Legal

Privacy Policy

Last updated: 24 April 2026

Who we are

Afterward is an estate administration service operated by Sai Sumedh Garimella (we, us, our). For the purposes of UK data protection law, we are the data controller of your personal information.

What data we collect

When you use Afterward, we collect and process the following categories of personal data:

About you (the executor)

Full name and email address
Account credentials (managed by Clerk — see below)

About the deceased

Full legal name, date of birth, date of death
National Insurance number
Estimated estate value

About beneficiaries

Full name and relationship to the deceased
Inheritance share percentage

Financial and institutional data

Bank, pension, insurer, and other account details
Account and policy reference numbers
Correspondence generated on your behalf

Usage data

Pages visited and actions taken within the application
Agent activity logs for your estate

Why we process your data

We process your data under the following lawful bases:

Contract performance — to provide the estate administration service you have signed up for. Without this data we cannot perform the service.
Legitimate interests — to improve the service, prevent fraud, and maintain security.
Legal obligation — where we are required to retain records by law (e.g. tax and financial regulations).

Who we share your data with

We use a small number of trusted third-party services to operate Afterward. Each acts as a data processor on our behalf and is bound by appropriate data processing agreements:

Clerk (clerk.com) — authentication and user account management. Data stored in the EU.
Supabase (supabase.com) — primary database. Data stored in Europe West (London).
Amazon Web Services (aws.amazon.com) — document storage (S3). Data stored in eu-west-2 (London).
Anthropic (anthropic.com) — AI processing via the Claude API. Estate data is sent to Anthropic's API to power the agent. Anthropic's data processing agreement applies.
Railway (railway.app) — backend hosting infrastructure.
Resend (resend.com) — transactional email delivery.

We do not sell your data. We do not share your data with any third party for marketing purposes.

How long we keep your data

Active estates — retained for the duration of the estate administration and for 7 years afterwards, in line with HMRC record-keeping requirements for IHT purposes.
Account data — retained for as long as you maintain an account with us, plus 30 days after deletion to allow for recovery.
Agent logs — retained for 12 months for quality and debugging purposes.

Your rights under UK GDPR

You have the following rights regarding your personal data:

Right of access — request a copy of all data we hold about you
Right to rectification — ask us to correct inaccurate data
Right to erasure — ask us to delete your data (subject to legal retention obligations)
Right to restriction — ask us to limit how we process your data
Right to portability — receive your data in a machine-readable format
Right to object — object to processing based on legitimate interests

To exercise any of these rights, email us at sumedh.garimella02@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data lawfully.

Data security

We take reasonable technical and organisational measures to protect your data, including encryption at rest and in transit, access controls, and regular security reviews. All data is stored within the UK or European Economic Area.

Children

Afterward is not directed at children under 18. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or by a notice within the application. Continued use of Afterward after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy or your data: sumedh.garimella02@gmail.com