Privacy Policy
ART. 01 — Who we are
HERITA is a digital platform published by Famistore Inc., a company registered in Quebec, Canada. Our head office is located in Montreal, Quebec, Canada. HERITA is the first memorial infrastructure built for the family. Data Protection Officer (DPO): dpo@herita.org
ART. 02 — What we collect
Information you provide directly: • First name, last name, email, encrypted password • Family tree member profiles • La Mémoire content (photos, videos, documents, recordings) • Les Voix and Le Foyer messages • La Lignée messages • Payment information, processed exclusively by Stripe and Flutterwave Information collected automatically: • IP address (anonymized after 30 days) • Device and browser type • Pages visited (anonymized usage) • Browser language We never collect the encrypted content of La Mémoire — encryption happens client-side, making it technically impossible for our teams to read it.
ART. 03 — Why we collect it
• Email and password → authentication (performance of contract) • Profile → personalizing your experience (performance of contract) • La Mémoire content → secure storage and delivery (performance of contract) • IP address → local currency and security (legitimate interest) • Usage data → anonymized platform improvement (legitimate interest) • Payment information → subscription management (performance of contract) • Family tree → production of the Family Book and printed Family Tree on request (performance of contract and consent)
ART. 04 — What we never do
We never sell your data. We never use your data for advertising purposes. We never share your data with advertisers. We never analyze your family memories for commercial purposes. We never use your data to train artificial intelligence models without your explicit consent. We never display advertising on HERITA. Never.
ART. 05 — How we protect your data
• Client-side AES-256 encryption for La Mémoire • TLS 1.3 for all communications • Passwords hashed with bcrypt • Ultra-protected areas (Succession Chamber, Health Record, Patrimoine) requiring code confirmation • Independent security audits • Audit log accessible only to you • Row-Level Security — each user can only access their own space
ART. 06 — Where your data is stored
Canada: OVHcloud Canada, Beauharnois, Quebec — PIPEDA compliant. European Union: OVHcloud Europe — GDPR compliant (Phase 3). Africa: MainOne (Phase 3). Your data never leaves your chosen jurisdiction without your consent. Retention: for the duration of your subscription, then deleted within 30 days of account closure.
ART. 07 — Your rights
• Right of access: download all your data from your settings • Right to rectification: update your information from your profile • Right to erasure: permanent deletion from your settings • Right to data portability: export in JSON or PDF format • Right to object • Right to restriction of processing • Right to designate a Successor Guardian Contact: dpo@herita.org — response within 30 days. If HERITA were ever to cease operating, you would immediately recover all your data. This is a contractual commitment.
ART. 08 — Cookies
• Session: keeps you logged in (duration: session) • Authentication: stay signed in (duration: 30 days) • Preferences: language and display (duration: 1 year) • Security: CSRF protection (duration: session) Zero advertising cookies. Zero third-party tracking.
ART. 09 — Minors
Account creation and Primary Guardian status are reserved for individuals aged 18 and over. Minors may be added to the family tree by an adult Guardian, with appropriate permissions. To report a concern: dpo@herita.org
ART. 10 — Third parties and partners
• Stripe: card payments — payment information only • Flutterwave: mobile payments for African markets • Daily.co: end-to-end encrypted video calls • Brevo: transactional emails — email address and service email content only • OVHcloud: hosting of encrypted data • Vercel: web interface delivery (CDN) — IP address and HTTP requests only None of our providers is authorized to use your data for any purpose other than the one for which they were engaged.
ART. 11 — Transmission after death
Succession Protocol: designation of a Successor Guardian, confirmed by two Trusted Guardians. La Lignée: messages are delivered according to the trigger you configured, even after death. Moral Testament: accessible to designated individuals, according to the visibility conditions you set. Account closure by an heir: upon presentation of legal proof, to succession@herita.org.
ART. 12 — Changes
You will be notified 30 days in advance of any substantial change to this policy, by email and by notification within your family space. The current version is always available at herita.org/confidentialite. The level of protection of your data will never be reduced without your explicit consent.
ART. 13 — Contact us
Data Protection Officer (DPO): dpo@herita.org Support: support@herita.org Digital succession: succession@herita.org Address: Famistore Inc., Montreal, Quebec, Canada Relevant authorities: Office of the Privacy Commissioner of Canada — priv.gc.ca; Commission d'accès à l'information du Québec — cai.gouv.qc.ca; for EU residents, the data protection authority of your country of residence (GDPR).
Last updated: July 2026