Terms and Conditions

1. The Service

The Service provides a secure platform that enables users to record, store, and organize information relating to financial institutions, accounts, insurance policies, and related matters, and to designate trusted individuals who may access that information in the event of the user's death, incapacity, or other life event.

Only Step LLC reserves the right to review and change any of the Terms by updating this page at its sole discretion. When Terms are updated, reasonable efforts will be made to provide you with notice of updates. Changes to Terms take effect immediately from the date of publication. Only Step LLC recommends you retain a copy for your records.

THE SERVICE IS A PASSIVE INFORMATION STORAGE AND ORGANIZATION TOOL ONLY.

The Service, including all software, code, designs, logos, trademarks, text, graphics, and functionality, is owned by Only Step LLC and protected by applicable intellectual property laws. Except for the limited right to use the Service in accordance with these Terms, no rights are granted to you.

2. No Professional Advice or Fiduciary Relationship

THE COMPANY IS NOT:

• A bank, financial institution, law firm, or fiduciary
• A provider of legal, financial, tax, or estate planning advice

THE COMPANY DOES NOT:

• Verify the accuracy of any information you enter
• Monitor or validate user entries
• Confirm ownership of assets
• Provide guidance on estate planning, probate, or asset distribution

Your use of the Service does not create any fiduciary, advisory, attorney-client, or trust relationship. You are encouraged to consult qualified legal, financial, and tax professionals for advice regarding your estate and financial planning.

3. No Verification of Death, Incapacity, or Authority

You acknowledge and agree:

• The Company does not verify whether a user is deceased or incapacitated
• The Company does not verify whether any person has legal authority (e.g., executor, power of attorney)
• Access granted to any third party is based solely on your instructions within the Service
• Only Step LLC does not determine whether any individual is entitled to receive information stored within the Service and does not independently verify claims relating to death, incapacity, inheritance, beneficiary status, executor status, power of attorney, or other legal authority except as may be required by law

YOU ARE SOLELY RESPONSIBLE for determining who should have access and under what circumstances.

4. User Responsibilities

You are solely responsible for:

• The accuracy, completeness, and legality of all data you enter
• Maintaining confidentiality of your credentials
• Managing access permissions for third parties
• Keeping your account information and contact details current
• Maintaining independent copies of all information stored in the Service

Only Step LLC does not guarantee that information stored within the Service will remain available indefinitely or that it will be sufficient to locate, identify, recover, transfer, or access any asset, account, policy, or financial relationship.

You agree not to:

• Attempt to gain unauthorized access to the Service
• Store fraudulent, misleading, or unlawful information, or information you do not have the right to store or share
• Reverse engineer the Service
• Interfere with Service operation
• Upload malicious code
• Circumvent security controls
• Use automated tools to scrape data

5. Trusted Contacts, Survivors, and Authorized Access

The Service allows you to designate individuals ("Trusted Contacts" or "Survivors") who may access some or all of your stored information. You may grant two levels of access:

• Viewer access — the individual has immediate, live read access to your stored account information without any further steps required
• Survivor access — access is locked until the individual submits an official death certificate that is reviewed and approved by Only Step LLC; upon approval, they receive the same dashboard view as a Viewer

Individuals who access the Service through an invitation, authorization, or designation by another user are subject to these Terms to the same extent as the user who granted access. Only Step LLC does not verify the identity, legal authority, or relationship of any designated individual.

Only Step LLC does not verify:

• Ownership of assets
• Existence of assets
• Account balances
• Beneficiary designations
• Inheritance rights
• Executor status
• Powers of attorney
• Legal authority
• Entitlement to information

Authorized individuals access and use information entirely at their own risk. Only Step LLC makes no representation regarding the accuracy, completeness, timeliness, legality, or validity of information provided by another user.

Only Step LLC is not responsible for resolving disputes among family members, beneficiaries, heirs, executors, personal representatives, powers of attorney, trustees, or other parties claiming rights to information stored within the Service. If Only Step LLC becomes aware of a credible dispute regarding ownership, authority, or access permissions, Only Step LLC may suspend access to affected information pending resolution or receipt of documentation reasonably requested by Only Step LLC.

5A. Continued Use

Regardless of how you access the Service — as a primary account holder, Survivor, Authorized User, Trusted Contact, student, beta user, or in any other capacity — your continued use of the Service at any time constitutes your ongoing acceptance of these Terms and Conditions and the Privacy Policy in their then-current form. This applies whether you registered through the standard sign-up flow, an invite link, a promotional or beta access code, or any other method.

