Living Trust California ("we," "us," or "our") is an online estate planning service operated by the Law Offices of Rozsa Gyene, with Rozsa Gyene, Esq. (California State Bar #208356) reviewing every document we deliver. This Privacy Policy explains what information we collect through livingtrustcalifornia.com (the "Site") and our questionnaire and document services (the "Services"), how we use it, who we share it with, and the choices you have. It is written to comply with the California Online Privacy Protection Act (CalOPPA) and the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, "CCPA"). Our Services are intended only for California residents.
On this page
- Information we collect
- How we use information
- How we share information; service providers
- We do not sell or share your information
- Data security
- Cookies, analytics, and Do Not Track
- Data retention
- Your California privacy rights
- Attorney-client confidentiality
- Children's privacy
- Changes to this policy
- Contact us
1. Information we collect
1.1 Information you provide directly
When you create an account, complete our questionnaire, request a document, or contact us, you may provide:
- Identifiers and contact information: full legal name, email address, phone number, mailing address (street, city, state, ZIP), and the date you intend to sign your documents.
- Account credentials: the email and password you use to sign in (passwords are stored and verified by Google Firebase Authentication; we do not see or store the plain-text password).
- Demographic information: date of birth and gender, used to generate accurate pronouns and statutory recitals in your documents.
- Family information: marital status; if applicable, your spouse's name, date of birth, and gender; whether you have children, the number of children, and each child's name, date of birth, and gender.
- Asset information: general descriptions of real estate (addresses, estimated values), bank accounts (bank name, account type), investment accounts (institution, account type), and other property (description, estimated value). We ask for general descriptions only — we do not request bank or investment account numbers.
- Beneficiary information: names, relationships, gender, percentage shares, and any age-staged distribution preferences; plus specific gifts, contingent beneficiary preferences, and successor distribution rules.
- Fiduciary designations: names, relationships, addresses, and phone numbers for successor trustees, executors, guardians for minor children, agents under a Durable Power of Attorney, healthcare agents, and HIPAA-authorized persons.
- Sensitive health-care information: your Advance Health Care Directive choices, including end-of-life treatment preferences, organ-donation preferences (including the specific organs or tissues you elect to donate, if any), and pain-relief and other treatment instructions. Under California law and CCPA, this is "sensitive personal information."
- Document content: any free-text fields you complete, such as special instructions, pain-relief notes, or other wishes.
- Communications: the contents of emails or phone calls you send us, including any documents you attach.
1.2 Information collected automatically
When you visit the Site we (or our analytics providers) collect:
- Device and browser information: IP address, browser type and version, operating system, screen resolution, and approximate location derived from your IP address.
- Usage information: pages viewed, time spent on each page, referring/exit URLs, clickstream data, form-section completion events, and abandoned-form indicators (so we can send the reminder described in §2).
- Session-replay and heatmap data: Microsoft Clarity records anonymized session interactions (mouse movement, clicks, scroll behavior) on most pages to help us identify and fix usability problems. Clarity automatically masks form-input contents.
- Local-device storage: we use browser
localStorageto save your in-progress questionnaire answers on your device (so you can resume) andsessionStorageto hold short-lived state during checkout. This data lives on your browser, not our servers, until you click Continue or submit.
1.3 Information from third parties
- Payment information from Stripe: when you pay, you provide your card details directly to Stripe, Inc. We do not see your card number. Stripe shares limited transaction metadata back with us (e.g., your email, the last four digits of your card, payment status, and a Stripe customer ID) so we can match your payment to your order.
- Verification from public legal records: attorney licensing information referenced on our Site comes from the California State Bar's public licensee database.
2. How we use information
We use the information described in §1 to:
- Prepare your living trust, pour-over will, durable power of attorney, advance health care directive, HIPAA authorization, and related estate-planning documents based on the answers you provide.
- Have your documents reviewed by Rozsa Gyene, Esq. (CA State Bar #208356) before delivery.
- Authenticate you when you sign in and load your saved questionnaire from our database so you can resume where you left off.
- Process your payment through Stripe and confirm the order.
- Email you order confirmations, your completed documents, and other transactional notices.
