WEALTHERNAL — Privacy Notice

Version: 18F-2026-10-21.3

Operator: Ruhlan Jafarli, independent founder, Baku, Azerbaijan. No registered legal entity currently operates WEALTHERNAL.

Contact: support@wealthernal.com

Applies to: personally invited adult testers only; first cohort up to five new external members.

Effective: upon publication on WEALTHERNAL.

About this private beta

WEALTHERNAL is an independently founder-operated, invitation-only experiment for adult participants. It provides profiles, Feed, Connections, Messenger, groups, media and personal Portfolio records. For privacy, support and account requests, contact support@wealthernal.com. Participants are personally selected by the founder, and the eligibility of each invitation, including relevant country-specific requirements, is reviewed before it is issued. An invitation does not imply general availability in any country.

Information we handle and why

We use the invited email, a provider-managed password, genuine email verification, account and session identifiers to authenticate and admit members. Invitation records include the intended email, a token digest and issue, expiry, redemption and revocation history. We store profile information, content, attachments, Connections, group participation, privacy settings and Portfolio information you choose to enter. Bounded security counters, technical diagnostics, request metadata, consent records and support/report records help operate, protect and recover the service. We do not sell member information or add advertising in this beta. No marketing subscription is created.

Who can see information

Ordinary application access follows audience, conversation and group-membership rules. Portfolio records and private exports are owner-only. Admission creates no automatic Connection or group membership. A report deliberately shares the selected excerpt, explanation and necessary context with the founder; the founder review interface does not grant general conversation or Portfolio access. The infrastructure operator has privileged maintenance access. Private audience controls and transport encryption are not end-to-end encryption. Recipients may keep screenshots or other copies that access withdrawal cannot recall.

Providers, locations and calls

Vercel hosts the application. Neon provides PostgreSQL, Managed Better Auth and configured private object storage. Authentication emails are sent using the configured email delivery provider (Resend). Cloudflare routes incoming mail sent to support@wealthernal.com to the founder’s verified Google mailbox, which is used to review support and privacy correspondence. Encrypted recovery archives of application data and media are held locally and an additional client-side encrypted copy is stored in an owner-controlled Google Drive account. The encryption passphrase is kept separately from that archive. These providers may process technical account, delivery and traffic information as necessary to provide their services. If calling is separately enabled for an accepted pilot, LiveKit Cloud transports audio/video using transport encryption. Calling stays unavailable until its safety and device acceptance gates pass. Camera and microphone require deliberate permission; screen sharing requires a separate deliberate choice. This beta does not provide call recording. Database/object-storage configuration in Frankfurt is not a claim that all processing or traffic remains there. Provider operations and network traffic may involve processing outside the configured database region. Applicable country-specific requirements, including any additional privacy disclosures or lawful-basis information, must be addressed before inviting a participant in the relevant location. No universal international compliance claim is made.

Retention

Ordinary invitation links expire after seven days; invitation history remains during the beta. Accounts and ordinary content remain while active; there is no inactivity deletion. Report excerpts and explanations are excluded from review at 30 days. Opening the review queue and founder-run privacy maintenance logically purge expired excerpts and explanations. The founder must run and check this maintenance daily; there is no claim of an unattended purge schedule. New outside invitations stop if the recorded maintenance becomes more than 36 hours old. Report decisions, support text, security audits and app-controlled diagnostics currently remain during the beta or until a specifically approved fulfillment/pruning action; no 14-day or 90-day automatic deletion promise is made. Provider log retention follows the actual provider configuration and is not fully verified. Encrypted historical backups, including the owner-controlled Google Drive recovery copy, remain until the operator separately approves and implements a replacement and pruning policy. Deletion from the active application does not immediately remove data from older encrypted backups. No rolling 30-day erasure promise is made.

Account requests, shared content and deletion

Use Account help & safety or email support@wealthernal.com to request access, export, correction or deletion. Support is manual and not continuously monitored. A request receipt or closed case is not proof of erasure. The operator confirms the requester and exact scope before irreversible work, then separately reports access withdrawal, native identity/session removal, eligible profile/content and media removal, pending jobs, shared ownership, tombstones, retained recipient copies, audits and encrypted backups. Shared group/community ownership must be resolved before destructive fulfillment. General one-click deletion of nonempty accounts is not verified. No blanket deletion deadline is promised. Any legally required response or erasure deadline still applies and must be assessed for the approved participant countries.

Exports, recovery and security limits

Private export authorization lasts 24 hours and is bound to the requesting account and session; expiry cannot recall downloaded copies. Application/media recovery was tested in isolation. It does not export or restore native Auth passwords or sessions. Current portable recovery archives are encrypted using a separately held owner passphrase. An additional client-side encrypted copy is kept in owner-controlled Google Drive; the operator separately checks recovery integrity. Application backups are not full account-provider disaster recovery. Keep your own copy of important records. Do not put passwords, verification codes, invitation links or recovery links in reports or support messages.

Your choices and changes

Use audience controls, blocking and consented reports to manage sharing. Blocking does not erase prior history. Sign-out or a password change is not represented as instantaneous invalidation of every issued token. New participants acknowledge the exact Privacy Notice version and explicitly accept the Beta Terms and adult eligibility when redeeming an invitation. This acknowledgement is not blanket consent to every processing purpose. Existing members are not silently marked as accepting new notices. Material changes and any legally required choices must be presented before they apply. Applicable rights are not waived. WEALTHERNAL is not an emergency service.