Privacy Policy

We may collect the following categories of information.

Account information

When you create or use an account, we may collect information such as your name, email address, account identifiers, authentication information, preferences, and related account details.

User Content

We collect the information you choose to provide through Heirloom, which may include stories, memories, names, dates, locations, facts, photographs, documents, recordings, audio, comments, and other content. User Content may include information about you and about other people.

Contributor information

If you invite another person to contribute to a story or project, we may process information needed to provide that feature, such as the contributor’s name, email address, invitation information, access permissions, and the content they provide.

Book and order information

Ordering and payments are coming soon. When they launch, if you order a printed book or other physical product, we may collect information needed to process and fulfill that order, such as your name, shipping address, billing information, order details, product selections, and the content required to produce the product.

Payment information

Ordering and payments are coming soon. When they launch, payments may be processed by third-party payment providers. Heirloom may receive transaction details such as purchase amount, currency, payment status, billing country, and transaction identifiers. We do not necessarily receive or store complete payment-card details.

Technical and usage information

We and our service providers may automatically collect information such as IP address, browser type, device information, operating system, login activity, timestamps, pages or features used, error information, and other technical or usage data.

Communications

If you contact us, we may collect the contents of your message, your contact information, and information needed to respond. Email sent to hello@2bl.ai passes through ImprovMX, a third-party email forwarding service, before it is delivered to us.

We collect information directly from you when you create an account, provide content, communicate with us, place an order, or otherwise use the Service; from contributors or other users who interact with you through Heirloom; automatically when you use the Service; from service providers that help us operate the Service; and from third parties where reasonably necessary to provide a feature you request.

We may use personal information to:

• create and maintain your account;
• provide Heirloom’s storytelling, organization, collaboration, and publishing features;
• process, store, organize, transform, and display User Content;
• provide AI-assisted features;
• create books and other outputs you request;
• process and fulfill purchases;
• provide customer support;
• maintain the security, integrity, and reliability of the Service;
• detect abuse, fraud, unauthorized access, and technical problems;
• troubleshoot, evaluate, and improve the Service;
• communicate with you about your account, orders, features, and material changes to the Service;
• send marketing communications where permitted by law and subject to applicable opt-out rights;
• comply with legal obligations; and
• protect our rights, users, and others.

Heirloom uses artificial intelligence to help you draft, organize, summarize, and edit your stories. To do this, your messages, memories, and uploaded content (including photos and PDFs) are sent to our AI provider, Anthropic. If you use voice input or upload audio or video, the audio is sent to our transcription provider, Deepgram. Deepgram may keep your audio and transcripts and use them to improve its own speech recognition models, under its own terms and privacy policy. If you do not want this, do not use voice input or upload audio or video. If you are signed in, your email address and phone number may be sent to Anthropic along with your messages.

We do not currently train or fine-tune AI models on your content. Our providers handle information under their own terms and privacy policies, and we do not control how they operate. If we change how we use your content, we will update this policy before the change takes effect.

Authorized Heirloom staff may review conversations to provide support, keep the Service safe, and improve it.

We use third parties to help operate Heirloom. Current core providers include:

• Vercel: hosting and infrastructure;
• Supabase: database and file storage;
• Clerk: sign-in and account services, including sign-in with Google, and sending sign-in codes by email and text message;
• ImprovMX: email forwarding for hello@2bl.ai;
• Anthropic: AI processing; and
• Deepgram: voice and audio transcription.

If you sign in with Google, Google receives information about that sign-in under its own privacy policy. We will add providers to this list before they receive your information.

When printed books become available, if you order a printed book or other physical product, we may share the information reasonably necessary to produce and deliver your order with printers, manufacturers, marketplaces, fulfillment companies, shipping providers, or other vendors.

This may include your shipping information, order details, and the User Content that must appear in the product.

We aim to provide only the information reasonably necessary for the relevant provider to perform the requested service.

We may disclose personal information:

• to service providers that help us operate Heirloom;
• to printing, fulfillment, payment, shipping, and related providers when you request those services;
• to people you choose to share content with;
• where necessary to complete a transaction or feature you request;
• in connection with a financing, incorporation, reorganization, acquisition, sale, or transfer of Heirloom or substantially all of its business or assets;
• where required by law, legal process, court order, or regulatory request;
• where reasonably necessary to investigate fraud, abuse, security incidents, or violations of our Terms of Service;
• where reasonably necessary to protect the rights, property, or safety of Heirloom, our users, or others; or
• with your consent or at your direction.

We do not and will not sell your stories or your personal information.

User Content may include information about people other than the account holder.

If you provide personal information about another person, you are responsible for deciding whether it is appropriate and lawful to do so.

Heirloom may process that information as part of providing the Service to you.

If another person contacts us with a privacy concern regarding information about them, we may investigate the request and take action where required by applicable law.

Heirloom is operated from Canada and uses service providers that may process or store information in Canada, the United States, or other countries.

As a result, your information may be transferred to and processed in countries whose privacy laws differ from those where you live. Government authorities, courts, or law-enforcement agencies in those countries may have lawful access to information under local law.

We retain personal information for as long as reasonably necessary to provide the Service, maintain accounts, fulfill orders, comply with legal and accounting obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business purposes.

Retention periods may vary depending on the type of information and why we hold it.

When information is no longer reasonably required, we may delete, anonymize, or de-identify it, subject to technical limitations, backup cycles, legal requirements, and legitimate security or fraud-prevention needs.

To delete your account and the content associated with it, email hello@2bl.ai from the address on your account and we will process the request. Some information may remain in backups for a limited time or where we are required to keep it.

Heirloom does not currently promise that all User Content can be exported or downloaded before deletion.

Depending on where you live, you may have rights regarding your personal information, which can include rights to request access, correction, deletion, withdrawal of consent, restriction or objection to certain processing, information about how data is used or disclosed, portability where required by law, and the ability to complain to an applicable privacy regulator.

These rights are subject to applicable legal exceptions and may differ by jurisdiction.

To make a privacy request, contact hello@2bl.ai. We may need to verify your identity before completing the request.

Heirloom is not intended for children under 16, and we do not knowingly permit a person under 16 to create an account.

If we learn that we have collected personal information directly from a child under 16 in circumstances where we are not legally permitted to do so, we will take reasonable steps to delete or otherwise address that information.

If you believe a person under 16 has created an account or provided personal information to Heirloom, contact hello@2bl.ai.

Heirloom uses cookies and similar technologies to keep you signed in, remember your settings, and protect your account. We do not currently use advertising or analytics tools. Depending on the design of the page, your browser may load fonts from Google Fonts.

If we send promotional or marketing communications, you may opt out using the unsubscribe mechanism provided in those communications or by contacting us.

We may still send non-promotional messages necessary to provide the Service, such as account, security, order, or legal notices.

We use reasonable administrative, technical, and organizational measures designed to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, and destruction.

Our providers also maintain their own security controls.

No internet service, storage system, or transmission method can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for using appropriate security practices.

Heirloom may contain links to or integrations with third-party services.

Those third parties operate under their own terms and privacy policies. This Privacy Policy does not govern information you provide directly to an independent third party outside Heirloom.

We may update this Privacy Policy as Heirloom evolves.

If we make material changes to how we collect, use, or disclose personal information, we will provide reasonable notice and obtain consent where required by applicable law.

The last updated date at the top of this policy identifies the current version.

For privacy questions, requests, or concerns, contact:

Heirloom
Operated by Second Brain Labs
Ontario, Canada

Email: hello@2bl.ai
Website: heirloom.2bl.ai