At Will Buddy, we collect information necessary to provide our AI-powered will creation service:
Name, email address, contact details, and billing information. If you ask for a free will guide, we collect your first name and email, set up a WillBuddy account for you, and send you the guide. When you ask for a free guide, we also email you tips and offers to help you get your will done, for up to a year. You can unsubscribe in one tap from any of those emails. (If you asked between 6 and 8 October 2026 and didn't tick the box for tips and offers, we don't send you these.)
Personal details, beneficiary information, asset details, and preferences
Platform interactions, AI chat interactions, and document revisions
IP address, browser type, device information, and usage analytics, including where you first came from and your approximate state. If you arrived from a Google ad, we keep Google's click reference with your account so we can tell Google Ads when an ad led to a sign-up or purchase; we do not send Google your name, email or will. When you ask for a free guide, we also record with your request your cookie-banner choice and which ad (if any) brought you, so we can count our own results. We don't share this.
We use your information to:
Your will documents and personal information are encrypted in transit (TLS) and at rest. We implement industry-standard security measures including:
Data protected with TLS in transit and encryption at rest
Regular backups and redundancy systems
Protections applied across our systems and accounts
Strict team member access limitations
Continuous security monitoring systems
If you have questions about this Privacy Policy or how we handle your data, please contact us:
Email: team@willbuddy.com.au
For: Questions about your information, and requests to see, correct or delete it
Our AI technology processes your personal information to generate customized will documents. Here's how it works:
Our AI analyzes your personal details, family relationships, and asset information to draft a will for your state or territory's law.
The AI makes recommendations about will structure and legal clauses based on your inputs. You maintain full control and can review, modify, or override any AI suggestions.
We don't use your information to train AI models.
After your will is drafted, an automatic AI review suggests anything you might add. No person or lawyer at WillBuddy reviews your will. Nothing changes without your OK. If something looks wrong, email team@willbuddy.com.au.
If you use the WillBuddy app in ChatGPT, this is what happens to your information.
Your conversation in ChatGPT, and everything you type there, is handled by OpenAI under OpenAI's own terms and privacy policy, not ours. WillBuddy never receives the conversation itself, only the answers the app sends, described below.
Structured will-planning answers only: your state or territory; whether you live in Australia and are 18 or over; your relationship status; your name, and the names of your partner, your children, your executors and guardians, and the people or charities you want to inherit, with how they are related to you; whether each child is under 18; who receives the rest of your estate, in what shares, and the age children inherit at; the kinds of assets you have, such as a home or super, and how they are held; and yes-or-no answers, such as whether you have pets, a blended family, a family conflict, someone you plan to leave out, significant debts, property overseas, or someone who relies on you for long-term support. The app never asks for addresses, dates of birth, asset values, account numbers or health details, and it has no place to put them.
For two things. First, to check your answers: WillBuddy works out what is complete, what is missing and what may need extra care, and sends that back to ChatGPT. We don't keep the answers from a check, only a count with your state or territory and the kinds of topics flagged, such as superannuation, and no names. Second, only if you ask to continue on WillBuddy and agree to your answers being sent, to let you carry on in your browser without answering again.
When you agree to continue, we store your answers encrypted in our database in Sydney, Australia (Supabase), and ChatGPT gives you a link that works once and expires within an hour. When you open the link, your answers move into a temporary WillBuddy guest session and the copy we received from ChatGPT is deleted. If the link is never opened, your answers are deleted after 24 hours, when our daily clean-up next runs, so within 2 days. A guest session you don't save with your email is deleted, with your answers, after 30 days, when our automatic clean-up next runs. Because the answers are stored encrypted, any copy left in a database backup stays encrypted until that backup expires.
A record that a link was made and whether it was opened, with your state or territory, the kinds of topics flagged, and the WillBuddy guest session it became. For 24 hours we also keep a scrambled, one-way form of the anonymous user and conversation IDs ChatGPT gives us, only to stop repeated or excessive requests and to make sure a retried request does not create a second link; our daily clean-up then deletes them. These records contain no names or answers.
OpenAI runs ChatGPT. What WillBuddy sends back to the app, such as the result of a check and your link, goes to OpenAI (United States) so ChatGPT can show it to you, and OpenAI handles it under its own terms. Fly.io hosts our servers in its Sydney region, including the small service that connects ChatGPT to WillBuddy; that service passes your answers on without storing them and logs no names or answers. Supabase stores the encrypted answers in Sydney. No one else receives your answers from the app. Once you continue on WillBuddy, the rest of this policy applies, including the providers listed under Data Sharing below.
