Privacy Policy
Heirloom ("we," "us," or "our") operates the Heirloom platform ("Platform" or "Service"). This Privacy Policy describes how we collect, use, store, and share your personal information when you use the Service.
By creating an account or using the Platform, you agree to the collection and use of your information as described in this Privacy Policy.
1. Information We Collect
1.1 Information You Provide. When you create an account, we collect your name, email address, and any other information you provide during registration. When you use the Platform, you may upload documents, files, credentials, notes, contact information for trusted contacts and beneficiaries, and other personal or sensitive information related to your digital legacy plan.
1.2 Information Collected Automatically. When you access the Platform, we may automatically collect technical information such as your IP address, browser type, device information, operating system, and usage data including pages visited, features used, and timestamps.
1.3 Information from Third Parties. If you connect third-party services to your account or if a trusted contact or beneficiary interacts with the Platform on your behalf, we may receive limited information from those interactions.
2. How We Use Your Information
We use your information to:
- Provide, operate, and maintain the Platform
- Process account registration and manage your account
- Store and organize your uploaded assets, documents, and information
- Execute release mechanisms and deliver notifications to your designated trusted contacts and beneficiaries as configured by you
- Verify the identity of individuals requesting access through release triggers
- Send transactional communications such as account verification emails, release notifications, and service updates
- Monitor and improve the security and performance of the Platform
- Respond to your inquiries and provide customer support
- Comply with legal obligations
3. How We Store and Protect Your Information
We implement industry-standard security measures, including encryption at rest and in transit, to protect your personal information. Sensitive fields such as credentials and private notes are encrypted using strong encryption standards.
While we take reasonable precautions to protect your data, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security of your information.
4. Data Sharing and Disclosure
4.1 With Your Designated Contacts. When a release trigger is activated, your stored information will be made available to the trusted contacts and beneficiaries you have designated, in accordance with the permissions and access levels you configured. Notification-only contacts will receive notifications as configured but will not receive access to vault contents.
4.2 Service Providers. We may share your information with third-party service providers who assist in operating the Platform, including hosting providers, email delivery services, and payment processors. These providers are contractually obligated to protect your information and may only use it to perform services on our behalf.
4.3 Legal Requirements. We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
4.4 Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.
We do not sell your personal information to third parties.
5. Data Retention
5.1 Active Accounts. We retain your information for as long as your account remains active and as needed to provide the Service.
5.2 Post-Release Retention. Following the activation of a release event, the Owner's subscription will be canceled and the Owner's data will remain accessible to designated beneficiaries and trusted contacts for a specified and limited duration. After this access period expires, the Owner's data will be scheduled for deletion. Data will not be retained or accessible indefinitely following a release event.
5.3 Account Deletion. If you request deletion of your account, we will delete your personal information within a reasonable timeframe, subject to any legal obligations that require us to retain certain data. Some information may persist in encrypted backups for a limited period before being permanently removed.
5.4 Anonymized Data. We may retain anonymized, aggregated data that cannot be used to identify you for analytics and service improvement purposes.
6. Your Rights and Choices
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Request deletion of your personal information
- Object to or restrict certain processing of your data
- Request a portable copy of your data
- Withdraw consent where processing is based on consent
To exercise any of these rights, please contact us at support@mylifeheirloom.com. We will respond to your request within the timeframe required by applicable law.
7. Cookies and Tracking
We may use cookies and similar technologies to maintain your session, remember your preferences, and analyze usage patterns. You can control cookie settings through your browser. Disabling cookies may affect certain features of the Platform.
8. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.
9. Third-Party Links
The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party services you access.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Platform and updating the "Last Updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised Privacy Policy.
11. California Residents
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at support@mylifeheirloom.com.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at support@mylifeheirloom.com.