Template for legal review. This draft has not been reviewed by a lawyer and is not legal advice.

Privacy Policy

Draft dated October 19, 2026. Owner: Poietes LLC.

Template for legal review. This draft describes how Poietes LLC ("we") handles information when you use Legacy Vault at nextgen-vault.com. Poietes LLC (https://poietes.org) is the owner of the service. Counsel should confirm this draft before it is treated as a binding policy.

Information we collect

  • Account information you give us, such as your name and email address.
  • Files, passwords, and other content you store in your vault.
  • Beneficiary names and email addresses you enter.
  • Billing details processed by Stripe. We do not store full card numbers.
  • Activity records and technical data the application writes so it can run and so access can be audited.

How content is protected

Each file is encrypted on the server with AES-256-GCM under its own data key. That data key is wrapped with a server master key before it is stored. Passwords are encrypted on the server with the same master key. Keys are not sent to the browser. This is not a zero-knowledge service and not client-side encryption. Anyone who can read the master key and the stored ciphertext can decrypt the content. That includes the application servers and operators of Poietes LLC who can access that key.

How we use information

We use information to provide the service, process payments, send account and beneficiary-invitation email, and keep the service secure. Check-in email and automatic release of a vault are coming soon and are not sent today. We do not sell personal information. Counsel should confirm this statement against applicable privacy law before publication.

Service providers

The application is built to use Supabase for the database, authentication, and private file storage; Stripe for payments; Resend for email; and Vercel for hosting. Counsel should confirm the published list against the providers actually under contract.

Retention and deletion

Account content stays until you delete it or ask us to delete the account, except where we must keep a record to operate the service or meet a legal duty. A specific retention schedule is for counsel to set before this template is published.

Contact

Poietes LLC, https://poietes.org. Email [email protected].