Some answers, such as a partner's name, a charity you choose, or whether someone relies on you for long-term support, could reveal something sensitive, such as your sexuality, your religious or political views, or a family member's health. Each check sends your answers to WillBuddy; we use them only for that check and don't keep them. We store your answers only after you agree to continue. You can leave out anything you would rather not share in ChatGPT and add it on WillBuddy's own pages instead.
Once you open your link, you can see and change every answer on the "Check your will" page. To ask what we hold about you, to correct it, or to ask us to delete it, email team@willbuddy.com.au. For the ChatGPT conversation itself, see OpenAI's privacy policy.
If a friend shares their WillBuddy link with you, or you share yours, this is what we keep.
If you open WillBuddy from a friend's link, your browser keeps the link's code for 30 days (in this site's storage on your device), so a sign-up later can be counted for your friend. The code identifies the friend who shared it, not you. We also note that your visit came from a friend's link, but not which friend. Clearing this site's data in your browser removes the code.
If you make an account after opening a friend's link, your account records which customer referred you and when. We use it to work out your friend's discount and to count how many people find us through friends. We keep it while your account exists. If you'd rather not be counted, email team@willbuddy.com.au and we'll remove it.
The person who referred you sees how many of the people they referred have a plan that counts, and their own discount, and we email them when their discount changes. They don't see your name, your email or anything in your account. But if you're the only person they referred, they may be able to tell that you have a plan, and when it stops counting.
To stop misuse, we check with our payment provider, Stripe, whether a referred friend's plan is paid with the same card as their referrer's. Stripe gives each card a code, not the card number. We compare the codes and don't keep them.
Under Australian privacy law, you have important rights regarding your personal information:
You can request access to the personal information we hold about you. We'll provide this within 30 days, and it's usually free unless the request is complex or voluminous.
If you believe your personal information is inaccurate, out-of-date, or incomplete, you can request corrections. We'll update your information promptly and notify any third parties if necessary.
You can ask us to limit how we use your information in certain circumstances, such as when you're disputing the accuracy of your data or the lawfulness of our processing.
You can request a copy of your personal information in a structured, commonly used format that you can transfer to another service provider.
Where we rely on your consent to process information, you can withdraw it at any time. This won't affect the lawfulness of processing before you withdrew consent.
You can complain to us directly or to the Office of the Australian Information Commissioner (OAIC) if you're not satisfied with how we handle your personal information.
We retain your information only as long as necessary for the purposes we collected it:
While your account is active, we retain all necessary information to provide our services, including your profile, will documents, and interaction history.
Completed will documents are retained for 7 years after account closure or as long as legally required, whichever is longer, to support estate administration.
Payment and billing information is retained for 7 years to comply with Australian taxation and accounting requirements.
Support communications are retained for 3 years to improve service quality and resolve any disputes that may arise.
If you start a will without creating an account, for example from "Start my will" or a link from ChatGPT, your answers are kept in a temporary guest session. If you don't save it with your email, it is deleted, with your answers, after 30 days, when our automatic clean-up next runs.
If you've consented to marketing, we retain this data until you opt out or 5 years from your last interaction, whichever comes first. We keep a record of your agreement and of any unsubscribe for 6 years after our last marketing email to you, so we can show we had your agreement and that we stopped. If you ask us to delete your account, we delete this record too.
When retention periods expire, we securely delete or anonymize your information using industry-standard data destruction methods.
Sometimes we need to transfer your information overseas to provide our services:
Your data is primarily stored with Supabase in Australia (Sydney). Some processing occurs overseas via the providers we use, including in the United States. Some of these providers are located overseas (including the United States) and may not be subject to the Australian Privacy Act.
Third-party services like payment processors, email providers, and our AI document generation provider may be located overseas (including in the United States). We share information with them only as needed to operate the service.
Information we send overseas is encrypted in transit, and we send each provider only what it needs. These providers handle it under their own terms and privacy policies, which are not the Australian Privacy Principles, and they may not be subject to the Australian Privacy Act. Meta also uses what it receives for its own purposes, under its own privacy policy.
We don't ask you to consent to overseas transfers, and using WillBuddy doesn't mean you have. The overseas recipients are in the United States: OpenAI (to draft your will), Stripe (payments), Resend (email) and Google. When you reach a home-address field, Google's address lookup loads: your browser sends Google your IP address and browser details, then what you type there, to suggest matching addresses, and the details of the address you pick. If you came from a Google ad, Google receives its ad-click reference, the time and any amount paid when you create an account or make a payment. Only if you accept them in our cookie banner, Google Analytics and Meta (measuring our ads and choosing who sees them) also receive information. If you use the WillBuddy app in ChatGPT, OpenAI also receives what you share there (see Using WillBuddy in ChatGPT).