If you do not agree with these Terms at any time, you must immediately stop using the Service and, if you have an account, close it. Continued use after any modification to these Terms constitutes acceptance of the modified Terms.

6. Third-Party Access and Risk Allocation

By designating any individual as a Trusted Contact, Survivor, Viewer, or Authorized User, you assume full responsibility for that individual's access to and use of the Service. This includes, without limitation:

• All risks associated with granting access to that individual
• Any misuse, unauthorized disclosure, or harmful actions taken by that individual within or as a result of the Service
• Any fraudulent, false, or misleading information submitted by that individual — including but not limited to the submission of a fraudulent, altered, or fabricated death certificate
• Any claim, loss, or liability arising from actions taken by Only Step LLC in reliance on information or documentation submitted by a third party you have designated
• Your representation that you have the legal right to share all information you store about or relating to third parties within the Service

THE COMPANY DISCLAIMS ALL LIABILITY ARISING FROM THIRD-PARTY ACCESS, INCLUDING LIABILITY ARISING FROM THE SUBMISSION OF FALSE, FRAUDULENT, ALTERED, OR INACCURATE DOCUMENTATION BY ANY INDIVIDUAL YOU HAVE DESIGNATED.

If a Survivor or Authorized User submits a fraudulent or altered document — including a fraudulent death certificate — in order to gain access to stored information, any liability arising from that access rests entirely with that individual and, to the extent you designated that individual, with you. Only Step LLC shall bear no liability for access granted in good faith reliance on documentation that was subsequently determined to be false or fraudulent.

6A. Survivor and Viewer Responsibility for Their Own Actions

Each Survivor, Viewer, Trusted Contact, and Authorized User is individually and personally responsible for all actions they take within the Service, including:

• The accuracy and authenticity of any documentation they submit, including death certificates or other verification documents
• Any information they enter, upload, modify, or delete within their own account
• Any representations they make to Only Step LLC regarding their identity, relationship to the account holder, or legal authority
• Compliance with all applicable laws in connection with their use of the Service

By accessing the Service as a Survivor, Viewer, Trusted Contact, or Authorized User, you individually represent and warrant that:

• Any documentation you submit is genuine, unaltered, and accurately represents the facts it purports to describe
• You are legally authorized to access the information made available to you
• You will not use the Service or any information accessed through it in violation of any applicable law

Submission of a false, fraudulent, altered, or fabricated document — including a fraudulent death certificate — in connection with the Service may constitute fraud under applicable state and federal law and may subject you to civil and criminal liability. Only Step LLC reserves the right to report suspected fraud to appropriate authorities.

Only Step LLC shall not be liable to any party for access granted based on documentation later determined to be false or fraudulent. Any losses or claims arising from such access are the sole responsibility of the individual who submitted the fraudulent documentation.

6B. Death Certificate Review — Scope and Limitations

When a Survivor or Authorized User submits a death certificate or other verification document, Only Step LLC will conduct a reasonable administrative review of the document. You acknowledge and agree that:

• Only Step LLC is not a government agency, law enforcement body, forensic document examiner, or legal authority, and has no obligation or capability to authenticate documents with the rigor of those institutions
• Our review is limited to a reasonable visual and administrative check — we do not perform forensic analysis, contact issuing authorities, verify seal authenticity, or cross-reference records with government databases
• Only Step LLC's approval of a document means only that it appeared facially valid at the time of review — it does not constitute a legal finding, a certification of authenticity, or a guarantee that the document is genuine
• Only Step LLC shall not be liable for granting access based on a document that appeared valid upon reasonable review but was subsequently determined to be false, altered, or fraudulent
• The obligation to submit an accurate and genuine document rests entirely and exclusively with the individual submitting it

ONLY STEP LLC MAKES NO REPRESENTATION THAT ITS DOCUMENT REVIEW PROCESS WILL DETECT ALL FRAUDULENT, ALTERED, OR INACCURATE DOCUMENTS. OUR REVIEW IS A GOOD-FAITH ADMINISTRATIVE CHECK ONLY. THE COMPANY IS NOT LIABLE FOR ACCESS GRANTED IN REASONABLE RELIANCE ON A DOCUMENT THAT APPEARED VALID.

