By creating a Último Ato account, you agree to the following:

How it works, in short. You sign up, choose a plan and upload your files. Each file stays on the website for 24 hours before being moved to a vault disconnected from the internet — during that time you can still download it to check it, or delete it if you uploaded the wrong file. From then on, we ask you to confirm once a month that you are well; if a whole calendar month goes by without a confirmation, we start a verification process with your confirmation contacts before any delivery.

What we store. Your files (video, audio, or document) are protected in a digital vault, along with the contact details of your recipients and the people you designated to confirm what happened to you.

Vault encryption. Your files travel protected by HTTPS. Once moved to the vault, they are kept on a disk disconnected from the internet and encrypted with LUKS (AES-256): if that disk is lost or stolen, its contents are unreadable. The key is held by Último Ato, because it is what allows delivery to your recipients.

File encryption with a password (optional). When sending, you can protect a file with a password you choose. The file is then stored encrypted (XChaCha20-Poly1305, 256 bits, with the key derived from the password by Argon2id), on the server and in the vault, and can only be opened with that password — not even we can access its content. The password is always in lowercase letters. It is yours alone: we do not store it, cannot recover it and have no way to send it to the recipient. If it is forgotten, nobody will be able to open the file, not even us. On delivery, the recipient will receive the link and will need this password to open the file — it is your responsibility to give it to the person who will receive it.

How delivery works. Your files are only released to the recipients after our team confirms what happened with your confirmation contacts — never automatically. While your account is active, you confirm you are well once a month; a missed confirmation triggers this verification process.

Confirm you are well at least once. The confirmation deadline starts counting from the day you sign up, even if you have never confirmed yet. We recommend making your first life confirmation as soon as possible after creating your account, and repeating it once a month — an account that is never confirmed becomes overdue the same way as an account that stopped being confirmed.

Once in the vault, it stays protected. After a file is moved to the vault, it can no longer be freely deleted — a removal request goes through its own process, normally completed within a few hours, without constituting a guaranteed contractual deadline, specifically to protect the delivery commitment made to your recipients.

Overdue life confirmation. If a whole calendar month goes by without a life confirmation, your account becomes overdue. This never leads to the automatic deletion of your messages: it is precisely the signal for us to start the verification with your confirmation contacts. An overdue account can only be deleted after all of your messages have been delivered. We recommend keeping your life confirmation up to date, so our team does not need to reach out to your contacts unnecessarily.

No charges after expiration. If your plan's payment expires, Último Ato does not perform any additional automatic charge — only the upload of new files is blocked until you regularize your payment.

Account unpaid for a long time. If your plan payment stays overdue for 3 months and you have uploaded file(s), we send a notice to your account email. From that notice you have 30 days to bring the payment up to date; after that, the account and its files may be permanently deleted. Renewing the payment at any point cancels the deletion. This rule only applies to accounts that confirmed life after receiving the notice — if your life confirmation is not up to date, your account is never deleted for non-payment: it goes to our verification process with your contacts, because that may be exactly the moment your messages need to be delivered.

Death confirmation and delivery. Once your passing is confirmed with your confirmation contacts, the delivery protocol begins: our team contacts the recipients you designated and sends each of them an access link, together with a code given by phone. After delivery, the file remains available on the server for delivery for up to 3 months and is then deleted from the online server. The copy kept in the offline vault is retained only as a safeguard for sending it again to the recipients, and may be permanently deleted by us at any time after that period.

Payment, withdrawal and refunds. Plans are prepaid and do not renew automatically. You may withdraw from the purchase within the withdrawal period provided by the consumer protection law of your country, with a full refund; to do so, contact us within that period. After that period, the amount paid is not refunded, in whole or in part, including if you delete your account, ask for your files to be removed or stop using the service before the end of the period purchased.

Your data. We handle your personal data and the data of third parties you register (recipients, confirmation contacts) in accordance with applicable data protection law. You may request access, correction, or deletion of your data at any time, subject to the vault protections described above.

Questions? Reach us through the Contact us page — we reply to the email address you provide. That is also where you request access to, correction of, or deletion of your data.