Important disclosures

Heirlume is not a registered investment adviser.

Heirlume is an organization and estate planning tool. We do not provide investment advice, securities recommendations, asset allocation guidance, portfolio management, or trading services. We do not move money on your behalf. Connecting your accounts via Plaid gives Heirlume read-only access for the sole purpose of computing your net worth and surfacing it inside your estate plan and the dashboard.

Heirlume is not a law firm.

Estate planning documents drafted with Heirlume's assistance are starting points for review by a licensed attorney in our partner network. They are not a substitute for legal counsel. Heirlume does not provide legal advice, and using Heirlume does not create an attorney-client relationship between you and Heirlume.

Plaid data handling.

When you connect a financial institution, we use Plaid as the aggregator. Plaid handles your institution login; Heirlume never sees or stores your bank credentials. Plaid returns balances, holdings, and liability information, which Heirlume stores under your account and refreshes daily. Access tokens are encrypted at rest using AES-256-GCM and never transmitted to your browser.

You may disconnect any institution at any time from Settings → Connected accounts. Disconnect stops new pulls immediately and schedules existing data for permanent deletion within 30 days.

Your rights.

• Right to know — you may request a copy of all data we hold about you.
• Right to delete — you may delete your account and have all financial data permanently removed within 7 days.
• Right to disconnect — you may revoke any institution's connection at any time.
• Right to opt out of sale — Heirlume does not sell user data. The opt-out exists for jurisdictional compliance.

Subprocessors.

Heirlume relies on the following service providers, each bound by a data processing agreement: Plaid (financial aggregation), Convex (database), WorkOS (authentication), Anthropic (AI processing of documents and summaries), Vercel (hosting), and Resend (transactional email). The full subprocessor list is updated when new providers are added.

Contact.

Questions about these disclosures or data requests should go to privacy@heirlume.ai.