Privacy Policy

1. Current Website Scope

The current Heira website is an informational, pre-launch website.

At this stage, the website does not provide or accept:

• user accounts;
• waitlist submissions;
• qualification responses;
• Customer Research enrollment;
• Founding Navigator applications;
• payment information; or
• other identifiable information submitted through website forms.

If Heira later introduces features that collect additional information, this Privacy Policy will be updated as appropriate before those features are activated.

2. Information Processed Automatically

When you visit the website, limited technical information may be processed automatically by the infrastructure providers that deliver and operate the site.

This may include information such as:

• source IP address;
• user-agent information;
• request identifiers;
• date and time of a request;
• HTTP method;
• requested path and host;
• response status;
• response timing and size;
• edge-region or network information; and
• application and infrastructure logs.

This provider-level information is used for infrastructure operation, security, reliability, troubleshooting, and debugging.

Heira does not use this provider telemetry for advertising, audience profiling, identity resolution, or personalization.

Provider-level infrastructure telemetry is separate from Heira’s structured website measurement described below.

3. Privacy-Minimized Website Measurement

Heira uses limited, privacy-minimized measurement to understand whether visitors can navigate and understand the informational website.

The website may record the following controlled events:

• site_home_view
• life_navigation_view
• scenario_interaction
• founding_navigator_info_view
• cta_interaction

Heira’s structured website measurement does not append or intentionally collect:

• IP addresses;
• user-agent strings;
• raw URLs;
• arbitrary referrer URLs;
• request headers;
• free-text content;
• form content;
• advertising identifiers; or
• fingerprinting information.

Provider request telemetry is not imported into these structured measurement events.

4. Session Storage

The current website does not author cookies for website measurement and does not use localStorage or IndexedDB for that purpose.

The website uses browser sessionStorage to maintain a short-lived anonymous measurement session.

The measurement storage entry may contain:

• a state version;
• a randomly generated anonymous UUIDv4 session identifier;
• a last-activity timestamp;
• controlled acquisition-attribution information;
• bounded page-view deduplication information; and
• bounded short-interaction deduplication information.

The anonymous session identifier is randomly generated. It is not derived from an IP address, user agent, device characteristics, fonts, canvas information, account information, or other fingerprinting techniques.

It is not designed to identify a person or to persist identity across browser sessions, devices, or websites.

Logical measurement sessions rotate after approximately 30 minutes of inactivity and are also limited by the browser or tab lifecycle associated with sessionStorage.

The website’s underlying software may separately use non-identifying session storage for functional purposes such as restoring scroll position.

5. Acquisition Attribution

Heira may record limited anonymous attribution information to understand generally how visitors arrive at the website.

Attribution may be categorized from controlled campaign parameters, a normalized external referrer, direct traffic, or an unknown source.

Heira’s structured measurement does not retain raw referrer URLs, arbitrary campaign text, full URLs, or query strings for this purpose.

This attribution information is not linked to a name, email address, account, research record, product content, or other identifiable profile, and Heira does not intentionally stitch it across browser sessions, devices, or websites.

6. Technologies We Do Not Currently Use

The current Website V1 does not use Heira-authored:

• advertising identifiers;
• advertising or retargeting pixels;
• browser or device fingerprinting;
• session replay;
• persistent cross-session website identifiers; or
• behavioral advertising profiles.

If these practices materially change in the future, Heira will update its disclosures and implement any additional controls required before activating those practices.

7. Service Providers

Heira uses third-party technology providers to host, deliver, secure, maintain, and operate the website.

Those providers may process limited technical information as necessary to provide their services.

Railway currently provides website infrastructure and may process HTTP and application telemetry as described above. Provider log retention is governed by the applicable Railway service configuration and policies.

Heira currently uses that provider telemetry only for infrastructure operation, security, reliability, troubleshooting, and debugging.

8. Sale and Advertising Use of Information

Heira does not currently sell Website V1 measurement information or use it for behavioral advertising.

The current Website V1 does not use advertising pixels or advertising identifiers.

9. Retention

Heira limits its structured Website V1 measurement to information needed for the purposes described in this Policy.

Short-lived browser measurement state is governed by the session behavior described above.

Infrastructure providers may retain technical logs according to their applicable service configuration and policies. Heira does not intentionally copy provider IP addresses, user-agent information, or other provider request telemetry into its structured Website V1 measurement dataset.

10. Security

Heira takes reasonable steps appropriate to the current website to protect the systems and information used to operate it.

No internet transmission or information system can be guaranteed to be completely secure.

11. Children

The current Heira website is intended for a general adult audience and is not directed to children under 13.

The current website does not provide forms, accounts, or other features through which visitors can intentionally submit personal information to Heira.

Future Founding Navigator or product participation may be subject to separate eligibility requirements.

12. Third-Party Websites

The website may contain links to third-party websites or services.

Heira does not control the privacy practices of third parties. Their handling of information is governed by their own policies and practices.

13. Changes to This Privacy Policy

Heira may update this Privacy Policy as the website or its practices change.

If changes are made, the revised Policy will identify an updated effective date. Material changes associated with new data-collection functionality will be addressed before that functionality is activated where appropriate.

14. Contact

Questions about this Privacy Policy or Heira’s website privacy practices may be sent to:

privacy@heiraapp.com