WhatNow

Collection of Your Personal Information

We collect personal data based on how you use the WhatNow Platform and the choices you make, ensuring compliance with legal obligations like HIPAA for healthcare-related data. Information you provide directly: When you create an account or build your end-of-life plan, we collect details such as your name, email address, phone number, and specific planning preferences (e.g., healthcare directives or estate details). For users opting for family-shared accounts, you may provide details about designated family members. For private accounts, access protocols are set for survivors.

Information collected automatically: We gather data like your IP address, browser type, and usage patterns (e.g., pages viewed or links clicked) to enhance your experience and secure the Platform.

Third-party sources: We may supplement data with information from trusted third parties, such as demographic data providers or public records, to improve personalization, always adhering to strict privacy standards.

Use of Your Personal Data

WhatNow uses your data to deliver a secure and personalized experience, including:

• Creating and managing your end-of-life plans, whether shared with family or kept private with survivor access protocols.
• Enhancing Platform security, particularly for HIPAA-compliant storage of Protected Health Information (PHI).
• Improving user experience through analytics and tailored features.
• Processing transactions, such as subscription payments for premium features.
• Sending essential notifications (e.g., account updates, security alerts) and, with your consent, promotional updates about new features or services.

Security and HIPAA Compliance

Your data's safety is our priority. WhatNow uses Supabase, a SOC 2 Type 2 and HIPAA-compliant database, ensuring robust protection for sensitive information like PHI. Data is encrypted at rest with AES-256 and in transit with TLS, with access restricted through Row Level Security, role-based permissions, and multi-factor authentication. Regular backups, penetration testing, and DDoS protection further safeguard your information.

Sharing of Your Personal Data

WhatNow does not share your personal data with outside parties except as necessary to provide our services (e.g., with secure payment processors or Supabase for data storage) or as required by law. For family-shared accounts, data is accessible to designated family members during planning. For private accounts, data remains confidential until a verified survivor follows the designated access protocol post-mortem.

Retention and Access to Your Personal Data

We retain your data only as long as needed to fulfill your end-of-life planning, comply with legal requirements, or resolve disputes. You can access or update your information via the "My Account" section of the Platform or by contacting us at privacy@whatnow.com.

Choice and Preferences

You control your data. You can opt out of marketing emails by adjusting preferences in your account or emailing privacy@whatnow.com. For cookies, you can modify browser settings, though this may impact Platform functionality.

Data Privacy Framework and International Transfers

WhatNow complies with the EU-U.S. Data Privacy Framework (DPF) and uses Standard Contractual Clauses (SCCs) for data transfers from the EEA, UK, or Switzerland to the U.S., ensuring your data is protected globally.

Contact Information

For privacy concerns, questions, or to exercise your rights, contact us at privacy@whatnow.com or by mail at Attn: Privacy, WhatNow, Inc., 8133 OH-48, Maineville, Ohio 45039 United States. For EU/EEA and Swiss residents, our data protection representative can be reached at the same email or via support@whatnow.one