Privacy Policy

Account information: name, email address, and profile photo, via our authentication provider.

Workspace content: whatever you and your family members choose to enter — tasks, documents, messages, contacts, travel details, funeral and memorial page content, insurance claims, medical summaries, estate/asset records, and expense records. Some of this (medical information, financial/estate details) is sensitive by nature; we restrict access to it within a workspace based on the roles your workspace assigns.

Payment information: if you purchase Premium, Stripe processes your card details directly — we never see or store your full card number.

Usage information: basic activity logs (who did what and when, within your workspace) used for the in-app activity feed and to operate the service reliably.

Public memorial page visitors:if a family publishes a memorial page, visitors may optionally leave an email address to view it and to post guestbook messages, which are held for the family’s moderation before appearing publicly.

• To operate and provide the features you and your workspace use;
• To send transactional email (invitations, notifications you’ve opted into, receipts);
• To process one-time Premium purchases;
• To power the AI Assistant, for Premium workspaces that use it (see below);
• To maintain security, prevent abuse, and enforce our Terms of Service;
• To improve the product — we don’t use your workspace content to train AI models, ours or anyone else’s.

We use the following providers to operate LegacyHub. Each processes only what’s needed to perform its function:

• Clerk — authentication and account management.
• Neon — our Postgres database host, where workspace content is stored.
• Vercel — application hosting and file (document/photo) storage.
• Resend — transactional email delivery.
• Stripe — payment processing for Premium purchases.
• Anthropic — powers the AI Assistant, for Premium workspaces only. Only the specific content needed to answer your request (workspace task/activity summaries, or text you ask it to draft/summarize) is sent; Anthropic does not use this data to train its models under our agreement with them.

We don’t sell your personal information, and we don’t share workspace content with anyone outside your workspace except the providers above.

We retain workspace data for as long as the workspace is active. If you delete your workspace or account, we delete the associated content within a reasonable period, except where we’re required to retain records (for example, payment records for tax/accounting purposes). You can request a full export or deletion of your workspace’s data at any time by emailing us.

We use industry-standard measures — encryption in transit, access controls scoped to your workspace and role, and vetted third-party providers — to protect your information. No system is perfectly secure, and we encourage you to use a strong, unique password and enable any additional account protections available to you.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to certain processing. To exercise any of these rights, email us at the address below — we’ll respond within a reasonable time.

LegacyHub is not directed at children, and workspace membership requires being at least 18. Some workspaces may reference minors (for example, as beneficiaries or family members) as part of estate or medical records entered by an adult member — that information is handled with the same access controls as the rest of the workspace.

Our infrastructure providers may process and store data in the United States and other countries. By using LegacyHub, you consent to your information being transferred to and processed in those countries, which may have different data protection laws than your own.

We may update this Privacy Policy from time to time. If we make material changes, we’ll notify workspace Administrators by email or in-app notice before the changes take effect.

Questions about this Policy, or want to exercise a data right? Email us at principiumtechnology@gmail.com.