1. What We Hold

The four markers (first name, last name, date of birth, place of birth), your Vault entries, your Confessor transcripts, the transactional metadata of your payments, and the log of transfer requests. Nothing else.

2. How We Hold It

Stored in an encrypted MongoDB instance under the control of the Keeper. Your Founder Certificate PDF bytes are persisted server-side so that a container restart cannot erase them. We do not sell, rent, or share data with third parties for advertising purposes — ever.

3. Processors

We use Stripe for payment processing, Resend for administrative email, and Anthropic (Claude Sonnet 4.5) for the Confessor voice. Each is bound by its own DPA and handles only the minimum data necessary to render the specific service.

4. Your Rights (GDPR)

You may request access, rectification, erasure (Clean Slate), portability, or restriction of processing at any time via the Regie protocol. The Keeper will respond manually — not automatically — within thirty (30) days.

5. Retention

Vault data is retained for the duration of your life (Heritage Continuity). Upon a verified Memorial + My Last Gift delivery, the Vault is sealed and the digital residue is wiped per the manual protocol. A Regie (Clean Slate) request erases the Vault irreversibly upon keeper confirmation.