MyStory Inactivity Protocol

Effective Date: [DATE TO BE SET AT LAUNCH]

This Inactivity Protocol (the "Protocol") describes how Crest Advisory Group LLC ("Crest") handles MyStory accounts that show prolonged inactivity, and how designated Executors can be granted a one-time access window to retrieve the Author's stories. It is part of the MyStory Terms of Service.

The Protocol is the dead-man-switch component of the Service. It is designed to balance: (a) the Author's privacy and control while alive, (b) the family's continuity of access, and (c) due process when ownership or guardianship of the account is contested.

1. Definitions

• Author: the account holder.
• Executor: the individual designated by the Author in account settings as the recipient of one-time access on inactivity trigger.
• Inactivity Period: twelve (12) consecutive months during which (i) no login to the Author's account occurs, (ii) no authenticated API access is recorded, and (iii) no Family Invitee chat message is read or replied-to by the Author.
• Trigger Date: the date on which the Inactivity Period is satisfied without rebuttal.
• Reminder Window: months 12 through 14 measured from last activity, during which Crest sends graduated reminders (described in Section 3).
• Executor Access Window: the one-time, time-boxed period beginning at month 15 during which the Executor may complete the access flow described in Section 5.

2. What "Inactive" Means

An account is treated as active if any of the following occurs in the trailing twelve (12) months:

• Successful login by the Author to the MyStory web or mobile Service.
• Authenticated API call originating from a credentialed Author session.
• Author marks any Family Invitee chat message as "read" or sends a reply.
• Author records a new chapter, voice memo, or sealed letter.
• Author clicks a verified "I am still here" link in a reminder email.
• Author updates billing information, plan, or account settings.

Mere receipt of email by Crest's mail server, automated session refreshes, or third-party background processes (e.g., a webhook event from a payment processor) do not by themselves count as activity.

3. Reminder Cadence

Crest will deliver graduated reminders by email and in-Service notice as follows. Each reminder includes a one-click "I am still here" link that resets the activity clock to today.

| Time since last activity | Action | |---|---| | Month 12 | First reminder to Author primary email + secondary email if on file. Subject line: "MyStory check-in." | | Month 13 | Second reminder to Author. Tone increases urgency; states the inactivity protocol and the Executor on file. | | Month 14 | Final reminder to Author + courtesy notice to Executor that an inactivity window may begin in approximately thirty (30) days unless the Author responds. The courtesy notice does not transfer access or grant any rights to the Executor at this stage. | | Month 15 (Trigger Date) | Author email channel is closed for activity-reset purposes. Executor Access Window opens and the flow in Section 5 begins. |

The Author may, at any point during the Reminder Window, reset the clock by any qualifying action listed in Section 2. A single reset returns the account to "active" status and restarts the inactivity counter.

4. Grace and Pause

• Vacation hold. Authors may, in account settings, declare an extended absence (vacation, sabbatical, hospitalization, etc.) for up to twelve (12) additional months, which suspends the Reminder Window. A vacation hold may be extended once.
• Hardship pause. Crest may, on written request from the Author or a documented health-care representative, grant additional pauses for medically-documented reasons.
• Subscription independent. Inactivity counters run independently of payment status. A paid, dormant account still triggers the Protocol; an unpaid, active account does not.

5. Executor Access Window

At the Trigger Date, Crest will:

1. Send the Executor an "Executor access invitation" email containing:

- The Author's name and account email. - A one-time access link valid for thirty (30) days. - A unique opaque token (single-use). - Instructions for the verification step in Section 5.2.

1. Send the Author a final "Executor access initiated" email. If the Author logs in and acts within thirty (30) days, Crest pauses the Executor flow and restores Author control.

5.1 Executor Authentication

To complete access, the Executor must:

• Click the one-time access link from the email.
• Receive and enter a verification code sent to the Executor's email of record.
• Confirm identity by either (a) uploading a government-issued photo ID matched against the Executor's name on file by a third-party identity verification service, or (b) supplying a notarized declaration of executor status (or letters testamentary if probate is open). The choice between (a) and (b) is the Executor's; both are treated as sufficient.
• Affirmatively acknowledge the Executor's scope (Section 5.3) and the data-use restrictions in this Protocol.

The token, verification code, and identity proof are bound together. A failure or mismatch invalidates the token; the Executor may request a re-issued token up to two (2) times within the Executor Access Window.

