Privacy Policy

1. Summary

The Platform (davis.one and every site, service and environment House Davis operates under it, as the Terms of Service define it) has two parts. The public site is open to anyone of any age, requires no account, and collects nothing from a visitor beyond ordinary server logs. The member area is entered only with a seat issued by House Davis, to a member of the family and household, a relative House Davis recognises as part of the greater House, a person it chooses to admit, or a person who serves the family office. We run no advertising, sell no data, use no tracking or analytics, and make no automated decisions about anyone. The member area holds personal information about the people we seat and the family's own records of itself, its history, its children and its affairs, entered by the family for the family, shown only to seats that may see them, and never shared with anyone outside the family except the providers that run the Platform and except as valid legal process compels.

2. Who is responsible

House Davis LLC, United States, is responsible for the personal information on the Platform, together with any successor or affiliate to which it assigns the Platform. Questions and requests from members go to office@davis.one.

3. What we hold, and why

On the public site:

• Server logs. Our hosting provider records the IP address, browser type, pages requested and time of each request, for security and to keep the site available.
• Correspondence. If you email us, we keep the message and your address to reply.

In the member area, for each seated person:

• The seat. A davis.one address used as an identity (not a mailbox), a handle, a display name, the permissions the seat carries, and when it was issued.
• Passkeys. The public half of each passkey registered to the seat, a label for the device, and when it was last used. We never hold a password, and the private key never leaves the person's device.
• Sessions. A signed-in session, its expiry, and the browser and IP address it was opened from.
• Profile. What the person (or an administrator on their behalf) enters: a portrait, links to their own web pages and public profiles, and personal details: name, preferred name, date of birth, sex, and current address. Age is calculated from the date of birth when a page is viewed and is not stored. A profile is part of the family record, and every version of it is kept.
• The ledger. An append-only record of every sign-in, sign-in failure, invitation, registration, sign-out, and administrative change, with the time, the seat, and the IP address and browser it came from. When personal details change, the ledger records that they changed and which fields were set, not the values. Access to reports and other restricted content may be recorded the same way.
• Private environments. Where House Davis operates rooms, worlds or other environments in which seated people are present together, it may record and keep what happens there: presence, movement, what is said and written, and what is made, as part of the family's own record. Any such environment says so where it is entered.

For the family:

• The family record and the genealogy. Names, dates, places, relationships, life events, photographs, documents and records of members of the Davis line and connected families, living and deceased, including the children of the family, compiled from the family's own research, from what House Davis already held or has acquired, and from what members and relatives contribute; and genetic ancestry information that relatives have voluntarily provided to the family or to a genealogy service on the family's account, held in accordance with the terms it was provided on and the law that applies to it.
• Reports on the family office. Private documents about the family's structure, capital, holdings, activities and plans, which may name members and their roles.
• Support for the family. Where a seated person, or a person House Davis has invited, tells the office of a wish or an intention to support the family by gift, bequest or otherwise, or of their capacity to do so, what they tell us is held in confidence, is used only to arrange that support directly with them, and is never used for any other purpose. Where the law requires it before any arrangement, House Davis may verify a person's identity and eligibility.

We hold this information because the family asked for a private place to keep it: to know who holds a seat, to let members reach and recognise one another, to keep the family's own record of itself, its history, its children and its affairs, to let members meet and work together, and to keep the member area secure and accountable. We process a seated person's information to provide the member area they asked for; the ledger and logs for the legitimate interest of keeping the Platform secure; and the family records and reports, including records about the children of the family, in the exercise of the family's own parental and family rights and its legitimate interest in its own history and affairs, to the fullest extent the law allows.

4. People who serve the family office

A person who serves the family office, such as counsel, an adviser, or staff, and who is given a seat is treated under this policy like any other seated person, with the permissions House Davis assigns. Their information is held for the purpose of their service and for as long as the family's records require, in addition to whatever their engagement provides.

5. Where it is kept and who can see it

The Platform runs on Vercel (hosting) and member data is stored in a Postgres database provided by Neon, both in the United States, under their standard terms. These providers process data on our behalf and do not use it for their own purposes; if House Davis adds a provider, for an environment or otherwise, this policy will name it. Inside the member area, a seated person's profile, links and details are visible to every seat that can see the directory; the genealogy, the reports and each environment are visible only to seats that carry them. Administrators can see and change every seat and read the ledger. We do not share member data or the family records with anyone else, do not sell them, do not use them for advertising, and make no automated decisions about anyone. Nothing is disclosed voluntarily to anyone outside the family; see section 11.

