poa-it
Pre-launch
POA-IT is in pre-launch. These terms are in development and under review by Texas counsel. They will be finalized before we begin accepting customers. Until launch, they reflect our intent and are subject to change.

Privacy Policy

Effective: To be set at launchLast updated: May 2026 (draft, pending Texas counsel review)
Plain-English summary: We collect what we need to generate your power of attorney and deliver it to you. We don't sell your data, we don't use it for advertising, and we give you full control to access, correct, or delete it under the Texas Data Privacy and Security Act.

1. Who we are

POA-IT is operated by POA-IT Inc., based in Austin, Texas. You can contact us at privacy@poa-it.com for any questions about this Policy.

This Privacy Policy is governed by the Texas Data Privacy and Security Act ("TDPSA"), Tex. Bus. & Com. Code Ch. 541.

2. What we collect

Identity Information

  • Full legal name, date of birth, home address, email, phone number
  • Driver's license or state ID number (for identity verification)
  • Biometric identifiers (selfie image for ID-match verification during notarization)

Document Information

  • The data you input into the wizard
  • The identity of the agent and successor agents you name
  • The powers you grant
  • Information about the principal's property and accounts

Sensitive Personal Data (TDPSA § 541.001)

  • Government-issued identification numbers
  • Biometric data (selfie images, voice patterns from RON sessions)
  • Information revealing physical or mental health condition (in medical-POA workflows)
  • Geolocation (precise location during RON sessions)

Technical Information

  • IP address, device identifiers, browser type
  • Activity within the Service
  • Cookies and similar technologies

3. How we use your information

We use the information we collect to:

  • Generate, deliver, and store the documents you request
  • Verify your identity during notarization
  • Provide customer support
  • Process payments
  • Send you transactional communications (receipts, confirmations, document updates)
  • Send you marketing communications (with your consent; you can opt out at any time)
  • Improve and develop the Service
  • Detect, prevent, and respond to fraud, security, and legal risks
  • Comply with our legal obligations

We DO NOT use your information for targeted advertising or profiling for decisions producing legal or similarly significant effects without your express consent. We DO NOT sell your personal information.

4. Sensitive-data consent notice (TDPSA § 541.101)

By using the Service, you provide express consent to our processing of Sensitive Personal Data as described above. You may withdraw this consent at any time, although doing so may require us to suspend or terminate your account.

5. How we share your information

We share your information only with:

  • Service Providers: Stripe (payment), our remote-online-notarization partner, Vercel (hosting), our database provider, Resend (email), our authentication provider, Sentry (error monitoring). Each provider is contractually required to handle your data only on our instructions and consistent with the TDPSA. We have executed Data Processing Agreements (DPAs) with each.
  • Attorney Marketplace Partners: With your express request, we may share contact information with attorneys in our marketplace so they can respond to your inquiry.
  • Third Parties Acting on Your Behalf: We share your document with the agent and any successor agent you designate, at your direction.
  • Legal and Compliance Disclosures: We may disclose your information when required by law, subpoena, or court order, or to respond to fraud, security incidents, or legal claims.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. Successors will be bound by this Policy.

6. Cookies and tracking

We use first-party cookies for essential Service operation (login sessions, security, fraud detection). We use analytics services to understand how the Service is used.

We honor the Global Privacy Control (GPC) and other recognized universal opt-out mechanisms as required by TDPSA § 541.055(e).

7. Your rights under TDPSA

Texas residents have the following rights:

  • Right to confirm whether we process your personal data
  • Right to access the personal data we hold about you
  • Right to correct inaccurate personal data
  • Right to delete your personal data
  • Right to obtain a portable copy of your personal data
  • Right to opt out of the sale of your personal data (we do not sell), targeted advertising (we do not engage in this), and profiling for legal or similarly significant decisions
  • Right to appeal our denial of any of the above

8. How to exercise your rights

We provide two methods (TDPSA § 541.052):

  • Account Dashboard: Log in to your POA-IT account and go to "Privacy & Data" to download, correct, or delete your data.
  • Privacy Request Form: Email privacy@poa-it.com.

We will respond to requests within 45 days. We may require you to verify your identity before fulfilling a request.

9. Appeals process

If we deny your request, we will notify you of the decision and our reasoning within 45 days. You may appeal by emailing privacy-appeal@poa-it.com within 60 days. We will respond to appeals within 60 days.

If we deny your appeal, you may submit a complaint to the Texas Attorney General:

Texas Attorney General — Consumer Protection Division
texasattorneygeneral.gov/consumer-protection
1-800-621-0508

10. Data retention

  • Account information: as long as your account is active
  • Generated documents (vault): while your account is active
  • Notarization records: 5 years (Tex. Gov't Code § 406.108)
  • Payment records: 7 years (tax law)
  • Marketing preferences: until you opt out
  • Audit logs: 3 years

After deletion, residual copies may exist in backups for up to 90 days before being overwritten.

11. Data security

We maintain reasonable administrative, technical, and physical safeguards consistent with Tex. Bus. & Com. Code § 521.052, including encryption of data in transit (TLS 1.2+) and at rest (AES-256), multi-factor authentication for staff access, least-privilege access controls, logging and monitoring, regular security testing, and an incident response plan.

In the event of a data breach, we will notify you and (if applicable) the Texas Attorney General within 60 days, consistent with Tex. Bus. & Com. Code § 521.053.

12. Children

The Service is not directed to children under 18. We do not knowingly collect information from anyone under 18.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted on the Service and emailed to active account holders at least 30 days before the effective date.

14. Contact

privacy@poa-it.com
POA-IT Inc., Austin, Texas