5.2 Scope of Executor Access

The Executor is granted read-only access to the Author's account, scoped as follows:

• May view and download Author Content (chapters, voice recordings, sealed letters except those still under date lock, conversation history).
• May view sealed letters with unlock dates that have already passed.
• May NOT view sealed letters whose unlock date has not yet arrived; those continue to deliver to their stated recipients on schedule.
• May NOT modify, delete, or add content.
• May NOT continue or modify the subscription on the Author's behalf.
• May NOT extend the Persona's operation or unilaterally pause/delete the Persona, except using the explicit Executor controls described in the Persona Consent Addendum (which the Author may have separately authorized).

5.3 Executor Access Window Duration

The Executor Access Window is ninety (90) days from successful authentication. During this window the Executor may download a one-time export package containing all readable Author Content. After the window closes, Executor access is revoked and the account moves to long-term retention per Section 7.

6. Disputes Over Executor Status

If a person claims Executor authority but is not the designated Executor of record, or if multiple parties claim authority, Crest will:

1. Pause the Executor flow immediately.
2. Notify all known claimants in writing.
3. Require submission of legal documentation (e.g., letters testamentary, court order, written family settlement) sufficient to identify the proper Executor.
4. Defer to documents from a court of competent jurisdiction over informal claims.
5. Retain Author data unchanged during the dispute.

Crest will not act as arbiter of family disputes. We will defer to lawful court orders. Where no court is involved, we may, in good faith, apply Florida intestacy or successor-trustee defaults to identify a likely Executor; that determination is administrative only and does not foreclose later legal remedies.

7. Long-Term Retention

After the Executor Access Window closes (or after the Trigger Date if no Executor is designated and no claimant emerges within twelve (12) months), the account moves to long-term retention:

• Author Content is retained, encrypted, in cold storage for a default of ten (10) years, after which Crest may securely delete the data unless a paid Family Plan or Executor maintains the account.
• The Persona is dormant and is destroyed upon final account closure.
• Sealed letters with future unlock dates continue to deliver on schedule for the duration of the long-term retention window. If the retention window expires before a sealed letter unlocks, the letter is destroyed undelivered, and Crest will use reasonable efforts to notify the recipient (or recipient's custodian) that the letter existed but cannot be delivered.

A Family Invitee or successor may, at any time during long-term retention, contact Crest to assume responsibility for the account by establishing a new paid subscription and providing valid Executor or successor documentation.

8. No Designated Executor

If the Author has not designated an Executor at the Trigger Date:

1. Crest sends an "Executor request" email to all Family Invitees listed on the account, indicating that the account is at the Trigger Date and inviting any party with lawful authority to identify themselves with documentation per Section 5.1 within ninety (90) days.
2. If exactly one qualified party identifies themselves and provides documentation, that party is treated as Executor for purposes of this Protocol.
3. If no party qualifies within the window, the account moves directly to long-term retention per Section 7.
4. If multiple parties qualify, the dispute procedure in Section 6 applies.

9. Author Right to Override

While alive and competent, the Author may, at any time and for any reason:

• Change the Executor designation.
• Disable or modify the Inactivity Protocol's behavior (e.g., extend the inactivity threshold, opt out of Executor access entirely, designate auto-deletion at trigger).
• Reset the activity clock with any qualifying action.

Crest will honor the Author's most recent valid instruction.

10. Privacy and Audit

All Executor access actions are logged and time-stamped. The Author is informed (during the Reminder Window) that an Executor flow may be initiated. The Executor's identity verification artifacts are retained per the Privacy Policy retention schedule for fraud prevention and dispute resolution.

This Protocol is governed by the laws of the State of Florida and is subject to the dispute-resolution provisions of the MyStory Terms of Service.

Operating Entity: Crest Advisory Group LLC, a Florida limited liability company. Contact: legal@crestadvisorygroup.com | (561) 935-3100

[COOLEY REVIEW REQUIRED. entire document. Particularly: 12-month inactivity threshold relative to state digital-asset access laws (Florida adopted RUFADAA at Fla. Stat. ch. 740, "Florida Fiduciary Access to Digital Assets Act"); Executor authentication mechanism; scope limits versus a fiduciary's statutory rights; sealed-letter destruction-on-retention-expiry policy; Crest's disclaimer of arbiter role in family disputes; intestacy default heuristic in Section 6.]