/security

Security & privacy

Stashed is an encrypted digital legacy vault. People you nominate receive their package only after your release rules are met. Terms · Privacy

Who can see what

Owner: Full vault and audit log.
Beneficiaries: Nothing until release completes (invite acceptance and role understanding only before then).
Spouse / partner (pre-release): Titles and categories only — no contents, previews, or downloads.
Confirmer / executor: Role-limited actions; not full vault contents until release rules say so.
Stashed staff: Support may see account metadata and release state as needed to help you. Vault file contents follow our encryption and key-custody model (document honestly against Architect — no “we can never read anything” claim unless E2E is shipped).

Encryption & transport

Connections use TLS in transit. Vault data is encrypted at rest. We describe what we actually ship — not slogans.

We do not use phrases like “military-grade” or “unhackable.” If end-to-end encryption is not yet complete for a surface, we say so plainly on this page and in product.

How release is protected

Default check-in every 30 days. After 2 consecutive missed check-ins, a 72-hour waiting period begins (you can cancel while signed in). If someone other than you starts a release, one confirmer must enter a one-time code. You can self-release; an executor can initiate. We audit release-related actions. Death-certificate upload is a later option—not required for MVP unlock.

Primary path: check-in miss → waiting period → confirmer OTP when a non-owner starts release.
Secondary (clearly labeled): owner self-release; executor initiate under the same confirmer rules.
Stashed verifies product rules; it does not legally pronounce death or settle an estate.

Accounts & sessions

Sign-in uses magic link and/or OAuth providers we list in Privacy. Sessions expire on a published lifetime. You can sign out everywhere from settings. Add two-factor authentication when offered in product.

Payments

Stripe processes cards. We do not store full card numbers. See Stripe’s privacy notice and our Privacy Policy for processors.

Export & delete

Billing grace 7 days; soft-lock at 30 days; deletion of vault contents from primary systems at 90 days. See Privacy Policy for backup timing.

Owner-initiated delete asks for a typed confirmation and warns if a cooling delay is active. In-progress releases default to cancel-then-delete, disclosed at confirm time. Export your package from settings while your account is active.

Incidents

If an incident affects your account or vault data, we will notify affected users as required by law and our policies. Contact us at the address below for security reports.

What we won’t claim

We don’t claim legal validity of your documents, a court-proof process, or guaranteed forever access.

Stashed is not a law firm, not estate-planning advice, and not a will or probate service.

Contact

Privacy: privacy@stashed.app
Support: support@stashed.app