Legal

Privacy Policy

Last updated: August 2026

1. Who We Are

Basalith is a digital legacy platform operated by Heritage Nexus Inc. We build a permanent record of human memory for families and individuals. Each one is a Basalith: the record and the entity built for one person or one business.

Contact: privacy@basalith.xyz

2. What We Collect

We collect information you provide directly, including:

• ·Photographs and visual media you upload to your Basalith
• ·Written stories, labels, and memories you submit
• ·Voice recordings and video you deposit
• ·Personal information including names, relationships, dates, and locations associated with the content of your Basalith
• ·Contact information for contributors you invite
• ·Payment information processed through our payment provider
• ·Communications between you and Basalith
• ·Application details submitted through our onboarding flow, including your name, email address, phone number where you provide one, and your selected tier
• ·Contact form messages, including your name, email address, the nature of your enquiry, and any message content you choose to provide

3. How We Use Your Information

We use the information we collect to:

• ·Build and maintain your Basalith
• ·Train your entity on the authorized content of your Basalith only
• ·Send photograph emails and digest notifications to contributors you have designated
• ·Process payments for your plan
• ·Communicate with you about your Basalith
• ·Improve our services

We do not sell your personal information or the content of your Basalith to any third party. Ever.

We do not use the content of your Basalith to train general-purpose models. Your data trains only your entity.

4. How We Store and Protect Your Data

Your photographs and the content of your Basalith are stored in encrypted private storage. Photographs are never publicly accessible. Access requires authenticated credentials specific to your Basalith.

We use industry-standard encryption for data in transit and at rest.

5. Service Providers and Data Location

Basalith runs on a small number of named service providers. Each one receives only what it needs to perform its function. None of them may use the content of your Basalith for their own purposes, and we do not sell or license your data to any of them.

The content of your Basalith, meaning your photographs, voice recordings, video, and written deposits, is held in the United States.

The Anthropic API, which powers entity responses, does not train on API submissions by default. Their data usage policy is available at anthropic.com/legal/privacy.

Voice and video deposits are sent to OpenAI for transcription. This covers voice recorded in the portal and the iOS app, deposits left on the phone line, and video you upload. Video is sent as a complete file and transcribed from its audio. The spoken language is detected automatically, in every language. Transcription is the only use. No other content of your Basalith is sent to OpenAI.

6. Who Can Access Your Data

Access is limited to Heritage Nexus Inc. staff and authorized contractors operating under confidentiality obligations, and only where access is necessary to operate or support your Basalith.

We do not sell, license, rent, or otherwise transfer your personal data or the content of your Basalith to third parties for any commercial purpose. We do not share it with data brokers, advertising networks, or research organizations.

Law enforcement requests are handled in accordance with applicable law. We will notify affected individuals of such requests where we are legally permitted to do so.

7. Face Recognition

With your consent, we use face recognition technology to identify individuals across your Basalith. This technology:

• ·Operates only within your Basalith
• ·Is never used to identify individuals outside your family's photographs
• ·Can be disabled at any time in your preferences
• ·Face data is stored only within your Basalith and never shared

8. Data Retention

The content of your Basalith and enquiry data are governed separately. The two commitments below are not interchangeable, and neither one extends to the other.

Your Basalith

You own your Basalith, and you may request a complete export of it in open, portable formats. Export requests are fulfilled within 30 business days. If a payment is missed, your Basalith moves to Resting status. Your content is preserved and is never deleted for non-payment. Permanent deletion occurs only when you, or an executor with documented authority, make a verified written request. After that request is verified, we hold your Basalith for 12 months, then permanently delete it and confirm in writing.

Because you keep ownership and can export, your Basalith does not depend on the continued existence of Basalith as a company. Basalith is the custodian, not the owner. Read our data ownership commitments →

Enquiry data

Applications and contact form submissions are enquiry data. They are not the content of your Basalith, and the commitments above for your Basalith do not apply to them.

We retain enquiry data for as long as is necessary to manage your enquiry and keep a record of our correspondence. If an enquiry does not result in an active Basalith, we delete the submission within 24 months of your last interaction with us, or sooner on a verified deletion request. Send deletion requests to privacy@basalith.xyz from the address associated with your submission. We confirm receipt within 5 business days and complete the deletion within 30 days, unless we are legally required to retain the data for longer.

Deleting enquiry data does not affect an active Basalith. The commitments above apply to the content of your Basalith and are unchanged by it.

9. Your Rights

You have the right to:

• ·Access all data in your Basalith
• ·Request a complete export of your Basalith in open formats, fulfilled within 30 business days
• ·Delete specific content from your Basalith
• ·Designate or change your Custodian
• ·Opt out of face recognition
• ·Close your account and request an export of your data

To exercise any of these rights: privacy@basalith.xyz

10. Cookies and Browser Storage

We use essential cookies only, to maintain your authenticated session. We do not use advertising cookies, tracking pixels, or third-party analytics scripts, and we do not share cookie data with third parties.

Our onboarding flow holds your tier selection and the contact details you enter in your browser’s localStorage, so the information carries across steps. That data stays on your device and is cleared when you complete the flow or abandon it.

11. Children

Every Basalith is managed by an adult. We do not knowingly collect personal information from children under 13 as primary account holders. Family members of any age may appear as subjects in the photographs in a Basalith.

12. Changes to This Policy

We will notify active account holders of material changes to this policy by email with 30 days notice.

13. Contact

Questions about this policy: privacy@basalith.xyz

Your Data. Your Basalith. Your Heirs.

Ownership After Death

Your Basalith is your property. It does not become ours when you die.

Upon your death your Basalith transfers to your designated heirs or estate exactly as you would transfer any other private asset.

Heritage Nexus Inc. does not acquire any rights to the data in your Basalith upon your death. Your cognitive reference model, meaning your deposits, voice recordings, and photographs, is a private digital asset that belongs to your estate.

We are the custodian. You are the owner. Your heirs are the beneficiaries. We are never the inheritor.

Company Dissolution

If Heritage Nexus Inc. ceases operations for any reason:

• ·You will receive advance notice where circumstances permit.
• ·You can request a complete export of your Basalith, meaning all deposits, voice recordings, and photographs in standard open formats (JSON, MP3, JPEG), fulfilled within 30 business days.
• ·The data in your Basalith will never be sold to a third party as part of any asset sale, acquisition, or bankruptcy proceeding.
• ·If we are acquired, the acquiring entity must honor these same commitments as a condition of the acquisition.

Data Use for Training

The data in your Basalith is never used to train models for other users. Not now. Not ever.

Each Basalith is a closed system. What you deposit trains your entity. It does not train anyone else’s entity. It does not train Basalith’s general models. It does not leave your Basalith except to the service providers named in section 5, and only for the purposes stated there.

For security questions: security@basalith.ai