Legal
GenHERational Wealth Lab ("GWL," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
Account information: When you create an account, we collect your name, email address, and password (stored securely via our authentication provider, Supabase).
Lab data: Content you enter through the Service (including your resource inventory, questionnaire responses, scoring inputs, and any notes) is stored in your account and used to provide the Service.
Usage events: We collect anonymized usage events (for example, when you complete onboarding or save a decision) to understand how the Service is used and to improve it. These events are associated with your account for internal analytics only.
Technical data: Standard web server logs including IP addresses, browser type, and page visits may be collected by our hosting infrastructure (Netlify) and authentication provider (Supabase).
We do not sell your personal information to third parties. We do not use your Lab data (resource inventory, business information, scores) for advertising or marketing purposes.
Your data is stored on Supabase, a cloud database platform. Supabase uses industry-standard security practices including encryption at rest and in transit. Access to your data is governed by Row Level Security (RLS) policies: your data is only accessible to you and to authorized server-side functions that operate the Service.
No security system is completely impenetrable. We implement reasonable safeguards but cannot guarantee the absolute security of your information.
We use the following third-party services to operate GWL:
We do not share your personal information with these providers beyond what is necessary to operate the Service.
The Service uses a session cookie set by Supabase Auth to maintain your login state. We do not use advertising cookies, tracking pixels, or third-party analytics that profile your behavior across other websites.
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, contact us using the information below. We will respond within a reasonable timeframe.
We retain your account data for as long as your account is active. If you request deletion of your account, we will delete your personal information and Lab data within 30 days, except where retention is required by law or legitimate business necessity (such as financial records).
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have inadvertently collected information from someone under 18, we will delete it promptly.
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page. Continued use of the Service after changes constitutes your acceptance of the updated policy.
Questions or requests regarding your privacy may be directed to the contact information provided on our website. For deletion requests, please include "Data Deletion Request" in your subject line.