Privacy Notice

Who operates WEALTHERNAL

WEALTHERNAL is operated by Ruhlan Jafarli, an independent founder in Baku, Azerbaijan. No registered legal entity currently operates the service. For privacy questions or account requests, contact support@wealthernal.com.

This notice covers visitors to the public site, registered applicants and admitted members. Public pages can be viewed without membership. Creating an account, verifying an email address and being admitted are separate steps. Member participation is limited to adults aged 18 or older; eligibility is reviewed before approval. Registration does not establish availability or legal eligibility in every country.

Information and its purposes

Account and membership information includes your email, display name, reserved username, email-verification status, account and session identifiers, application state, review history, and the notice version and time recorded with your acceptance. These records support sign-in, admission, account security and the operation of membership. Registration does not ask for a birth date or identity-document upload. Passwords are handled by the managed authentication service, not stored in application or membership-review records.

We store the profile details, posts, replies, attachments, social relationships, group participation, privacy preferences, Library entries and Portfolio information you choose to enter, so the corresponding features can work for the audiences you select. Invitation records include the intended email, a token digest and issue, expiry, redemption and revocation history. Registration creates no automatic Connection, group membership or marketing subscription.

Support requests, deliberately submitted reports, consent records, security counters, technical diagnostics and request metadata help us respond to requests, investigate reported conduct, protect access and recover the service. Providers also process technical traffic and delivery information needed to operate their services. We do not sell member information or display advertising in this beta.

Visibility and public sharing

Application access follows the saved audience, conversation and group-membership rules. Portfolio records and private exports are owner-only. Following someone does not establish a Connection or grant Messenger access. A private profile limits nonpublic posts to approved followers; it does not hide a post you separately authorize for Public access.

Public pages and expressly authorized Public posts can be viewed by signed-out visitors, indexed by search engines and included in link previews. Pressing Post with Public selected authorizes the text, selected author, approved references and ready media, including approved display metadata. The Publishing media section of the Beta Terms describes that exact revision and its traceable intent. It does not publish other posts or expose private ownership records. Saved recordings are private account references and remain subject to current source access.

A report shares the selected excerpt, explanation and necessary context with the founder. Review tools do not grant general access to private conversations or Portfolio records. The infrastructure operator nevertheless has privileged maintenance access. Recipients may retain screenshots or other copies that withdrawing access cannot recall.

Providers and international processing

Vercel hosts the application. Neon provides PostgreSQL, managed authentication and configured private object storage. Resend delivers authentication and membership-approval emails. Cloudflare routes mail sent to support@wealthernal.com to the founder's verified Google mailbox for support and privacy correspondence.

Encrypted recovery archives of application data and media are held locally, with an additional client-side encrypted copy in an owner-controlled Google Drive account. The recovery passphrase is held separately. These archives do not export or restore native authentication passwords or sessions.

The database and object-storage configuration is in Frankfurt. That does not mean all provider operations, support handling, backups or network traffic remain there. Processing may take place outside the configured region. Applicable international-transfer and location-specific requirements must be assessed for the relevant processing and participants; this notice does not claim universal compliance.

When a new password is submitted, a server-side Pwned Passwords check sends the first five characters of its SHA-1 hash to Have I Been Pwned, with response padding. It sends no email, password or full hash. The check does not run while you type, and lookup values are not stored in application records.

Calls and screen sharing are currently unavailable. If separately enabled for an accepted pilot, LiveKit Cloud transports audio and video with transport encryption. Camera and microphone access require permission; screen sharing requires a separate choice. WEALTHERNAL does not provide call recording.

Page-view analytics and device storage

The canonical site uses Vercel Web Analytics for aggregate page-view statistics on selected browsing routes, including these legal pages. Information can include the normalized page path, time, approximate location, browser, operating system and device type. Vercel describes using a request-derived visitor hash, discarded after 24 hours, rather than third-party analytics cookies.

The application removes dynamic identifiers, query strings and fragments from counted paths. It withholds authentication, Settings, messages, financial-record and search routes, as well as documents opened with an external referrer. It sends no custom analytics events, account identities, message text or Portfolio values. This describes the application's analytics filters; it does not mean hosting and security systems receive no technical request data.

The service uses cookies and similar storage for authentication and session functions. Theme, transparency and motion preferences are stored on your device. Some unfinished form drafts are kept in browser session storage so they can be recovered in the same tab. Browser controls can clear or restrict this storage; doing so may end access or prevent preferences and drafts from being restored.

How long information remains

Accounts and ordinary content remain while active; there is no automatic inactivity deletion. Membership applications, review history, invitation history, support text, report decisions, consent records and application-controlled security and diagnostic records currently remain during the beta unless a specific correction, deletion or pruning action is carried out. Ordinary invitation links expire after seven days; expiry does not erase their history.

Report excerpts and explanations are excluded from review after 30 days. Opening the review queue and founder-run privacy maintenance remove expired excerpts and explanations from the active report records. The founder must run and check that maintenance daily. It is not an unattended schedule; new outside invitations stop if the last recorded maintenance is more than 36 hours old.

Provider log retention depends on provider configuration and is not fully verified. A replacement and pruning schedule for historical encrypted backups, including the Google Drive copy, has not yet been implemented. Deleting active data therefore does not immediately erase older recovery copies. These are current operational limits, not permission to retain information indefinitely or an exception to applicable deletion requirements.

Your choices and requests

Use Settings to manage audiences, follower approval, online status, read receipts, blocking and muting. Turning on read receipts shares your current read position. Audience changes do not automatically change the saved audiences of existing posts. Blocking does not erase earlier history.

For access to your information, correction, deletion, an objection to processing, withdrawal of consent where applicable, or questions about processing and sharing, email support@wealthernal.com. Signed-in members can also submit a request type through Account help and safety. That form sends an account reference and the selected request type; it is not a freeform support message. Support is manual and is not continuously monitored.

We need to confirm the requester and the scope before disclosing or irreversibly changing records. Never send passwords, verification codes, invitation or recovery links, or private exports in a support message. Applicable rights, complaint routes and mandatory response or erasure deadlines remain available. This notice does not replace them with a discretionary beta timetable.

Exports, deletion and recovery

The self-service export is a limited JSON copy of selected profile, Library, Portfolio and authored-post records. It preserves decimal and date precision, with a limit of 500 records per section and 5 MB. Conversations, media files and credentials are excluded. Download authorization lasts 24 hours and is bound to the requesting account and session. An expired or removed download cannot recall copies already downloaded. Contact support for a fuller access request.

Submitting a deletion request does not erase or pause your account. Signing out and closing a support case do not establish deletion either. Fulfillment may require resolving shared group or community ownership, then separately handling access, authentication and sessions, eligible content and media, pending jobs and retained audit or recovery records. General one-click deletion of nonempty accounts is unavailable. Recipient copies and historical backups may remain; the outcome and outstanding steps must be distinguished when a request is handled.

Application and media recovery have been tested in isolation, but those archives are not complete recovery of the authentication provider. Keep your own copy of important records.

Security and notice changes

The service uses access controls and transport encryption. These protections are not end-to-end encryption, a security certification or a guarantee against loss or unauthorized access. Sign-out or a password change should not be understood as instantaneous invalidation of every previously issued token. WEALTHERNAL is not an emergency service.

Registration and invitation acceptance record the notice version actually presented and accepted, together with the acceptance time. Acknowledging this notice is not blanket consent to every processing purpose. Existing members are not marked as accepting a revision merely because wording or layout changed. Material changes and any legally required choices must be presented before they apply. Contact support@wealthernal.com about this notice or an earlier version.