Privacy Policy

1. Information We Collect

We collect only what is necessary to operate Heirloom Vault. This includes:

• Account information — your name, email address, and password (stored as a salted hash).
• Vault content — documents, notes, contact records, and other information you choose to store in your vault.
• Usage and log data — IP addresses, browser type, pages visited, and timestamps, collected automatically to maintain security and diagnose issues.
• Communications — messages you send to our support team.

We do not collect payment information directly. When billing is enabled, payments are processed by a third-party payment processor (currently Stripe) and we receive only a transaction confirmation.

2. How We Use Your Information

We use your information exclusively to:

• Provide, operate, and improve Heirloom Vault.
• Authenticate your identity and protect your account.
• Send transactional emails (email confirmation, password reset, invitation notices, policy updates).
• Respond to your support requests.
• Comply with applicable law.

We do not use your information for advertising. We do not build behavioral profiles. We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

3. How We Store and Protect Your Information

Your data is stored on Microsoft Azure infrastructure located in United States data centers. We apply the following protections:

• Encryption in transit via TLS 1.2 or higher.
• Encryption at rest for all stored data and files.
• Two-factor authentication (2FA) required for all user accounts.
• Azure Web Application Firewall (WAF) to block malicious traffic.
• Access to production systems is restricted to authorized personnel only.

No security system is impenetrable. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

4. Sharing and Disclosure

We do not sell your data. We share information only in the following limited circumstances:

• Payment processor — when billing is active, your payment is processed by Stripe. We share only what is necessary to complete the transaction.
• Infrastructure providers — Microsoft Azure stores your data on our behalf under strict data processing agreements.
• Legal requirements — we may disclose information if required by law, court order, or to protect the rights, property, or safety of Heirloom Vault, our users, or the public.
• Business transfer — in the unlikely event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5. Data Retention

We retain your information for as long as your account is active. If you request account deletion, we will delete your personal information and vault contents within 30 days, except where retention is required by law.

If your subscription lapses, your vault enters read-only mode. Your data is preserved and not deleted unless you explicitly request account deletion.

6. Your Rights

You have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — request correction of inaccurate information.
• Deletion — request deletion of your account and personal data.

To exercise any of these rights, contact us at support@heirloomvault.care. We will respond within 30 days.

7. Children's Privacy

Heirloom Vault is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and send an email notification to all registered users. Your continued use of Heirloom Vault after any change constitutes your acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us:

Heirloom Vault Ventures LLC
support@heirloomvault.care
www.heirloomvault.care