Effective Date: April 2, 2022
At Heriteo, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our web application. Please read this policy carefully. If you do not agree with its terms, please discontinue use of the service.
1. Information We Collect
We may collect the following types of information:
- Account Information: Name, email address, and password when you register for an account.
- User Content: Data, text, images, files, and other materials you upload or manage within Heriteo.
- Usage Data: Information about how you interact with the service, including log data, device information, and IP addresses.
- Payment Information: Billing details processed through our third-party payment providers for paid subscriptions. We do not store full payment card numbers.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Heriteo service.
- Process transactions and manage your subscription.
- Send you service-related communications such as confirmations and support messages.
- Improve and personalise the user experience.
- Comply with legal obligations and enforce our Terms of Service.
3. How We Share Your Information
We do not sell or rent your personal information. We may share it with:
- Service Providers: Trusted third-party vendors who assist us in operating the platform (e.g., hosting, payment processing, analytics), bound by confidentiality obligations.
- Google Analytics: Website audience measurement is provided by Google LLC, which may process the data in the United States. Transfers rely on the EU–US Data Privacy Framework, to which Google LLC is certified, together with the Standard Contractual Clauses. See section 7 for what is sent and when.
- Legal Requirements: When required by law, court order, or governmental authority.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to users.
4. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us. We may retain certain information as required by law or for legitimate business purposes.
5. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data.
- Object to or restrict certain processing of your data.
- Withdraw consent where processing is based on consent.
To exercise any of these rights, please contact us using the details below.
7. Cookies & Local Storage
Heriteo stores a small amount of data in your browser to operate the service. We use Google Analytics 4 for audience measurement on our public website. It loads with storage consent denied by default: no analytics cookies are written and no advertising signals are collected unless you grant the Analytics category. With consent denied, aggregate cookieless measurement data — including your IP address and the page URL — is still sent to Google so we can estimate overall traffic. We do not use marketing trackers. The table below itemises every storage entry currently in use, its purpose, and how long it is kept.
| Key | Storage | Purpose | Category | Retention |
|---|---|---|---|---|
auth-token, auth-refresh-token, auth-user, auth-tenant-id | sessionStorage | Authenticated session | Necessary | Browser session |
heriteo_auth_sync | localStorage | Cross-tab login sync | Necessary | Up to 60 seconds, then cleared |
auth.return_url | sessionStorage | Post-login redirect | Necessary | Single navigation |
assets-view-mode, assets-scroll-y | sessionStorage | UX continuity (list/grid, scroll position) | Necessary | Browser session |
heriteo.onboardingPath | localStorage | Resume signup flow | Necessary | Until signup completes |
heriteo.cookie-consent | Cookie (.heriteo.com) | Records your consent choice, shared across our subdomains | Necessary | 12 months, then re-prompt |
_ga, _ga_TGR7J8J0V4 | Cookie (.heriteo.com) | Google Analytics audience measurement — distinguishes visitors and sessions. Written only if you grant the Analytics category. | Analytics | 13 months |
You can change your choice at any time:
8. Third-Party Links
Our service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
9. Children's Privacy
Heriteo is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated effective date. Continued use of Heriteo after any changes constitutes acceptance of the revised policy.
11. Contact Information
If you have any questions or concerns about this Privacy Policy, please contact us here.
By using Heriteo, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. For more details on your obligations as a user, please see our Terms of Service.