- Send abandoned-form reminders so you can resume an incomplete questionnaire. If you begin but do not complete a questionnaire, we may send up to three reminder emails — approximately one hour, one day, and three days after you start — sent only between 8:00 a.m. and 9:00 p.m. Pacific time. You may opt out at any time by replying "unsubscribe" to any reminder email.
- Answer questions you ask through the on-site AI chat assistant (powered by OpenAI; see §3).
- Operate, secure, debug, and improve the Site, including measuring page performance and detecting fraud or abuse.
- Comply with our legal, regulatory, and professional obligations as a California-licensed attorney's office.
3. How we share information; service providers
We do not sell your personal information (see §4). We disclose information only to the categories of third parties listed below, each acting as our service provider or processor under written agreement, or where required by law.
- Google / Firebase (Google LLC): we use Google Firebase Authentication for sign-in, Cloud Firestore as our primary database for your questionnaire and document records, Firebase Storage for generated PDF documents, and Firebase Cloud Functions for server-side processing. Data is stored in Google's United States cloud regions. The Firebase project identifier is
livingtrust-california. - Stripe, Inc.: processes payments. Card data is collected and stored by Stripe under their own privacy policy.
- Google LLC (Analytics and Ads): Google Analytics (measurement ID
G-9350F46HN8) and Google Ads conversion tracking (AW-989094207) for site-traffic measurement and conversion attribution. Google may use this information consistent with its own privacy practices. - Microsoft Corporation (Clarity): session-replay and heatmap analytics. Clarity may set cookies and process pseudonymized user-interaction data under Microsoft's privacy policy.
- OpenAI, L.L.C.: the optional AI chat assistant on our homepage sends the text of your chat messages to OpenAI's API to generate a response. Do not enter personal or sensitive information into the chat.
- Netlify, Inc.: our website hosting and serverless-function provider. Netlify processes server logs, including IP addresses, for delivery and security.
- Email delivery (Google): outbound transactional and reminder emails are sent through Google (Gmail SMTP / Google Workspace) from
rozsagyenelaw1@gmail.com; Google LLC acts as a processor for outbound email. - Professional advisors and successor firms: the Law Offices of Rozsa Gyene may share information with co-counsel or its affiliated law firm at
livingtrust-attorneys.comas necessary to deliver legal services to you. - Legal compliance and protection: we may disclose information to comply with a subpoena, court order, or other legal process; to enforce our terms; to protect our or others' rights, property, or safety; or in connection with a sale, merger, or other corporate transaction (in which case successors will be bound by this Policy).
4. We do not sell or share your information
We do not sell your personal information for money or other valuable consideration, and we do not share your personal information for cross-context behavioral advertising, as those terms are defined under the CCPA. The same commitment appears on our 100% Guarantee page.
Note: our use of Google Analytics, Google Ads, and Microsoft Clarity may be characterized by some regulators as "sharing" for analytics or advertising purposes. To exercise your right to opt out of any such sharing, see §8.
5. Data security
We use bank-level 256-bit SSL encryption to protect your data during transmission, and the entire Site is served over HTTPS. Your information is stored on Google Cloud / Firebase infrastructure with access controlled by Firebase Authentication and per-user Firestore Security Rules — meaning a logged-in user can only read or write the records (forms, documents, orders, amendments) that belong to them. Our database security rules and access logs are reviewed and updated as needed.
No method of internet transmission or electronic storage is 100% secure. While we use measures designed to protect your information, we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you in accordance with applicable law.
6. Cookies, analytics, and Do Not Track
We and our service providers use cookies, web beacons, and similar technologies to operate the Site, authenticate users, measure traffic, attribute conversions, and improve performance. The main categories are:
- Strictly necessary: Firebase Authentication tokens and our own session/local storage that keep you signed in and preserve your in-progress questionnaire answers.
- Analytics: Google Analytics (
_ga,_ga_*) and Microsoft Clarity (_clck,_clsk) cookies measure how the Site is used. - Advertising/conversion: Google Ads conversion-tracking cookies attribute purchases to specific marketing campaigns.