7. Account Dormancy, Lapsed Accounts, and Data Deletion

Given that the primary purpose of the Service is to preserve information for survivors, account continuity is important. The following applies when an account lapses:

• If a subscription payment lapses or expires, Only Step LLC will make reasonable efforts to notify you via email
• Your account and stored data remain available until you close your account — there is no automatic deletion triggered by subscription lapse or non-payment alone
• Only Step LLC will send reminder notifications prior to any data deletion
• Once data is permanently deleted following account closure, it cannot be recovered

If a user is deceased and their account has lapsed, designated Survivors may access the stored information by following the lapsed account access process described in Section 9, which requires payment of the applicable fee. Only Step LLC does not provide free emergency extensions of data retention — the Section 9 fee structure is the mechanism by which lapsed account access is provided.

Only Step LLC has no obligation to store, maintain, recover, or provide access to data following account closure as described in Section 14.

8. Deceased User Accounts and Successor Access

Only Step LLC recognizes that the circumstances following a user's death are central to the purpose of the Service. The following applies:

• Survivors or Trusted Contacts designated by the user during their lifetime will retain access according to the permissions set by the user
• A user's estate, executor, or legal representative may contact Only Step LLC to request access to or closure of the account
• Only Step LLC may, at its sole discretion, require documentation (such as a death certificate or letters testamentary) before granting access to or taking action on a deceased user's account
• Only Step LLC will not modify, delete, or transfer account data on behalf of a deceased user's estate without appropriate documentation, such as a death certificate and letters testamentary or other proof of legal authority

The existence of an Only Step account, or information stored within it, does not constitute a legally binding instruction, will, or estate document of any kind.

9. Survivor Access to Lapsed Accounts

If a user's subscription has lapsed — whether due to non-payment, cancellation, or expiration — and a designated Survivor or Trusted Contact subsequently requires access to the stored information, Only Step LLC will provide access subject to the following fee structure:

• First year of lapsed account access: $500 (one-time fee)
• Each subsequent year of continued lapsed account access: $100 per year

This fee covers the cost of maintaining, retrieving, and providing access to data on an account that is no longer supported by an active subscription. Payment of this fee does not reinstate the original subscription or create any ongoing service obligation beyond providing access to the stored information.

Only Step LLC will notify the designated Survivor or Trusted Contact of this fee requirement before charging. Access will not be granted until the applicable fee has been paid. Only Step LLC reserves the right to modify these fees with reasonable advance notice.

This provision applies only where the user's data remains within the retention period described in Section 14. If data has been permanently deleted prior to the survivor's request, no access can be provided and no fee will be charged.

10. Survivor Access Authorization and User Consent

By creating an account and designating one or more Trusted Contacts or Survivors, you expressly authorize Only Step LLC to:

• Retain your stored information beyond the lapse or cancellation of your subscription for the purpose of providing access to your designated Survivors, subject to the fee structure described in Section 9
• Disclose your stored information to your designated Survivors in accordance with the access permissions you have configured, including in the event of your death or incapacity
• Contact your designated Survivors to notify them of the existence of your account, the information stored within it, and any fees required to access it following a lapse in your subscription
• Require verification or documentation from Survivors before granting access, at Only Step LLC's sole discretion

You acknowledge and agree that:

• This authorization survives the lapse, cancellation, or expiration of your subscription
• This authorization survives your death or incapacity
• You have obtained any consents necessary to store and share information about third parties (including your designated Survivors) within the Service
• Only Step LLC's ability to provide Survivor access is contingent on your data remaining within the applicable retention period and the Survivor paying any applicable lapsed account fee
• Only Step LLC does not proactively monitor for or receive notice of a subscriber's death. Designated Viewers already have live access to the dashboard. Designated Survivors must submit a death certificate through the Service to initiate the review and approval process

This authorization may be modified or revoked at any time while your account is active by updating your Survivor designations and access settings within the Service. Once your account has lapsed and the data retention period has expired, no modification or revocation is possible as the data will no longer exist.

11. Data Export

Users may access and view their stored information at any time while their account is active via the Service dashboard. Information is displayed in a readable format and may be copied for personal records. Only Step LLC does not currently provide an automated bulk data export feature.

Only Step LLC does not guarantee that exported data will be accepted by any financial institution, legal authority, or third party, or that it will be sufficient to access, claim, or transfer any asset.

Export functionality may not be available following account suspension or termination. Users are encouraged to export and maintain their own copies of stored information independently of the Service.

