DME Privacy Policy

Effective Date: October 12, 2026

DME Decisions Made Easy LLC, doing business as DME ("DME," "we," "us," or "our"), provides a trust-funding audit for people who already have a signed trust. This Privacy Policy explains what information we collect, why we use it, when service providers process it, how long we keep it, and the choices available to you.

Our service is designed for customers in the United States. If you have a privacy question or want to exercise a privacy right, email us at hello@dme.estate.

1. What this Policy covers

This Policy covers information processed through:

• The DME website at dme.estate.
• The DME trust-funding audit, account, and dashboard.
• Payment, authentication, support, and other communications related to the service.

This Policy does not control a third-party website or service that you visit through a link. That provider's own terms and privacy policy apply.

2. Information we collect

Information you provide

We collect information you choose to provide, including:

• Account information: your email address and the authentication information needed to create and access your account.
• Quiz contact details: your first name and email address when you enter them at the end of the quiz, and which quiz result you got.
• Trust document: the complete PDF you upload. A trust document can contain names, addresses, family relationships, beneficiary information, trust terms, signatures, property descriptions, and other sensitive information.
• Extracted trust information: information read from the document, such as the trust name, execution date, grantors, trustees, successor trustees, vesting language, asset references, and selected supporting text.
• Asset and intake information: information you enter about real estate, bank and brokerage accounts, retirement accounts, life insurance, vehicles, business interests, personal property, ownership, beneficiary arrangements, institutions, values, and funding status.
• Audit information: your audit result, action-plan items, progress, corrections, and completion status.
• Support information: messages and information you send when asking for help, reporting a problem, requesting a refund, or exercising a privacy right.

Your trust document or answers may contain information about other people, including family members, trustees, beneficiaries, and minors. You are responsible for having the right to provide that information to DME for your audit.

Payment information

Stripe collects your card number, expiration date, security code, billing or contact information, and transaction and device signals directly through Stripe-hosted payment fields. DME receives payment status, amount, currency, your email address, and Stripe transaction identifiers. DME does not receive or store your complete card number.

Information collected automatically

When you visit the website or use the service, DME and its providers may collect:

• IP address and approximate location derived from it.
• Browser, device, operating-system, and language information.
• Pages viewed, buttons selected, referring page, date, time, and session information.
• Authentication, security, error, and performance information.
• Cookies or similar identifiers needed to keep you signed in, remember settings, secure the service, and understand public website use.

We do not intentionally place trust-document text, extracted trust information, asset details, names, addresses, filenames, action-plan content, or card or bank account details into analytics events, URLs, or general-purpose application logs.

Information received from other services

We may receive:

• Identity and authentication information from Google when you use Google sign-in.
• Payment status and transaction information from Stripe.
• Security, error, and service-operation information from our infrastructure providers.

Google sign-in lets you authenticate without creating a separate DME password. DME does not intentionally send your trust document, extracted trust information, audit result, or action plan to Google.

3. How we use information

We use information to:

• Create, authenticate, secure, and support your account.
• Accept and process your one-time payment.
• Read your trust document and extract information needed for the audit.
• Combine extracted information with your answers to prepare an asset inventory, identify potential gaps, and produce an asset-specific action plan.
• Let you review, correct, save, and track your audit and action plan.
• Provide customer support, investigate failed or inaccurate processing, and administer the money-back guarantee.
• Detect, prevent, and respond to fraud, abuse, security incidents, and service failures.
• Comply with law, enforce our Terms of Service, resolve disputes, and protect DME, our customers, and others.
• Use synthetic data and aggregated operational metrics that contain no document content and do not identify a customer.

DME does not use your trust document, extracted trust information, intake answers, audit result, or action plan to train models or improve prompts, evaluations, or products.

4. How AI is used

We use Anthropic's commercial API to read your complete trust document and extract the information needed to prepare your audit.

Anthropic may retain the document and the extraction response for up to 30 days, subject to its published safety, legal, and service exceptions. Anthropic does not use DME's API inputs or outputs to train its models unless DME expressly permits it, and DME has not done so.

DME's predetermined rules decide what goes on your action plan, based on the extracted information and your answers.

AI extraction can be incomplete or wrong. You should review the extracted information and correct any error before relying on the audit. The service does not use AI to verify current deeds, account titles, beneficiary records, institution records, or every asset you own.

5. Providers that help operate the service

We use the following providers for the current trust-funding product:

Stripe may use transaction and device information to operate and improve its services, including fraud and loss-prevention models. DME does not receive or store your complete card number.

We may also disclose information:

• At your direction: when you ask or authorize us to share particular information.
• For legal or safety reasons: when reasonably necessary to comply with law or legal process, enforce our terms, investigate fraud or security issues, protect rights and safety, or establish and defend legal claims.
• During a business transaction: in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of the business, subject to appropriate confidentiality and legal protections.
• In non-identifying form: as aggregated information that contains no trust-document content and does not identify a customer.

We do not sell personal information. We use Meta, as described above, to measure which of our ads lead to visits and purchases. We do not use trust information for advertising.

