorneys, advisers, trusted contacts, verification contacts, designated recipients, deceased persons, or other third parties. You should provide third-party information only when you have a lawful and appropriate reason to do so.

Financial and asset-related information. We may collect information identifying financial institutions, payment services, rewards programs, digital assets, domains, subscriptions, bills, or other assets and obligations relevant to the requested service. Falcon Bay does not request online-banking passwords, private cryptographic keys, or similar unrestricted access credentials through ordinary intake forms.

Documents and physical records. We may receive documents, scanned records, photographs, incoming mail, and other materials submitted for digitization, discovery, organization, or administration.

Communications and service records. We may collect intake responses, support communications, appointment information, case notes, approvals, instructions, status records, and records of actions requested or performed.

Payment information. Payment-card information may be handled by our payment processor. Falcon Bay generally receives transaction information necessary to administer billing rather than complete payment-card credentials.

Website and device information. We may collect IP address, browser and device characteristics, pages viewed, referring pages, timestamps, security logs, cookies, and similar technical information.

Information We Do Not Intentionally Collect

Falcon Bay is not a health-care provider and does not provide health-related services.

We do not intentionally request or collect medical records, diagnoses, treatment information, genetic information, reproductive-health information, biometric health information, health-app data, or other information for the purpose of identifying or inferring a person’s physical or mental health status.

Please do not submit health information to Falcon Bay unless we specifically request a document that is necessary for a legitimate estate-administration purpose. Where a document contains unrelated medical or health information, we encourage you to redact that information before submission whenever practical.

If we receive health information that is not necessary to provide the requested service, we may delete, redact, or decline to process it.

Particularly Sensitive Information

Some information handled through Falcon Bay may be especially sensitive. We apply heightened data-minimization and access principles to identity documents, authority records, financial information, authentication-related information, private family records, death-related information, and other sensitive Digital Estate Content.

Falcon Bay does not intentionally request plaintext passwords, MFA codes, private cryptographic keys, or recovery codes through ordinary intake forms. Do not send these items by ordinary email or general-purpose intake fields.

If Falcon Bay later offers a dedicated credential-custody or escrow service, that service will be governed by separate security controls, disclosures, and terms.

How We Use Information

We may use personal information to:

• provide, administer, and improve requested services;
• establish and administer customer accounts;
• perform intake and eligibility checks;
• create digital-estate inventories, plans, and instructions;
• verify identity, death, and authority where appropriate;
• communicate with customers and authorized contacts;
• perform approved discovery, administration, recovery, cleanup, digitization, and legacy-management tasks;
• process payments and maintain transaction records;
• maintain service and case records;
• secure our systems and detect fraud, misuse, or unauthorized activity;
• troubleshoot service operations;
• comply with legal obligations;
• establish, exercise, or defend legal claims; and
• carry out other purposes disclosed when information is collected.

Falcon Bay does not sell Digital Estate Content.

Falcon Bay does not use Digital Estate Content for targeted advertising.

Falcon Bay does not use Digital Estate Content to train general-purpose artificial-intelligence models.

Artificial Intelligence and Automated Tools

Falcon Bay may use software or AI-assisted tools for limited operational functions such as document organization, classification, search, drafting, summarization, or workflow support. AI functionality is not part of the approved core AWS architecture described in Falcon Bay’s current Architecture Decision; any production use of a third-party AI provider must be separately approved before customer Digital Estate Content is sent to that provider.

We do not rely on an automated system by itself to establish legal authority, prove a death, or authorize an irreversible estate action.

When Falcon Bay uses a third-party AI or automation provider, we seek to limit the information shared to what is reasonably necessary for the applicable task and to use configurations and contractual safeguards designed to restrict unauthorized retention, training, or reuse.