We may use your information for marketing purposes, but you always have control:
We may send you important notices about your account, your plan, our terms, or changes in the law. These are necessary for account holders. News about new features is marketing: it comes only with your agreement, with an unsubscribe link.
With your consent, we may send tips and offers to help you get your will done. You give it when you ask for a free guide (the form says so), or when you tick the box for tips and offers as you sign up or save your will. For emails about a will you started with us, starting it is the consent. We keep a record of when and how you agreed.
If you start a will with us, we may send a few short reminders to finish it. If you ask for a free guide, or tick the box for tips and offers (when you sign up or when you save your will), we may also send a few emails about making your will, sometimes with an offer. If you go quiet for a month or more, we may send you one more reminder, with no offer. Each has an unsubscribe link. After you buy a plan, we remind you to print, sign and store your will. These are about what you bought, so they still come if you unsubscribe.
The button in our reminder emails tells us which email brought you back, and we keep that with your account. Resend, our email provider (United States), also tells us whether each of our emails was delivered and opened (using a tiny image in the email) and which link was clicked (links go through Resend first). When you open an email or click a link, Resend may see your IP address and browser details. We use this only to learn which emails help, so we send better ones and fewer of the rest.
Every marketing email includes an unsubscribe link. You can also opt out through your account settings or by contacting us directly. And you can ask us where we got your details: we'll tell you.
We never sell your information to third parties for their marketing purposes. Any marketing you receive comes directly from us.
We respect your right to anonymity where practicable:
You can browse our public website pages anonymously. We count visits without cookies: the page you arrived on, the website or ad link that brought you here, your device type (phone, tablet or computer) and your approximate state, worked out from your browser's time zone. We don't store your IP address for this, and it doesn't identify you. On the page where you start a will, we also note, against the temporary guest session that page creates, whether the page stayed open for 10 and 30 seconds, whether and how far you scrolled, and whether you pressed Start; this helps us see whether the page is clear, and it contains nothing you typed. If you later create an account, we keep where you first came from with it. Only if you accept cookies in our cookie banner do we also use Google Analytics, which sets cookies and shares how you use the site with Google, and the Meta pixel, which sets cookies and tells Meta (Facebook and Instagram) when someone visits our public pages, asks for a free guide, starts a will, creates an account, finishes writing a will or pays, whether or not they came from an ad. The Meta pixel receives the event name, the page address and the technical details your browser sends (such as your IP address and device), and for a payment the amount; it never receives your answers, the names you enter, or anything in your will. Meta may link this to your Facebook or Instagram account and uses it to measure and target our ads and for its own purposes, under its own privacy policy, in the United States and other countries. If you decline, neither loads. You can change your choice at any time with the “Cookie settings” link at the bottom of every page.
You can make general inquiries about our services without providing personal details, though this may limit how specifically we can help you.
Creating a will requires accurate personal information so the document names the right people and is correct when you sign it. Anonymous will creation is not possible. You're responsible for providing accurate information; we don't independently verify your identity.
In some circumstances, you may be able to use a pseudonym for initial contact, but your will document needs to use your accurate personal details to be effective. You're responsible for providing accurate information; we don't independently verify your identity.
We take steps to ensure your information is accurate, complete, and up-to-date:
We only collect information that is necessary for our services and take reasonable steps to ensure it's accurate and current.
You're responsible for providing accurate information and letting us know if your details change. This is especially important for legal documents like wills.
You're responsible for providing accurate information; we don't independently verify your identity. Please review your details carefully, as the accuracy of your will depends on the information you provide.
We'll remind you to review and update your information periodically so your will stays up to date as your life changes.
If you have concerns about how we handle your personal information, here's how to make a complaint:
Email team@willbuddy.com.au with details of your concern. We aim to respond within 30 days.
We'll investigate your complaint thoroughly, may ask for additional information, and will keep you informed of progress throughout the process.
If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Making a complaint is free. We won't disadvantage you in any way for making a legitimate privacy complaint.
We may update this privacy policy from time to time. Here's how we'll keep you informed:
We'll notify you of significant changes by email and by posting a notice on our website at least 30 days before the changes take effect.
For minor changes like contact details or clarifications, we'll update the policy and change the 'last updated' date at the top of this page.
If you don't agree with material changes, you can close your account before they take effect. Continued use of our services means you accept the updated policy.
Previous versions of this policy are available on request so you can see what has changed over time.
We're committed to transparency and protecting your personal information. Contact our privacy team anytime.