6. Cookies and analytics

We use cookies and similar technologies that are necessary to authenticate users, maintain sessions, secure the service, and remember settings. We use PostHog analytics across the website and the service to understand how people use them and improve the customer journey. On our public pages (the homepage, quiz, checkout, welcome and sign-in pages), we also use the Meta Pixel to measure our ads, and it sets Meta's own cookies.

Analytics never include trust-document content. On our public pages, we may use session recordings, which show how a page is used, such as scrolling and taps, so we can find and fix problems. Session recordings hide what you type into form fields and never capture payment details. We do not record your trust document, audit or action plan. Analytics data, including session recordings, is kept for up to 12 months.

You can control cookies through your browser. Blocking necessary cookies may prevent sign-in or other parts of the service from working.

7. How long we keep information

We use the following retention schedule:

• Original trust PDF after successful extraction: DME deletes it from its private file storage after successful extraction.
• Failed or abandoned upload: DME deletes it within 7 days if extraction does not finish.
• Anthropic processing copy: Anthropic may retain the PDF and the extraction response for up to 30 days from processing, subject to its published exceptions. DME cannot shorten that period or delete Anthropic's retained copy on demand.
• Extracted trust information, intake answers, audit result, action plan, and account identity: retained while your account is active. DME deletes these records after 3 years without account activity, after giving 30 days' advance notice.
• Result PDF: if DME introduces a stored result PDF, it will follow the same schedule as the audit result.
• DME payment record: after account deletion, DME removes your email from its payment record and retains a limited transaction record, such as amount, currency, date, and Stripe reference, for up to 7 years for accounting, tax, chargeback, and legal purposes. Stripe applies its own retention requirements.
• Database backups: after DME deletes database information, scheduled backup copies expire within 7 days.
• Support and legal records: retained only as long as reasonably needed to respond, document resolution, comply with law, enforce agreements, or establish and defend claims.
• Analytics: retained under the period described in Section 6.

8. Account deletion and privacy requests

You may ask DME to:

• Provide access to personal information associated with your account.
• Correct inaccurate information.
• Delete your account and DME-controlled personal information.
• Provide a portable copy of information where reasonably available or required by law.
• Review an earlier decision about a privacy request.

Email hello@dme.estate from the address associated with your account. Describe the request and the account involved. We may ask for information needed to verify your identity and protect the account.

For a verified deletion request, DME will acknowledge the request within 2 business days and complete deletion of DME-controlled information within 30 days. Deleted database content may remain in scheduled backups for up to 7 additional days. Anthropic-held processing data may remain for up to 30 days from the original processing date. Information retained for accounting, tax, fraud prevention, dispute, legal, or security purposes may be limited to what is reasonably necessary for that purpose.

If an authorized agent submits a request where permitted by law, we may verify the agent's authority and the customer's identity. We will not discriminate against you for exercising a privacy right.

9. Who may access customer information

Other customers cannot access your trust document or audit through their accounts.

Authorized DME personnel and contractors may access customer information only when needed to:

• Respond to customer-requested support.
• Investigate a failed or inaccurate audit.
• Maintain and secure the service.
• Respond to an outage, suspected incident, or legal requirement.

Access must be limited to the minimum information needed. Authorized personnel and contractors must be subject to confidentiality obligations and least-privilege access. DME uses synthetic information instead of real customer information when real information is unnecessary. Manual access to an original trust file or extracted trust information must be recorded with the authorized person, customer or audit identifier, purpose, timestamp, and outcome, without copying trust content into the access record.

Provider personnel may access information as permitted by their agreements for support, security, legal compliance, and incident response.

10. Security

DME uses reasonable administrative and technical safeguards appropriate to the information we process. These include:

• Encryption in transit using HTTPS or TLS.
• Encryption at rest through our hosting and storage providers.
• Private file storage and account-based access controls.
• Least-privilege access for authorized personnel and contractors.
• Monitoring, cleanup controls, and access records required by DME's internal procedures.

No system is perfectly secure. We cannot promise that unauthorized access, loss, or misuse will never occur. If an incident affects your information, we will provide notice when required by applicable law.

11. Children and information about minors

The service is for people age 18 or older. DME does not knowingly allow a person under 18 to create an account or buy the service.

An adult customer may upload a trust or enter information that mentions a minor beneficiary or family member. DME processes that information only for the purposes described in this Policy.

12. United States service

DME offers the trust-funding service only in the United States at launch. The service is not directed to people outside the United States.

13. Changes to this Policy

We may update this Policy when our service, providers, or legal obligations change. We will post the updated version with a new effective date. If a change materially affects how we use trust content or other sensitive information, we will provide additional notice before the change takes effect and request consent when required by law.

We will not begin using existing customer trust content for model training or product improvement through a policy update alone.

14. Contact DME

DME Decisions Made Easy LLC
Attn: Privacy
7533 S Center View Ct #5955
West Jordan, UT 84084
United States
Email: hello@dme.estate