How We Disclose Information

We may disclose personal information:

• to service providers and processors that help operate our business. Our approved production architecture uses Amazon Web Services for core hosting and infrastructure, including compute, database, storage, encryption/key management, queues, email delivery, secrets management, edge/security services, and operational monitoring; Auth0 is the identity-provider baseline; and Twilio may be used for SMS notifications. We may also use payment, support, analytics, professional-service, and other providers as necessary to operate the service;
• to technology platforms, institutions, registrars, financial institutions, service providers, or other third parties when necessary to perform a customer-authorized service;
• to a customer’s authorized representative, designated recipient, executor, personal representative, trustee, or other appropriately verified person;
• in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction, subject to appropriate protections;
• when required or permitted by law; or
• when reasonably necessary to protect the rights, safety, property, systems, customers, or users of Falcon Bay or others.

We do not sell Digital Estate Content.

Mobile numbers and text-message consent. We use mobile numbers you give us only to send the account-related texts described in our Terms of Service. We do not sell, rent, or share mobile numbers or text-message opt-in data with third parties or affiliates for their marketing or promotional purposes. We share them only with the service providers that deliver our messages (such as our SMS provider), solely to send those messages.

Third-Party Platforms

Digital-estate work often requires interaction with independent third parties such as technology companies, social networks, cloud providers, financial institutions, domain registrars, subscription providers, rewards programs, or other service providers.

Those organizations control their own services, policies, eligibility standards, and response times. Information submitted to them is also subject to their privacy policies, terms, and applicable law.

Data Retention

We retain personal information only for as long as reasonably necessary to provide the requested services, maintain appropriate business and case records, resolve disputes, enforce agreements, comply with legal obligations, maintain security records, and protect against fraud or misuse.

Retention periods may vary based on the type of information, the service involved, whether a case remains open, contractual requirements, legal obligations, and whether information is maintained in backups or security logs.

When information is no longer reasonably needed, we may delete, de-identify, or securely dispose of it.

Security

Falcon Bay uses administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse. Our approved architecture requires TLS for data in transit; managed encryption for RDS databases, S3 document storage, and backups using AWS Key Management Service (KMS); application secrets stored in AWS Secrets Manager; application-layer authorization reinforced by PostgreSQL Row Level Security; audit and authentication event logging; and separated development, staging, and production resources. Authentication and MFA are provided through our identity provider and enforced together with server-side authorization controls.

No online service or storage system can guarantee absolute security. Customers are responsible for using strong authentication on their own devices and accounts and for protecting access to their Falcon Bay account.

These statements describe Falcon Bay’s approved production architecture and required controls. Falcon Bay does not claim that any security measure eliminates all risk, and we will update this Policy if our material security or infrastructure practices change.

Your Privacy Choices

Depending on applicable law and the nature of the information involved, you may request access to, correction of, or deletion of personal information associated with you.

We may need to verify your identity or authority before acting on a request. We may deny or limit a request where required or permitted by law, where another person’s rights are involved, or where information must be retained for security, fraud-prevention, legal, contractual, or recordkeeping reasons.

Requests may be submitted through the contact methods provided on the Falcon Bay website.

Cookies and Similar Technologies

Falcon Bay may use cookies and similar technologies that are necessary for authentication, security, session continuity, preferences, and basic website operation.

If we use non-essential analytics or similar technologies, we will provide appropriate notice and choices where required by law.

We do not intentionally place advertising pixels on sensitive estate-intake, document-upload, authority-verification, or customer-portal pages.

Children

Falcon Bay services are intended for adults. You must be at least 18 years old to create an account or purchase services unless Falcon Bay expressly agrees otherwise in writing for a legally authorized representative.

We do not knowingly solicit personal information directly from children for independent account use.

International Access

Falcon Bay is based in the United States. If you access the services from another country, your information may be transferred to and processed in the United States or other locations where our service providers operate, subject to applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised “Last Updated” date and provide additional notice when required by law.

Contact Us

Questions or requests concerning this Privacy Policy may be sent to info@falconbayservices.com or support@falconbayservices.com, as listed on the Contact page at falconbayservices.com/contact.