1. Our Commitment to Privacy
Neural Heirloom provides comprehensive legacy preservation services for multigenerational
families, family offices, and executive networks. We preserve the wisdom, experience, and
decision-making frameworks of influential individuals for future generations.
We understand that you are considering entrusting us with deeply personal information—stories,
insights, and wisdom that represent a lifetime of experience. This trust is not something we
take lightly. Our commitment to your privacy is absolute, and this policy explains exactly how
we honor that commitment.
What you can expect from us:
- Complete transparency about what we collect and why
- Institutional-grade security for all data we handle
- Absolute discretion in all our operations
- Clear processes for exercising your privacy rights
- Long-term stewardship that honors the legacy nature of your data
This policy is written to be clear and accessible. We believe you deserve to understand exactly
how your information is handled, without needing legal counsel to interpret our practices.
2. Information We Collect
Information You Provide Directly
When You Request an Invitation (Current)
When you submit our invitation request form, we collect:
- Full name — To address you personally and professionally
- Email address — To respond to your inquiry and communicate about our services
- Organization or family office name (optional) — To understand your context
- Primary interest — To tailor our response to your specific needs
- Referral source (optional) — To understand how you learned about us
- Problem context (optional) — Any additional information you choose to share
When You Become a Client (Future Services)
When we engage in full legacy preservation services, we will collect additional information
essential to creating your legacy archive:
- Interview content — Audio recordings and transcripts of our guided sessions
- Personal history and stories — The experiences and wisdom you choose to preserve
- Family information — Context about family members relevant to your legacy
- Business insights — Decision-making frameworks and professional wisdom
- Documents and media — Any materials you share to enrich your legacy archive
- Communication records — Emails and messages related to your engagement
Important: The information collected during client engagements is the very
purpose of our service—preserving it for future generations. We treat this data with the
utmost care, as detailed in the Legacy Data Stewardship section.
Information Collected Automatically
When you visit our website, we may automatically collect:
- Technical data — IP address, browser type, device type, operating system
- Usage data — Pages visited, time spent on site, navigation patterns
- Referral data — The website or source that directed you to us
This information helps us understand how visitors interact with our website and allows us to
improve the experience. We do not use this data to identify individuals or for advertising purposes.
3. How We Use Your Information
For Invitation Requests
- Evaluate your request and determine if our services are appropriate for your needs
- Respond to your inquiry with relevant information
- Communicate about our services and availability
- Understand demand patterns to improve our offering (using aggregate, anonymized data only)
For Client Services
- Create your comprehensive legacy preservation deliverables
- Develop neural portraits and conversational AI representations
- Produce wisdom documentation, audio archives, and related materials
- Communicate about your project and provide ongoing stewardship
- Fulfill our contractual obligations to you and your family
What We Will Never Do
We make the following commitments regarding your data:
- We will never sell your information to third parties under any circumstances
- We will never use your data for advertising or marketing to others
- We will never share your information without your explicit consent, except as legally required
- We will never train AI models for other clients using your data without your express permission
- We will never disclose your identity as a client without your approval
4. How We Protect Your Information
We implement comprehensive security measures appropriate for the sensitive nature of the
information we handle. Our security practices include:
Technical Safeguards
- Encryption in transit — All data transmitted to and from our systems uses TLS 1.3 encryption
- Encryption at rest — All stored data is encrypted using AES-256 encryption
- Secure infrastructure — We use enterprise-grade hosting providers with SOC 2 Type II compliance
- Access controls — Strict role-based access ensures only authorized team members can access client data
- Regular security audits — We conduct periodic security reviews and vulnerability assessments
Operational Safeguards
- Confidentiality agreements — All team members sign comprehensive NDAs before accessing client information
- Security training — Our team receives regular training on data protection best practices
- Principle of least privilege — Access to your data is limited to those who need it for their specific role
- Incident response procedures — We maintain documented procedures for responding to any security concerns
Enhanced Security for Client Engagements
For families with specific security requirements, we offer enhanced security measures including
dedicated infrastructure, additional encryption layers, and customized access controls. We are
prepared to accommodate the security standards expected by family offices and institutions.
Transparency note: While we implement robust security measures, no system
can guarantee absolute security. We are committed to promptly notifying you of any security
incident that may affect your data, as required by applicable law.
5. Where Your Data Is Stored
Primary Infrastructure
Your data is stored using enterprise-grade cloud infrastructure:
- Website hosting: Netlify (US-based, SOC 2 compliant)
- Database: Supabase (configurable regions, SOC 2 compliant)
- Backups: Maintained in geographically separate locations for redundancy
International Data Transfers
If you are located in the European Economic Area (EEA) or United Kingdom, we ensure that any
transfer of your data outside these regions is protected by appropriate safeguards, including
Standard Contractual Clauses approved by the European Commission.
Data Residency Options
For clients with specific data residency requirements (such as EU-only storage), we can
accommodate these needs. Please discuss your requirements with us during your engagement.
6. Data Retention
Invitation Requests
If you submit an invitation request but do not become a client, we retain your contact
information for up to two years to follow up on your interest or respond to future inquiries.
You may request deletion at any time.
Client Data
Client legacy data is retained for the duration of your engagement and, by its very nature,
is intended to be preserved long-term for future generations. The retention of legacy archives
is governed by your client agreement, which provides options for:
- Indefinite preservation with ongoing stewardship
- Transfer of archives to family-designated custody
- Deletion upon explicit family instruction (with appropriate verification)
Business Continuity
We maintain plans for the long-term stewardship of client data. In the event that Neural
Heirloom ceases operations, we commit to providing advance notice and facilitating the secure
transfer of legacy archives to family-designated custody or an appropriate successor entity.
