Privacy Policy

Information you provide:

• Your account's first name, last name and email address; your password is stored in hashed form by our authentication provider
• The people in the family tree: names, dates, places, family relationships, portraits — including relatives who have no HERITA account, living or deceased, and sometimes children
• La Mémoire content (photos, videos, documents, stories) with their titles, captions and places
• Les Voix and Le Foyer messages
• La Lignée messages, with the recipient's name and, where applicable, the email address or phone number you enter for them
• The Moral Testament and Succession Protocol you write
• The information in a HERITA Éditions request (contact details and questionnaire answers)
• The messages you write to Memo, the website's assistant

Technical information:

• Your IP address is processed by our hosting and authentication providers to deliver pages, keep you signed in and protect the service. HERITA does not record it in its own tables, except as an irreversible fingerprint used to limit abuse of some public forms
• An approximate country, derived from your IP address, to show prices in your currency
• Usage events linked to your account (for example "a memory was added"), with the Home concerned and the time — never the content itself
• Your browser language

• Email and password → authentication (performance of the contract)
• Profile and family tree → running your Family Home (performance of the contract)
• La Mémoire, Les Voix, Le Foyer, La Lignée and Moral Testament content → storing it, showing it to authorised people and delivering it according to your instructions (performance of the contract)
• IP address and approximate country → local currency and security (legitimate interest)
• Usage events → understanding and improving the service (legitimate interest)
• Payment information → subscription management (performance of the contract)
• HERITA Éditions request → reviewing your project and contacting you (consent given in the form)
• Messages to Memo → answering you (see article 10)
• A Home's video calls → connecting its members (performance of the contract)
• Reminder emails to inactive Guardians → inviting them back to their Home (legitimate interest)

• La Mémoire files are encrypted with AES-256 in your browser before upload. Today the key for this encryption is derived from the Home's identifier: on its own this encryption is not an independent protection, and it is HERITA's access rules that protect your files.
• Other content (stories, messages, family tree, Moral Testament…) is not end-to-end encrypted: it is protected by HERITA's access rules, enforced by the database itself.
• TLS encryption for all communications
• Passwords hashed by our authentication provider
• Row-Level Security: each person only reaches the Homes they belong to, and only what their rights in that Home allow them to see; what someone keeps to themselves is not opened to other members, the founder included
• The HERITA people who administer the infrastructure technically have access to the systems; that access is reserved for operating the service.

• Access: a copy of your data can be requested via HERITA's Contact page; it is prepared manually — there is no self-service export yet
• Rectification: family tree information is corrected directly in Les Racines; for your account information, write to us via HERITA's Contact page
• Erasure: deletion of your data can be requested via HERITA's Contact page. Self-service account deletion does not exist yet; content shared with a Home, and content added by other members, require case-by-case review
• Leaving a Home: you can leave a Home you did not found at any time, from Le Cercle
• Portability, objection and restriction of processing: via HERITA's Contact page

Cookies:

• Session and authentication: keeping you signed in; they are cleared when you sign out and last at most 400 days
• Language: the language you chose; cleared when the browser closes
• Country: an approximate country derived from your IP address, for the price currency; 30 days
• Account recovery: the time needed to confirm a recovery (10 minutes)

Storage in your browser:

• The Home you are viewing, and whether you have already seen the introduction film
• Whether the welcome screen was shown during a visit
• When a Home's protection is activated, keys specific to your device

Active providers:

• Supabase: database, authentication and content storage
• Vercel: hosting and delivery of the web interface — IP address and requests
• Stripe: subscription payments — payment information, processed by Stripe
• Brevo: service emails (address verification, invitations, La Lignée notices, reminders, confirmations) — email address, name and the content of those emails, which may include the title of a La Lignée message or the summary of a HERITA Éditions request
• Daily.co: video calls between members of a Home — the call's audio and video streams, encrypted in transit; the call carries a random name, never your family's
• Anthropic: Memo's answers on the website — only the messages you write to Memo