Privacy
Information under GDPR Articles 13 and 14 for the public website, contact forms, business requests, pre-registration and public Heritage AI assistant interactions.
Controller and contact
- Heritage AI is the controller for the public website heritage.rip and related forms.
- For privacy, deletion, access or legal requests contact heritage.rip.ai@proton.me.
- This page covers the public website. The encrypted application vault is separate from the marketing site.
Data collected by the public site
- Data you submit voluntarily: email, organization name, role, phone, segment, messages, business requests or iOS and macOS notifications.
- Necessary technical data: visited page, language, user agent, security logs, timestamps, errors and minimum anti-abuse data.
- Text and audio are sent to an AI provider to generate the response. Text requests and responses may be logged with language, date, session and technical data, and reviewed by authorized personnel for service checks and abuse handling.
- The public site does not collect vault passwords, seed phrases, vault documents or encrypted app content.
Encrypted application vault
- Vault content is stored encrypted. While your account is active, Heritage cannot read it.
- Account, payment and identity data are described in the Heritage service privacy notice on this page.
- Each beneficiary receives only the package you assigned to them, after the required steps and waiting periods. You can also prepare the vault for your own recovery without naming beneficiaries.
Purposes and legal bases
- Responding to requests, demos, quotes and notifications: pre-contractual steps or legitimate interest in managing the relationship.
- Creating or managing an account, trial or service access: contract performance or pre-contractual steps.
- Security, abuse prevention, rate limiting, audit and website protection: legitimate interest.
- Tax, accounting or legal obligations: legal obligation.
- Future optional communications will rely on consent or another applicable legal basis.
Retention and deletion
- All fields of contact and business requests are normally retained for up to 12 months, except for a contractual relationship, legal duties or defense needs. Business form submission passes through Formspree.
- Technical and security logs: retained for the period needed for security, diagnostics and abuse prevention.
- Account, payment and identity data are described in the Heritage service privacy notice on this page.
- You can request deletion or restriction at heritage.rip.ai@proton.me.
Recipients and processors
- We may use providers for hosting/CDN, email and forms, authentication, identity/KYC, payments, security, support and maintenance.
- Providers process data as processors or independent controllers depending on their contractual role.
- We do not sell personal data and business partners cannot see customers' encrypted vault content.
Transfers outside the EU
- Recipient categories: hosting and databases in the EU, authentication, payments, identity verification, notifications and AI assistance. The marketing site uses global distribution and holds no vault data. Transfers outside the EEA require an adequacy decision or standard contractual clauses; contact us for details of applicable safeguards.
- We avoid publishing sensitive infrastructure details while applying minimization and provider contracting principles.
Your rights
- You may request access, rectification, erasure, restriction, portability, objection and withdrawal of consent where applicable.
- To exercise rights, contact heritage.rip.ai@proton.me with your request and a verifiable contact.
- You may lodge a complaint with the Italian Data Protection Authority: www.garanteprivacy.it.
Heritage service privacy notice
Information about service data processing under Article 13 GDPR.
Controller and contact
- The controller is Heritage AI. For privacy and rights: heritage.rip.ai@proton.me.
Data processed
- Email, credentials managed by the authentication service, optional MFA, authorized devices, heartbeat and process status, verified notification channels, beneficiaries you name, payments and identity verification.
- Vault content is stored encrypted. While your account is active, Heritage cannot read it.
Identity verification
- The provider processes documents, selfies and identity comparisons. Where the relevant process requires it, Heritage retains verified data and evidence available from the provider, including document and selfie images, in encrypted archives with restricted access for identity continuity, recovery and fraud prevention.
- Verification required for the service is based on the contract. Biometric face matching requires explicit consent under Article 9(2)(a) GDPR, which can be withdrawn without affecting prior lawful processing.
Purposes and legal bases
- Service, devices, heartbeat, recovery and package delivery: contract. Security and abuse prevention: legitimate interest in protecting the service and users. Tax and accounting duties: legal obligation. Public assistant: legitimate interest in answering requests, checking the service and handling abuse.
Recipients and transfers
- Recipient categories: hosting and databases in the EU, authentication, payments, identity verification, notifications and AI assistance. The marketing site uses global distribution and holds no vault data. Transfers outside the EEA require an adequacy decision or standard contractual clauses; contact us for details of applicable safeguards.
Retention
- Account and encrypted vault: duration of the relationship. Identity data and evidence: active-account lifetime, with coordinated deletion at closure or completion of the inheritance process, except mandatory retention or documented legal holds.