12. Subscription and Billing

13. Cancellation and No Refunds

Prior to completing a subscription purchase, pricing, billing frequency, automatic renewal terms, and cancellation procedures will be disclosed to you. By completing your purchase, you acknowledge and agree to those terms.

• You may cancel your subscription at any time via the Account Settings page. Your access and data remain available until the end of your current billing period
• Cancellation is effective at the end of the current billing period; your access and data remain available until that date
• You are responsible for canceling prior to renewal

ALL FEES ARE NON-REFUNDABLE EXCEPT WHERE REQUIRED BY LAW.

14. Data Retention and Deletion

Only Step LLC distinguishes between subscription cancellation and account closure:

• Active account — data is retained for the duration of your subscription and beyond, until you close your account
• Subscription cancelled — your access continues until the end of the current billing period; your data is retained indefinitely until you close your account
• Payment lapsed or expired — your subscription becomes inactive; your data is retained until you close your account
• Account closed — you have explicitly requested closure via Account Settings; data is permanently deleted 90 days after closure
• Once permanently deleted following account closure, data cannot be recovered

Only Step LLC will send at least one reminder notification before permanent deletion following account closure. Users are responsible for maintaining current contact information to receive these notices.

There is no automatic deletion of data triggered by subscription lapse, non-payment, or cancellation alone. Data is only permanently deleted following explicit account closure by the user or discontinuation of the Service.

15. Security

Only Step LLC implements reasonable administrative, technical, and organizational safeguards to protect your information, including:

• Passwords hashed using bcrypt with per-user salts
• All data transmitted over HTTPS using TLS encryption
• Field-level encryption of sensitive stored data (financial institution names and notes) using AES-128 symmetric encryption (Fernet) at rest
• Secure file storage via Cloudflare R2 with encrypted at-rest storage and time-limited presigned access URLs
• JWT-based authentication with short-lived access tokens and rotating refresh tokens
• Multi-factor authentication options including email OTP, SMS, and authenticator app

You are responsible for maintaining the confidentiality of your username, password, passkeys, and any other credentials used to access the Service. You must notify Only Step LLC immediately via the Contact Us form at only-step.com of any suspected unauthorized access.

NO SYSTEM IS COMPLETELY SECURE. WE DO NOT GUARANTEE PREVENTION OF UNAUTHORIZED ACCESS, DATA LOSS, OR BREACHES. YOU ACKNOWLEDGE AND ACCEPT THESE RISKS.

16. Service Availability

The Service is provided "AS IS" and "AS AVAILABLE." We do not guarantee continuous availability, error-free operation, or data integrity. Only Step LLC will use commercially reasonable efforts to maintain Service availability but does not commit to any specific uptime service level.

17. Disclaimer of Warranties

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICE IS PROVIDED WITHOUT WARRANTIES OF ANY KIND, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

18. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, ONLY STEP LLC SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING LOSS OF DATA, LOSS OF PROFITS, LOSS OF GOODWILL, LOSS OF BUSINESS OPPORTUNITY, LOSS OF INHERITANCE, LOSS OF ASSETS, OR DAMAGES ARISING FROM UNAUTHORIZED ACCESS, THIRD-PARTY ACCESS, OR RELIANCE ON INFORMATION STORED WITHIN THE SERVICE.

To the maximum extent permitted by law, the total aggregate liability of Only Step LLC arising out of or relating to the Service shall not exceed the greater of: (a) the amount paid to Only Step LLC by the applicable user during the twelve (12) months immediately preceding the event giving rise to the claim; or (b) twenty-nine U.S. dollars ($29.00).

This limitation applies regardless of the form of action and applies to subscribers, trusted contacts, authorized individuals, family members, beneficiaries, executors, heirs, or any other person asserting a claim related to the Service. No recovery may be sought or obtained for the value of any underlying asset, account, policy, investment, inheritance, or financial relationship referenced in the Service.

18A. Service Interruption, Data Loss, and Estate Claims

The following limitations apply specifically to circumstances central to the nature of this Service and are in addition to, and not in lieu of, the general limitations in Section 18:

SERVICE INTERRUPTION AND DELAYED SURVIVOR ACCESS

Only Step LLC shall not be liable for any claim arising from a temporary or extended interruption, suspension, or unavailability of the Service, including any interruption that delays or prevents a Survivor or Authorized User from accessing stored information following the death or incapacity of an account holder. No claim may be asserted on the basis that a Survivor could not access information during a service outage, a grace period following subscription lapse, a pending certificate review, or any other period during which access was temporarily restricted. Time-sensitive claims — including those related to asset recovery, estate deadlines, or probate proceedings — are entirely the responsibility of the user and their survivors to manage through legally appropriate channels.

