Security & Privacy

Privacy by Design

Every legacy begins as private. Nothing is publicly searchable. Nothing is indexed by search engines. Nothing is shared unless the Legacy Owner chooses to share it. Your memories exist for the people you love—not for the public internet.

Your Private Vault

Every Legacy includes a Private Vault designed for the most personal moments. The Private Vault is accessible only by:

• The Legacy Owner
• Authorized beneficiaries
• Family members specifically invited by the owner

Not your sponsoring organization. Not staff members. Not volunteers. Not other users. When we say "Private Vault," we mean exactly that.

Shared Legacy vs. Private Vault

Legacy Programming™ encourages meaningful conversations between residents, families, and caregivers. Content created during organization-sponsored Legacy Sessions™ may initially become part of the Shared Legacy to support engagement and participation. However, the Legacy Owner remains in control.

At any time, the owner may move memories from the Shared Legacy into their Private Vault. Once moved:

• The sponsoring organization no longer has access to that content.
• Staff can no longer view, edit, or download the memory.
• The organization retains only the record that a Legacy Session™ occurred for participation reporting.

The memory itself belongs to the owner. Always.

Access Is Based on Permission

Every person who accesses Solace Moment has permissions based on their role.

For example:

• Legacy Owner — Can access everything within their own Legacy.
• Beneficiaries — Can access only the memories the owner has chosen to share.
• Family Members — Can access only the areas they have been invited to.
• Organization Staff — Can access only the information necessary to facilitate Legacy Programming™ within their organization.

Solace Moment administrators maintain the platform and support our customers, but we do not browse, search, or access your private memories as part of normal operations. Your family's stories are not ours to read.

Secure by Design

We continuously work to protect your information using modern security practices. This includes:

• Secure authentication
• Encrypted data transmission
• Protected cloud infrastructure
• Role-based access controls
• Continuous monitoring
• Secure backups
• Ongoing platform updates

Security is an ongoing commitment—not a one-time feature. As technology evolves, so will our protections.

Your Privacy Is More Important Than Convenience

Some software platforms collect as much information as possible. We believe in collecting only what is necessary to provide and improve the Solace Moment experience. Our goal is to protect your memories—not profit from your personal information.

Transparency Builds Trust

We believe you should always understand who can access your information, why information is collected, how your memories are protected, and what happens to your legacy over time. Trust grows through transparency. That is why we openly publish our privacy commitments, ownership policies, licensing model, AI practices, and continuity plans.

Security Is a Shared Responsibility

While we work every day to protect your information, everyone has a role in keeping accounts secure. We encourage all users to:

• Choose strong passwords.
• Protect their login credentials.
• Keep contact information current.
• Review beneficiary and sharing settings periodically.
• Notify us immediately if they suspect unauthorized access.

Together, we can help ensure every legacy remains protected.

Our Commitment

We know that preserving a legacy requires more than great technology. It requires trust. Every story. Every photograph. Every voice recording. Every video. Every memory. Deserves to be protected with the same care we would want for our own families. That is the standard we hold ourselves to every day. Because safeguarding your legacy is not simply part of our business. It is our responsibility.

Privacy Comes With Responsibility

One of the ways Solace Moment protects your family's legacy is by ensuring that your private content remains under your control. Because your Private Vault is designed so that only you and the people you authorize can access it, Solace Moment cannot recover, restore, or retrieve private content that has been permanently deleted or overwritten by you.

This is intentional. It means your private memories remain truly private—even from us. For that reason, we encourage every Legacy Owner to carefully review any confirmation messages before:

• Permanently deleting memories
• Replacing uploaded files
• Removing beneficiaries
• Permanently deleting documents
• Making other irreversible changes

Whenever an action cannot be undone, Solace Moment will provide a clear confirmation message explaining what will happen before the action is completed. We encourage you to take a moment to review these messages carefully. Protecting your privacy also means respecting your decisions.

Why We Designed It This Way

Many online services have the ability to access or recover customer content. We intentionally designed Solace Moment differently. Your family's private memories are not something we can browse, retrieve, or restore simply because we operate the platform. That means when you choose to permanently remove private content, there is no hidden copy that our staff can recover on your behalf.

While this requires a little extra care when making permanent changes, it also provides a level of privacy and ownership that reflects the trust families place in us. The same privacy that protects your memories from everyone else also protects them from us. True privacy means even we cannot unlock what belongs only to your family.