Legal
Privacy Policy.
Heritage Nexus Inc. operates Basalith. This policy explains what personal data we collect, how it is held, and your rights in respect of it.
Last updated: March 2026
Section 01
What We Collect
When you submit an archive application through our onboarding flow, we collect your full name, email address, phone number (optional), and your selected service tier.
When you submit a message through our contact form, we collect your name, email address, the nature of your enquiry, and any message content you choose to provide.
We do not collect payment card data directly. All payment processing is handled by Stripe, who operates under their own privacy and security frameworks.
We do not use tracking pixels, third-party analytics scripts, or behavioural advertising tools on this site.
Section 02
How It Is Stored
All data submitted through this site is stored in Supabase, a managed database platform operating on servers located in the United States. Data is encrypted at rest and in transit using industry-standard protocols.
Archive and subscriber data held in connection with active service agreements is stored in accordance with the terms of your Sovereignty Charter, which governs retention, access, and portability independently of this policy.
We do not store data on personal devices or unmanaged infrastructure.
Section 03
Who Can Access It
Data submitted through this site is accessible only to Heritage Nexus Inc. staff and authorized contractors operating under confidentiality obligations.
We do not sell, license, rent, or otherwise transfer your personal data to third parties for any commercial purpose.
We do not share your data with AI model providers, data brokers, advertising networks, or research organisations.
Law enforcement requests are handled in accordance with applicable law. We will notify affected individuals of such requests where legally permitted to do so.
Section 04
Data Retention
Pre-signup enquiry data — archive applications and contact form submissions — is retained for as long as is necessary to manage your enquiry and maintain a record of our correspondence.
If your enquiry does not result in an active service agreement, we will delete your submission data within 24 months of your last interaction with us, or immediately upon a verified deletion request.
Data associated with active Basalith archives is governed by your Sovereignty Charter and the terms of your service agreement, which take precedence over this policy in respect of archive content.
Section 05
Requesting Deletion
You may request the deletion of any personal data we hold about you at any time by sending an email to privacy@basalith.xyz from the address associated with your submission.
We will confirm receipt within 5 business days and complete the deletion within 30 days, unless we are legally required to retain the data for a longer period.
Deletion of enquiry data does not affect active service agreements, which are governed by your Sovereignty Charter.
Section 06
Cookies
This site does not use advertising cookies, tracking cookies, or third-party analytics cookies.
We use only essential session cookies required for the operation of our onboarding flow — specifically, to temporarily preserve your tier selection and contact details across steps. This data is stored in your browser's localStorage and is cleared upon completion or abandonment of the flow.
By using this site, you consent to this limited, functional use of browser storage.
Questions about this policy or requests relating to your data should be directed to privacy@basalith.xyz. We take every request seriously and respond personally.