Privacy Policy

Updated as of October 2022

Who we are

Our website address is www.second-key.com.

Cookies

If you visit our login page, we may set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Data we ask for

We ask for your name, birthdate, and contact information. We also ask for the name, birthdate, and contact information for each Steward. We may also ask for other identifying information, such as a copy of a government-issued identification card. This information helps us verify whether a Triggering Event has occurred and helps us verify the identify of Asset owners and Stewards during a Recovery Process. We keep this information for the duration of the time that a plan is maintained. In our discretion, we may destroy or retain such information following the termination of a plan or a Recovery Process. We do not intend to keep information indefinitely, but believe it is in a user’s best interest for us to have flexibility in certain events, such as if a Triggering Event occurs while a plan is still in effect, but a Steward is unable to complete a Recovery Process prior to the end of the then-current term of a subscription plan and the termination of the plan. Your information may be shared with your Stewards, and information about you and your Stewards may be shared with Professional Stewards. For Professional Stewards, we also collect information about any firm or company that they are associated with, along with any internal working group that they are a part of. Any such firm or company may retain the right to make decisions with respect to any information of a Professional Steward associated with them.

Data others ask for

Content on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

We work with Stripe to accept payments and manage subscriptions. They will only use your payment data in accordance with the permissions you grant, and based on their Privacy Policy. You can cancel at any time. We also work with Stripe and other partners to conduct identity verification online. These partners help us confirm identities by conducting one or more of the following checks: (a) capture images of the front and back of your government-issued photo ID and review to ensure that the document is authentic; (b) capture photos of your face and review to confirm that the photo ID belongs to you, including using distinctive physiological characteristics of your face (known as biometric identifiers) to match the photos of your face with the photo on the ID document; (c) collect your name, date of birth, and government ID number, and validate that it is real by checking this information against a global set of databases to confirm that it exists; (d) ask challenge questions based on public records searches. Our partners will ask for your consent before collecting and using your information. They will only use your verification data in accordance with the permissions you grant before starting the verification process, and based on their respective privacy policies. Our partners collect this information as well as advanced fraud signals and information about the devices that connect to their services, and share this information with us and also use this information to operate and improve the services they provide, including for fraud detection. You may also choose to allow our partners to use your data for other purposes.

What rights you have over your data

If you have a subscription plan with us, you can request to receive an exported file of the personal data we hold about you, excluding any Assets that you have provided to us. Assets provided to us are stored exclusively in encrypted format and will only be shared with designated Steward(s) at the appropriate time in a Recovery Process. If you would like to receive an exported file of the Assets you have provided to us, you will need to coordinate with your designated Stewards. You can also request that we erase any personal data that we hold about you, including Assets that you have provided to us. This does not include any data we keep pursuant to normal retention policies for administrative, regulatory, legal, or security purposes.