- Payments: statutory tax and accounting periods. Technical and assistant logs: as long as needed for security, service checks and abuse handling.
Rights
- You may request access, rectification, erasure, restriction, portability and objection where applicable, withdraw consent and complain to the Italian data protection authority or the competent authority. Contact heritage.rip.ai@proton.me.
Public voice and chat assistant
- Text and audio are sent to an AI provider to generate the response. Text requests and responses may be logged with language, date, session and technical data, and reviewed by authorized personnel for service checks and abuse handling.
- Ending a conversation does not itself delete these logs. Do not enter passwords, seed phrases or personal data. The public assistant cannot see your vault.
Required data
- Data requested for accounts, payments and verification is necessary for those steps. Optional channels and biometric consent remain your choices; without necessary data we cannot complete the relevant step.
Automated processes
- Processes follow your choices for packages, beneficiaries and heartbeat. The assistant does not decide who receives what or when and does not move funds.
Cookies
Cookie audit for the Heritage AI public website: at this time the site does not set non-essential, analytics or marketing cookies.
Audit result
- The public code does not set cookies through document.cookie.
- No marketing trackers, ad pixels or non-essential analytics are present on the public website.
- No cookie consent banner is shown because there are no non-essential cookies to accept or reject.
Technical components
- The site loads necessary technical resources such as fonts, frontend libraries and static assets.
- Forms are submitted only when the user completes them; the public assistant activates only when the user interacts.
- These services may receive technical network data needed for delivery or security, without turning the site into marketing profiling.
Local storage
- Some technical preferences may be stored in the browser, such as language, anonymous assistant session or UI preferences.
- This storage supports the interface and anti-abuse limits, not advertising profiling.
- You can clear this data from your browser settings.
Future changes
- If analytics, marketing or profiling cookies are introduced later, Heritage will update this section before activation.
- A privacy-first banner would then be implemented with default refusal, granular preferences and no pre-checked choices.
Terms
Essential terms for using the public website and understanding the Heritage AI service.
Service
- Heritage AI helps organize access credentials, private information, documents and operating instructions in an encrypted vault.
- The public website describes the product, platforms, business paths, security and registration flows.
- Actual app functionality may evolve and is governed by the application terms accepted at registration.
- Account, payment and identity data are described in the Heritage service privacy notice on this page.
Not a substitute for professionals or legal acts
- Heritage prepares access to information and instructions. It is not a will, transfers no ownership, and inheritance outcomes are not guaranteed. It does not replace a notary, lawyer, accountant, fiduciary or tax and financial advice.
- The service prepares operating continuity: access credentials, information, documents and instructions useful to beneficiaries and professionals.
- Succession, tax, wealth and corporate matters remain the responsibility of the user, heirs and appointed professionals.
User responsibilities
- You must use Heritage lawfully, provide accurate data and update beneficiaries, contacts, instructions, heartbeat and release timing.
- You must not upload unlawful, abusive or third-party content without proper authority.
- You must protect devices, credentials, email and authentication tools connected to the service.
Availability and limitations
- We make reasonable efforts to keep the website and service available, secure and updated, but do not guarantee uninterrupted or error-free operation.
- To the extent permitted by law, Heritage is not liable for indirect losses, misuse, inaccurate information entered by the user or decisions made without professional advice.
- Nothing in these terms limits mandatory consumer rights or liability that cannot be excluded by law.
Digital service and withdrawal
- Heritage is a digital service accessed online through an account, without physical shipping.
- You may withdraw within 14 days of concluding the paid-plan contract. If you expressly requested immediate activation, you pay only for service already provided until you communicate withdrawal, subject to statutory conditions. Contact heritage.rip.ai@proton.me. Mandatory consumer rights remain unaffected.
Personal pricing
- Annual: €149/year + VAT. Lifetime: €1,000 once + VAT, for those who prefer one payment. Your country's VAT is calculated at checkout.
- Within 24 months of your first Annual payment, you can upgrade to Lifetime with a €298 credit against the price.
- Trial: 90 days, no card required. Annual: 365 days.
- Professional firms and organizations receive a dedicated quote.
Governing law and venue
- These terms are governed by Italian law.
- For business users the competent venue is the Italian court identified by applicable rules; mandatory consumer venues remain unaffected.
- For terms questions contact heritage.rip.ai@proton.me.