6. Cookies

The member area sets one cookie: a session cookie that keeps a seat signed in on the device it signed in from. It is strictly necessary for the member area to work, contains a random token and nothing about you, and expires after thirty days or when you sign out. The public site sets no cookies. We use no analytics or tracking of any kind, so browser signals such as Do Not Track change nothing: there is nothing to opt out of. If we ever add privacy-respecting, aggregate analytics, this policy will say so before it goes live.

7. Security

Sign-in uses passkeys only: a key held on the person's own device and unlocked with their fingerprint, face or device code. There are no passwords to leak or phish. Data travels over HTTPS. Portraits, personal details, the family records and the reports are served only to signed-in seats that may see them and never from a public address. The ledger is hash-chained so that it cannot be altered without detection. Access to the database and to the hosting account is limited to the House. No system is perfectly secure; if we learn of a breach affecting seated persons' information we will tell the persons concerned promptly and as the law requires.

8. Retention

Nothing contributed to the member area is deleted. A seated person may update their own profile, links and details from their own profile, but every prior version is kept, and House Davis may restore any of them. When a seat is revoked, its sessions end immediately and its profile is no longer shown to other seats; the seat, its contributions and its ledger entries are kept so the record stays complete. Server logs are retained by the hosting provider under its standard terms. Correspondence is kept only as long as needed. The family record, the genealogy, the reports, and what House Davis keeps from its environments are kept indefinitely as the family's own permanent record, as House Davis decides.

9. Members' rights

A seated person may see what the member area shows about them, may update their own profile, links and details directly, and may propose a correction to their own entry in the family record by writing to us; we answer within thirty days. These are the rights of members, and they are rights to see and to update, not to remove: what a member contributes becomes part of the family record under the Terms of Service, every version is kept, nothing is deleted at a member's request, and House Davis may restore any record. The family record, the reports and the record of the environments, including entries about members and about people who hold no seat, are the family's own and are decided by House Davis alone.

10. Use from outside the United States

The Platform is operated from the United States and your information is processed there. If you use the Platform from elsewhere, you consent to that. Where the law of the place you live gives you rights over your information, House Davis honours what that law actually compels of it and offers nothing beyond it; where House Davis is itself established or operating in a country whose law applies to it, this policy will be updated to say what that law requires. House Davis reserves, and does not waive, every right, privilege and protection available to it and to its members under the law of any jurisdiction.

11. Requests from anyone else, and from government

This policy gives no rights to anyone who does not hold a seat, whatever their relationship to a member or to a person named in the family records, and none to any governmental body, agency or official, in any country. We do not act on requests or demands from outside the family to access, obtain, inspect, correct, restrict, add to or remove anything in the member area or the family records, or concerning any member, except as compelled by valid and enforceable legal process directed to House Davis LLC and served in accordance with law. Where such process is served we assert every available privilege and objection, contest it where there are grounds, notify the affected members unless the law prohibits it, and disclose or act only to the minimum actually compelled. We make no voluntary disclosure to law enforcement or to any other authority.

12. Children of the family

Anyone, including a child of the family, may visit the public site; it requires no account and we collect nothing from any visitor there beyond ordinary server logs. The member area is entered only with a seat. A child of the family holds a seat only with the consent and under the control of a parent who is a member, and we collect information from a child in the member area only as that parent directs and consents; a seat for a child is not issued otherwise, and House Davis may use age-appropriate settings and verification for such a seat. Records about the children of the family, whether entered by a parent, by House Davis, or by the child under a parent's direction, are made and kept in the exercise of the family's own parental and family rights, within the private member area, for the family's own purposes, and to the fullest extent the law allows. Only House Davis decides what is kept; requests concerning such records from anyone outside the family are handled under section 11.

13. Third parties

Links on the Platform, including links members add to their own profiles, take you to services governed by their own privacy policies. We do not embed their scripts. Apart from the providers named in section 5, no third party receives member data or the family records.

14. Changes and contact

When what the Platform holds changes, this policy changes with it: we post the revised version here with a new effective date. Members' questions and requests: office@davis.one. House Davis LLC, United States.