Do Not Track: Some browsers send a "Do Not Track" (DNT) signal to websites you visit. There is no industry-standard way to honor DNT signals, and our Site does not currently respond to them. You can still limit tracking by using your browser's privacy controls (cookie blocking, private/incognito mode), by installing privacy extensions, by opting out of Google Analytics with the Google Analytics Opt-Out Browser Add-on, and by exercising the opt-out rights described in §8.
We do not knowingly receive any tracking information about your activity on other websites.
7. Data retention
We retain your personal information for as long as your account is active and for as long as needed to provide the Services, comply with our legal and professional obligations, resolve disputes, and enforce our agreements. After that, we retain it for the periods described below.
- Completed forms and generated documents: retained as part of your client file, consistent with our professional and legal record-keeping obligations.
- Abandoned (incomplete) questionnaires: deleted after 12 months of inactivity.
- Payment records: Stripe retains payment data under its own retention schedule. Our records (the order entry tied to your account) are retained for the period required by California tax and recordkeeping laws.
- Email correspondence and attorney work product: retained in accordance with applicable California Rules of Professional Conduct governing client files.
- Analytics data: Google Analytics and Microsoft Clarity retain anonymized usage data under their own retention settings (typically 14 months for Google Analytics).
If you would like your account closed and your stored data deleted, see §8.
8. Your California privacy rights
If you are a California resident, the CCPA gives you the following rights:
- Right to know the categories and specific pieces of personal information we have collected about you, the sources, the purposes for collecting it, and the categories of third parties with whom we share it.
- Right to delete personal information we have collected from you, subject to exceptions (e.g., to complete a transaction you requested, to comply with a legal obligation, or to maintain the integrity of attorney records we are required to keep).
- Right to correct inaccurate personal information.
- Right to portability — to receive a copy of your personal information in a portable, machine-readable format.
- Right to limit use of sensitive personal information — including your health-care directive choices — to those uses necessary to provide the Services.
- Right to opt out of "sale" or "sharing" of personal information. As stated in §4, we do not sell personal information. To opt out of cross-context advertising or analytics that may be considered "sharing," contact us using the form below or use the third-party opt-out tools described in §6.
- Right to non-discrimination — we will not deny you Services, charge you a different price, or provide a different level of quality because you exercised any of these rights.
How to exercise these rights: Email rozsagyenelaw@yahoo.com with the subject line "California Privacy Request" or call (818) 291-6217. We will need to verify your identity before fulfilling the request (typically by matching the email address on file and asking you to confirm details from your account). We will respond within 45 days, with one 45-day extension if reasonably necessary. If you use an authorized agent to make a request on your behalf, the agent must provide proof of authorization and we may still ask you to verify your identity directly.
9. Attorney-client confidentiality
When you purchase Services from us, an attorney-client relationship is created between you and the Law Offices of Rozsa Gyene. Confidential information you provide in that relationship is protected by attorney-client privilege under California Evidence Code §§ 950–962 and by the duty of confidentiality under California Rules of Professional Conduct Rule 1.6. These protections apply in addition to (and are not replaced by) the protections in this Policy.
Use of the Site or completion of the questionnaire before purchase does not by itself create an attorney-client relationship.
10. Children's privacy
Our Services are intended for adults of legal age (18+) who are California residents and need to prepare estate planning documents. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us at rozsagyenelaw@yahoo.com and we will take reasonable steps to delete it.
Note: as part of the Services, you may provide the names and dates of birth of your minor children (so we can name them in your trust, designate guardians, or set up beneficiary distributions). That information is collected from you as their parent or legal guardian, not from the child.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page. If the changes are material, we will give you additional notice (for example, by email to the address associated with your account or by a prominent notice on the Site) before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the revised Policy.
12. Contact us
Questions about this Policy, or California privacy requests:
Law Offices of Rozsa Gyene
Attn: Rozsa Gyene, Esq. (California State Bar #208356)
450 N Brand Blvd, Suite 600
Glendale, CA 91203
Phone: (818) 291-6217
Email: rozsagyenelaw@yahoo.com
Verify CA Bar license: apps.calbar.ca.gov