Privacy Policy
Last updated: [date]
Who we are
LegacyVerse ("we", "us") operates a private memory vault for families, based in Toronto, Ontario, Canada. Contact: [privacy contact email]. Our privacy officer is [name].
What we collect
- Early-access sign-ups: your email address, optional first name, who you'd like to preserve stories from, the plan you were interested in, your consent to be emailed, the time you signed up, and the country your request came from.
- Accounts: your name, email address and sign-in details.
- Family stories: the stories, answers and other material you add to a profile, the memories you approve, edit or reject, your corrections, and your conversations.
- Permission records: who gave permission for a profile, the exact wording they agreed to, and when. If permission is withdrawn, we record that too.
- Technical information: basic logs needed to keep the service secure and working. We don't use advertising trackers.
How we use it
- To run your account and the profiles you create, and to answer your questions using only memories you've approved.
- To send your invitation and LegacyVerse news, if you agreed to receive them. You can unsubscribe at any time.
- To keep the service secure, prevent misuse and meet legal obligations.
We do not sell your information, and your stories are never used to train AI models.
AI processing
To suggest memories and answer questions, the relevant text is sent to our AI provider, [Anthropic], under terms that don't allow it to use your data for training. This processing may take place outside Canada, including in the United States. [Describe the provider's retention period.]
Voice recordings and voice recreation
Recordings of a person's voice are kept in their vault and played back as recorded. If you buy the Their Voice add-on, we use their recordings to create a recreated voice with our voice provider, [ElevenLabs], only after the person (or, where permitted, their authorized representative) has given recorded consent. Answers spoken in a recreated voice are always labelled as AI. You can ask us to delete a recreated voice at any time, and we delete it from our provider too.
Payments
Payments are processed by Stripe. We receive your name, email, billing country and the item you bought. We never see or store your full card number. For gifts, we keep the occasion, delivery date and the recipient's first name if you give it.
Where your information is stored
Account and family data is stored with [Supabase] in Canada ([ca-central-1]). The website and early-access list are hosted by Cloudflare, which may process requests in data centres outside Canada. Data is encrypted in transit and at rest.
Who can see it
A profile is visible only to the account that created it. Sharing a profile with family is always your choice. Our staff access family content only when you ask for help or when the law requires it.
How long we keep it
Sign-ups are kept for [12 months], or until you ask us to remove them. Family data is kept while your account is active. When you delete a profile or your account, it is removed from our systems within [30 days], and from backups within [30 days].
Your choices and rights
You can ask to see, correct, export or delete your information, and you can withdraw consent at any time. Withdrawing permission for a profile stops all replies immediately. To make a request, contact [privacy contact email]. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.
Children
LegacyVerse is for adults aged 18 and over, and profiles in this release are for living adults only.
Changes
If we make important changes to this policy, we'll tell you by email or in the app before they take effect.