Privacy Policy

1. Who we are

Project Succession (“we”, “us”, “our”) operates the Project Succession estate recovery platform, accessible at this website and via our API. We are committed to protecting your personal data in accordance with the Jamaica Data Protection Act (JDPA).

2. Data we collect

We collect the following categories of personal data:

• Account data: Full name, email address, phone number, and password (stored as a cryptographic hash).
• Estate data: Details about the deceased, including full name, date of birth, date of death, parish, and probate number.
• Asset data: Financial accounts, property, insurance policies, and other assets you record in the platform.
• Document metadata: Names and descriptions of documents you upload. Document contents are stored securely and not analysed.
• Usage data: IP address, browser type, pages visited, and actions taken within the platform, used for security and product improvement.

3. How we use your data

We use your personal data to:

• Provide and operate the Project Succession platform
• Search financial institution databases for unclaimed funds matching estate profiles
• Send transactional emails (estate invitations, password resets)
• Detect and prevent fraud and unauthorised access
• Comply with legal obligations under Jamaican law

We do not sell your personal data to third parties.

4. Legal basis for processing

Under the JDPA, we process personal data on the following legal grounds:

• Consent — you consent to processing when you register and explicitly agree to our Terms of Service and this Privacy Policy.
• Contract — processing is necessary to provide the service you have contracted for.
• Legitimate interests — security monitoring and fraud prevention.

5. Data sharing

We share data only with service providers necessary to operate the platform (cloud hosting, email delivery). All sub-processors are contractually bound to protect your data. We do not share estate or deceased-person data with any third party other than those you explicitly invite to the estate.

6. Data retention

Account data is retained for the lifetime of your account. Estate data is retained for seven (7) years after an estate is marked closed, to satisfy record-keeping requirements under Jamaican succession law. You may request earlier deletion; we will comply unless a legal retention obligation prevents it.

7. Your rights under the JDPA

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your data (subject to legal retention obligations)
• Withdraw consent at any time (without affecting prior processing)
• Lodge a complaint with the Office of the Information Commissioner of Jamaica

To exercise any of these rights, contact us at privacy@succession.jm.

8. Security

All data is encrypted in transit (TLS 1.2+) and at rest. Passwords are stored using bcrypt hashing. Access to estate data is restricted by role-based permissions. We conduct periodic security reviews and log all access for audit purposes.

9. Changes to this policy

We may update this policy from time to time. We will notify you by email and by posting a notice on the platform at least 14 days before material changes take effect.

10. Contact

For privacy enquiries, write to privacy@succession.jm. We will respond within 30 days.