See Legacy Data Stewardship for details.
7. Your Rights & Controls
Rights for All Users
Regardless of your location, you have the right to:
- Access — Request a copy of the personal information we hold about you
- Correction — Request correction of inaccurate or incomplete information
- Deletion — Request deletion of your personal information (subject to legal requirements and the legacy nature of client data)
- Portability — Receive your data in a structured, commonly used format
- Opt-out — Unsubscribe from marketing communications at any time
Additional Rights for EU/EEA Residents (GDPR)
If you are located in the European Union or European Economic Area, you also have the right to:
- Object — Object to processing of your personal data based on legitimate interests
- Restrict processing — Request limitation of processing in certain circumstances
- Withdraw consent — Withdraw consent at any time where processing is based on consent
- Lodge a complaint — File a complaint with your local data protection authority
Additional Rights for California Residents (CCPA/CPRA)
If you are a California resident, you also have the right to:
- Know — Request disclosure of the categories and specific pieces of personal information we collect
- Delete — Request deletion of personal information (with certain exceptions)
- Opt-out of sale — We do not sell personal information, but you have the right to opt-out
- Non-discrimination — Exercise your rights without discriminatory treatment
How to Exercise Your Rights
To exercise any of these rights, please contact us at:
We will respond to your request within 30 days (or sooner as required by applicable law).
To protect your privacy, we may need to verify your identity before processing your request.
8. Cookies & Tracking Technologies
We use minimal tracking technologies on our website, consistent with our commitment to privacy:
Essential Cookies
We may use essential cookies that are strictly necessary for the website to function properly.
These do not track you across websites or collect personal information for marketing purposes.
Analytics
We may use privacy-respecting analytics to understand website usage patterns. We do not use
analytics services that track individuals across websites or create advertising profiles.
What We Don't Use
- Third-party advertising cookies
- Social media tracking pixels
- Cross-site tracking technologies
- Fingerprinting or similar identification techniques
You can control cookies through your browser settings. Disabling cookies will not affect
your ability to use our website or submit an invitation request.
9. Third-Party Services
We carefully vet all third-party services that may access your data:
Current Service Providers
-
Netlify — Website hosting
(Privacy Policy)
-
Supabase — Database infrastructure
(Privacy Policy)
-
Google Fonts — Typography (no personal data collected)
Future Services
As we expand our services to include voice AI and other technologies, we will update this
policy to reflect any new service providers. We commit to selecting partners who meet our
high standards for data protection and privacy.
External Links
Our website may contain links to external sites. We are not responsible for the privacy
practices of other websites. We encourage you to review the privacy policies of any sites
you visit.
10. Children's Privacy
Neural Heirloom services are designed for adults managing family legacy and succession planning.
Our website and services are not directed at children under 16 years of age.
We do not knowingly collect personal information from children under 16. If we learn that we
have collected personal information from a child under 16, we will take steps to delete that
information promptly.
If you believe we have inadvertently collected information from a child, please contact us
immediately at [email protected].
11. Changes to This Policy
As our services evolve, we may update this privacy policy to reflect new practices or
regulatory requirements. When we make changes:
- Material changes: We will notify you via email (for contacts in our database) and prominently on our website
- Minor changes: We will update the "Last Updated" date at the top of this policy
- Advance notice: For significant changes, we will provide at least 30 days notice before they take effect
We encourage you to review this policy periodically to stay informed about how we protect
your information. Your continued use of our services after changes take effect constitutes
acceptance of the updated policy.
13. Legal Basis for Processing (GDPR)
For individuals in the European Union or European Economic Area, we process personal data
under the following legal bases:
-
Consent: When you submit an invitation request form, you consent to our
processing of your information to respond to your inquiry. You may withdraw consent at any time.
-
Contractual necessity: When you become a client, processing is necessary to
perform our contract with you—creating and maintaining your legacy preservation archive.
-
Legitimate interests: We process certain data for legitimate business
interests, such as improving our services and ensuring security, where these interests
are not overridden by your rights.
-
Legal obligations: We may process data as required by applicable laws,
such as tax and financial regulations.
14. Special Considerations for Legacy Data
The nature of our service—preserving wisdom for future generations—creates unique considerations
that distinguish us from typical data processors. We address these directly:
Intentional Permanence
Legacy preservation data is, by design, intended to persist across generations. Unlike
transactional data that should be deleted when no longer needed, your legacy archive is
meant to endure. This is a feature of our service, not a limitation.
Deletion Requests
We respect your right to request deletion. However, we will discuss with you the implications
for your legacy archive, as deletion may conflict with the purpose of preservation. Final
deletion decisions rest with you and your designated successors.
Succession & Family Access
Your client agreement will specify who may access your legacy archive after your passing.
We work with you to establish clear succession protocols, ensuring your wishes are honored
and your legacy reaches the intended recipients.
If Neural Heirloom Ceases Operations
We are committed to the long-term stewardship of your legacy. Our plans include:
- Maintaining adequate reserves to facilitate orderly transition of client data
- Providing a minimum of 12 months notice before any cessation of services
- Facilitating transfer of archives to family-designated custody or successor entities
- Ensuring data is never abandoned or improperly disposed of
Our promise: Your legacy is not just data to us—it represents a family's
wisdom, values, and heritage. We treat it with the care and permanence it deserves, and
we structure our business to ensure this stewardship endures.
Thank you for entrusting us with your privacy. This policy reflects our genuine commitment
to honoring that trust.