ACCIDENTAL DATA LOSS

Only Step LLC shall not be liable for any claim arising from the accidental loss, corruption, or destruction of data stored within the Service, including loss resulting from hardware failure, software error, third-party infrastructure failure, or any other cause beyond Only Step LLC's reasonable control. Users are solely responsible for maintaining independent copies of all information stored in the Service. Only Step LLC makes no guarantee of data durability or backup restoration.

NO ESTATE OR HEIR CLAIMS FOR ASSET VALUE

The estate of any deceased subscriber, and any heir, beneficiary, executor, personal representative, administrator, trustee, next of kin, or other party claiming through or on behalf of a deceased subscriber, shall have no greater rights against Only Step LLC than the subscriber themselves had under these Terms. The aggregate liability cap in Section 18 applies fully to claims by or on behalf of any such party. No claim may be asserted — whether by the estate or any third party — for the value of any financial account, asset, insurance policy, investment, inheritance, or other financial relationship that was stored in, omitted from, or inaccurately described within the Service.

Only Step LLC is a passive record-keeping tool. The Company does not guarantee that information stored by a user will be complete, accurate, or sufficient to locate or claim any asset. The risk of incomplete or inaccurate records rests entirely with the user who created and maintained those records.

19. Indemnification

You agree to indemnify and hold harmless Only Step LLC and its affiliates, officers, directors, employees, and agents from any claims, damages, losses, or expenses (including reasonable attorneys' fees) arising out of:

• Your use of the Service
• Your data or the accuracy thereof
• Third-party access you grant
• Your violation of these Terms
• Your violation of any applicable law or third-party rights

20. Termination

We may suspend or terminate access at any time for:

• Violation of these Terms
• Failed payments
• Legal or security reasons
• Other reasons at our discretion

Upon termination, your right to access the Service ceases immediately. Data retention following termination is governed by Section 14 above.

21. Governing Law and Disputes

These Terms are governed by the laws of the State of New York. Any disputes not subject to arbitration shall be resolved exclusively in the state or federal courts located in New York County, New York.

22. Force Majeure

Only Step LLC shall not be liable for any delay, interruption, or failure in performance resulting from causes beyond its reasonable control, including acts of God, natural disasters, internet failures, telecommunications outages, cyberattacks, labor disputes, governmental actions, utility failures, pandemics, or failures of third-party service providers.

23. User Content

You retain ownership of information you submit. You grant Only Step LLC a limited, non-exclusive, royalty-free license to store, process, transmit, back up, and display such information solely as necessary to provide the Service. This license terminates upon deletion of your data in accordance with these Terms.

24. Assignment

Only Step LLC may assign these Terms, in whole or in part, in connection with a merger, acquisition, sale of assets, or other corporate transaction. You may not assign your rights or obligations under these Terms without prior written consent from Only Step LLC.

25. Severability

If any provision of these Terms is determined to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.

26. Modifications

Only Step LLC may modify these Terms at any time. For material changes, we will provide at least 30 days notice via email to the address on file prior to the changes taking effect. Continued use of the Service following the effective date of any changes constitutes your acceptance of the revised Terms.

27. Contact

For questions about these Terms, contact us through the contact form at only-step.com or via the Contact Us form at only-step.com.

28. Newsletter and Marketing Communications

By creating an account with Only Step LLC, you consent to receive our newsletter and periodic marketing communications via email. These may include product updates, tips for using the Service, reminders, and other information we believe may be of interest to you.

Public visitors who submit their email address through any newsletter sign-up form on our website also consent to receive our newsletter.

You may unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link included in every marketing email we send, or
• Updating your communication preferences in Account Settings if you have a registered account

Unsubscribing from marketing communications will not affect transactional emails necessary for the operation of your account, such as billing notices, security alerts, password reset emails, and notifications relating to Survivor and Trusted Contact access. These transactional emails will continue to be sent regardless of your marketing communication preferences.

Only Step LLC will not sell, rent, or share your email address with third parties for their own marketing purposes. All communications are sent in accordance with our Privacy Policy and applicable law, including the CAN-SPAM Act.