What we collect

Heirlume captures information you provide so it can act as your private estate folio. Specifically:

• Account & identity: name, email, date of birth, citizenship, occupation, and similar fields you enter under People.
• Financial accounts: when you connect a bank, brokerage, or credit account through Plaid, Heirlume receives balances, holdings, liability balances, and account metadata. We do not receive your bank login credentials. Plaid does. (Plaid's terms apply to that exchange.)
• Estate documents: wills, trusts, deeds, insurance policies, powers of attorney, healthcare directives, HIPAA authorizations, LLC operating agreements, and other files you upload.
• Credentials: if you choose to use the credential vault, we store the encrypted ciphertext only — see How we secure below.
• Connections: the names and contact emails of the beneficiaries, executors, trustees, and guardians you invite to your plan.
• Operational data: server logs, error telemetry, and audit events, retained for security and reliability.

We do not collect biometric data, location data, or browsing history. On our public marketing pages only, advertising and analytics partners may collect information about your visit — see Advertising and analytics below.

How we use it

• To run the product you've signed up for — render dashboards, generate plans, extract document data, sync balances, and deliver invitations to people you designate.
• To bill you and prevent fraud.
• To improve Heirlume — diagnose bugs, measure feature health, and respond to support requests. We never use your data to train external AI models.
• To comply with law, respond to lawful requests, and enforce our terms.

De-identified data and AI

We create de-identified and aggregated information from the data we collect, so that it can no longer reasonably be linked to you, your household or your device. We maintain and use it only in de-identified form, will not attempt to re-identify it. We may use de-identified information to improve Heirlume and in aggregate research that Heirlume publishes. Heirlume does not sell or license data — identifiable or de-identified — to data brokers or other third parties.

We do not use information that identifies you or your family to train AI models.

No sale of personal information. We do not sell your personal information. See Advertising and analytics below for advertising cookies and how to opt out.

Advertising and analytics

We use cookies and similar technologies from advertising and analytics partners — Meta (the Meta Pixel) and Google (Google Analytics) — to measure our marketing and show our ads to people who may be interested in Heirlume. These partners may collect information about your visits, such as pages viewed and actions taken, along with device and browser identifiers. Under some state privacy laws this may be considered “sharing” of personal information for cross-context behavioral advertising. We do not sell personal information, and we never share the content you store in Heirlume — your assets and account balances, financial connections, estate documents, credentials, or the people in your family graph — with advertising partners.

You can opt out at any time on our Your Privacy Choices page. We also honor the Global Privacy Control (GPC) browser signal as an opt-out. Advertising pixels never load on signed-in account pages.

How we secure

• Documents are encrypted at rest in Convex storage.
• Plaid access tokens are stored encrypted with AES-256-GCM using a key held server-side and never exposed to the browser.
• Credential vault entries are encrypted in your browser using AES-256-GCM with a key derived from your password and Vault PIN via PBKDF2 (600,000 iterations). Heirlume's servers never see your plaintext credentials — not even hashed.
• Authentication runs through WorkOS AuthKit. MFA is supported.
• Transport is TLS-only. We do not allow insecure HTTP.

Subprocessors we use

Heirlume uses a small number of vetted vendors to operate the product. Each is bound by a data-processing agreement and may not use your data for any purpose other than serving Heirlume.

• Convex — application database and document storage.
• Vercel — application hosting and edge delivery.
• WorkOS — authentication and session management.
• Plaid — financial account connectivity (subject to Plaid's End User Privacy Policy).
• Stripe — subscription billing. Heirlume does not store full card numbers; Stripe does.
• Anthropic — AI document extraction and estate-intelligence features. Documents you upload are sent to Anthropic only when you explicitly trigger an analysis. Anthropic's API does not retain inputs for model training.
• Resend — transactional email delivery (account confirmations, invitations to people you designate).
• Google Analytics — traffic analytics on the Heirlume public marketing pages only. We do not pass identifiable account data to Google, and we turn off Google Signals and ad-personalization signals. Honors your opt-out and GPC.
• Meta Platforms (Meta Pixel) — advertising measurement on the Heirlume public marketing pages only (see Advertising and analytics). Never loaded on signed-in account pages. Honors your opt-out and GPC.

How long we keep it

We keep your data for as long as your account is active. When you delete your account or a specific record, the underlying data is purged within 30 days. Backups are rotated on a 30-day cycle and are also encrypted at rest.

We retain limited records longer when required by law (for example, tax records for invoices we issued).

Your rights

You can, at any time:

• Access and export your data
• Correct or update inaccurate information
• Delete your account and data
• Withdraw consents you previously granted
• Lodge a complaint with a supervisory authority

California residents (CCPA/CPRA), EU/UK residents (GDPR), and Virginia, Colorado, Connecticut, Utah, Texas, and Oregon residents have additional statutory rights. We honor those rights regardless of the legal label — write us at privacy@heirlume.ai.

Opting out of sale or sharing. We do not sell personal information. You can opt out of the “sharing” of personal information for cross-context behavioral advertising (our advertising cookies) on our Your Privacy Choices page, or by turning on the Global Privacy Control signal in your browser.

Children

Heirlume is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has used the service, contact us and we'll delete the account.

Changes to this policy

We will notify account holders by email if we make material changes. Older versions are archived; we'll link to the prior text in any announcement.

Contact

Privacy questions: privacy@heirlume.ai.

Heirlume, Inc. is the data controller for the information described above.

This policy is provided in good faith to describe our practices. It is not legal advice. Heirlume is reviewing this text with counsel ahead of general availability and may revise wording without changing the underlying commitments above.