heiressBack to home
Website and waitlist privacy notice · Draft

Your privacy.

This notice describes the Heiress website and launch waitlist. It does not describe the future investing app or create an investment account.

What the waitlist collects

When you join, we store your email address, signup time, which signup form you used, and campaign attribution if it appears in the page URL. Joining requests a Heiress launch notification. This form does not enroll you in unrelated campaigns.

How the website works

Vercel hosts the website. Supabase processes and stores waitlist signups. To limit automated submissions, the signup service uses short-lived, hashed rate-limit identifiers derived from network information and email addresses. The rate-limit table does not store raw IP addresses. Hosting providers may process connection information in their own operational logs.

The website does not include advertising pixels, marketing analytics, or tracking cookies. It does not request wallet information, payment information, or an app password.

Access and retention

Waitlist records are restricted from public read, update, and delete access. The signup endpoint can add an email after validation and rate-limit checks. Expired rate-limit entries are cleared on later requests once they have been expired for a day.

The final waitlist retention period, the process for requesting removal, and Heiress's legal operator are pending confirmation. This draft is not yet a complete privacy policy.