Privacy

Who we are

MyHeroLegacy is a service of IT Unlocked LLC. When this page says “we”, it means IT Unlocked LLC. We may be reached at support@myherolegacy.com.

You may have arrived through an organisation that told you about us — a veterans’ association, a first-responder group or another partner. Your account and everything in it belong to MyHeroLegacy, not to that organisation. What partners can and cannot see is set out below.

What we collect

• Your account. Email address, the name you choose to display, and a password we store only as a hash — we cannot read your password. If you order a printed book, the delivery address you give us.
• Your hero, and the book. Everything you type into the questionnaire: service history, units, ranks and awards, family members, places, dates and the experiences you want the book to tell. Some of this is personal information about someone other than you, which is the point of the service, and some of it may concern a person who has died.
• Photographs you upload, and the illustrations and book files generated from them.
• Orders. What you ordered, when, the amount, the delivery address, and the fulfilment and tracking status. We never see or store your card details — payment happens on Stripe’s own checkout and we receive only a confirmation and the last four digits.
• Support requests, if you send one: the message, the reference number and our replies.
• How you found us. The referring partner, and the campaign and link details in the address you arrived on. This is kept so the organisation that introduced you is credited correctly, including on a later visit.
• Technical records. Server and error logs, sign-in events and administrative actions, kept so we can keep the service running and investigate problems.

Artificial intelligence, and your photographs

The story and the illustrations are generated. To do that, the information you enter about your hero and the photographs you upload are sent to our AI provider, OpenAI, and the results come back to us. This is the service working as intended, and it is worth stating plainly so there is no surprise in it.

We send this material only to produce your book. Our provider handles it under an API agreement that does not permit using it to train its models. We do not use your photographs or your hero’s story to train anything, and we do not sell them or license them to anyone.

Generated text can be wrong. We do not invent service history, medals or decorations, and the book is built from what you provide — but you are the one who can tell whether it is right, which is why nothing is printed until you approve the proof.

Who else handles it

We use a small number of companies to run the service. Each receives only what it needs for its part, and none of them may use it for anything else.

• Microsoft Azure. Hosts the application and stores your photographs, books and account record.
• Stripe. Takes the payment. Card details go to Stripe directly and never reach us.
• Lulu Press. Prints and ships a printed book. Receives the print file and your delivery address.
• Microsoft 365. Sends our email - confirmation codes, order updates and support replies.
• OpenAI. Generates the story text and the illustrations from what you enter and upload.

We may also disclose information if the law requires it, or to protect someone’s safety. If the business is ever sold or merged, your information would transfer with it, and we would tell you first.

What partners can see

A partner organisation that referred you cannot see your account, your hero’s story, your photographs or your book. Partners receive counts and order references for the orders they referred, so they can reconcile what they are owed. Those statements deliberately leave customer names out.

No partner can reach another partner’s customers. That separation is enforced on our servers for every request, not by what a page chooses to display.

How long we keep it

Your books, heroes and photographs stay in your account for as long as you keep the account, so you can come back, re-read a book or order another copy years later. That is the point of a legacy book, and we would rather not delete one on a schedule you did not choose.

Order and payment records are kept for as long as tax and accounting rules require. Support conversations and security logs are kept while they are useful for running the service and then removed. If you delete a book, its files are removed from storage.

Your choices

You may ask us to show you what we hold, correct it, or delete your account and everything in it. Write to support@myherolegacy.com from the address on the account and we will deal with it. Some records — a paid order, for instance — have to be kept for accounting even after an account is closed.

Depending on where you live, you may have further rights under state privacy law, including the right not to be discriminated against for exercising them. We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not serve advertising on this service.

Cookies

We use cookies for two things: keeping you signed in, and remembering which partner introduced you. Both are necessary for the service to work as described. We do not use advertising or tracking cookies.

Children

Accounts are for adults. You must be 18 or over to create one, and we do not knowingly collect information directly from children. Books are often written for a child to read, and may contain photographs of family members including children — that material is provided by the adult who holds the account, and is treated like everything else in the book.

Security

Traffic is encrypted. Passwords are hashed. Your photographs and books are held in private storage that is not publicly readable, and the links the site issues to view them are short-lived. Administrative access requires two-factor authentication and is logged. No service can promise perfect security, but we would rather tell you what we actually do than claim more.

Changes

If we change this page we will update the date at the top, and for anything significant we will tell you by email. The current version always lives at app.myherolegacy.com/privacy.

How to reach us

IT Unlocked LLC, doing business as MyHeroLegacy6901 S. Pierce Street #380, Littleton, CO 80128support@myherolegacy.com