Everian is a web-based service. We store only as much data as is necessary to provide our services. That includes your name, e-mail address, business name, postal address, timezone, some device information (like browser name and version and IP address).
file containing sensitive personal information (such as a death certificate or identification), that file is never visible to any of our customers (including you). We encrypt this file as soon as the file is uploaded, and we only retain an electronic copy of the file until we have completed the services you’ve purchased. Then the file (and any personally identifiable information extracted from the file) is permanently deleted from our systems.
We never share your data with outside third-parties except as necessary to deliver our services. For instance, we share information with the consumer credit reporting agencies (Equifax, Experian and TransUnion) to place notification of death on the deceased’s credit files.
We may disclose your information in response to subpoenas, court orders, or other legal requirements; to exercise our legal rights or defend against legal claims; to investigate, prevent, or take action regarding illegal activities, suspected fraud or abuse, violations of our policies; or to protect our rights and property.
In some cases, we may request access to your personal data stored by other companies. This can make the Everian service easier to use. For instance, Everian allows users to log in with their Google or Microsoft accounts. When you select this login option, we have access to some information you’ve shared with those companies, including your name and e-mail address.
We remove data personal information from our systems as soon as it is no longer needed. For death certificates and personal identification documents (and any information extracted from those documents), personally-identifiable information is deleted from our systems as soon as we have delivered our services. We retain the name of the deceased and the name and e-mail address of the next-of-kin or executor to keep past orders organized.
If you would like to permanently delete your account (and all information associated with it), contact Everian customer support. The content of deleted accounts (including the user name, e-mail address and order history) is removed on our servers. However, some account data (including your e-mail address) may exist in our backups or application logs.
We offer opt-in services, including some services which use e-mail communication. We may also send occasional updates about Everian’s services. You can subscribe or unsubscribe at any time from the services offered by Everian.
Otherwise, we will only send you email for the following purposes:
- Notifying you of important account-related matters, such as security or billing problems;
- Sending you updates as Everian completes delivery of services;
- Reminding you (if you are a next-of-kin/executor) of steps that are beyond those Everian we offers (such as e.g., a reminder to file a tax return on behalf of the deceased);.
- Notifying you when we can’t process your order (for instance, if an image of a death certificate is corrupt or illegible);
- Notifying you of changes in our service.
Because security of your data is important, we only store sensitive information when it’s needed to deliver our services. We store all sensitive information in a manner that exceeds industry standards for administrative, physical and technical information security.
The sensitive data we collect includes falls into three categories:
Your Personal Information: Your personal information includes your name, contact information (such as e-mail address or telephone number), and information about the device(s) you use to access our services. This information is stored securely, is never shared with partners unless you explicitly request it, and is deleted from our systems when your account is closed.
Information from Personal Documents: Death certificates and personal identification documents contain an individuals name and additional identifying information such as Social Security Number, date and place of birth, and parents’ names. This information is stored securely (as described below), and all identifying information other than name and date of death are deleted from our systems after we have delivered our contracted services. The deceased’s name is retained for five years, or until the company that uploaded the death certificate terminates their relationship with Everian.
Payment information:: Payment information is necessary to bill our customers for services we’ve provided. This includes credit card numbers and expiration dates. Although payment information is entered into Everian’s user interface, the data is never available to Everian. We use Stripe to handle payment information storage and payment processing. We selected Stripe because of their dedication to customer data security. You can see Stripe’s security policy here.
We have no plans to sell our company, but plans can change. We reserve the right to sell to, buy, merge with, or partner with other businesses. In such transactions, user information may be among the transferred assets. If it is, we will state so publicly, and offer you the opportunity to delete your account.
This policy was last modified on 29 November, 2017.