Privacy Policy

Viveir · Effective Date: April 19, 2026 · Last Updated: April 2026

This Privacy Policy describes what personal information Viveir collects, how we use and share it, how long we keep it, and the rights you have over it. By using Viveir, you agree to the practices described here.

Viveir is designed with privacy as a foundational value. We collect only what we need to operate the service, we do not sell your personal information, and we do not use your content to train third-party AI models beyond what is strictly necessary to deliver the features you have enabled.

1. Who We Are

Viveir is operated by Nathan Viveiros as a sole proprietor and its successor entity. Our mailing address is 82 County Rd, PMB# 57, Mattapoisett, MA 02739. For privacy questions, contact privacy@viveir.com.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: name, email address, password (hashed), date of birth (to confirm you are 18 or older), profile photo.
• Subscription and billing information: processed by Stripe; we receive a customer identifier, plan, billing status, and the last four digits of the card, but we do not store full payment card numbers.
• Memory content: text, audio, and video recordings you create; answers to interview questions; photos you upload; documents stored in your vault; scheduled messages; and all related metadata such as titles, dates, and captions.
• Voice data: recordings used to create your AI voice clone; the resulting voice clone data; and audio generated using your cloned voice.
• Family and contact information: names, email addresses, and relationship details you provide for designated Legacy Contacts and message recipients.
• Communications: emails, support tickets, and feedback you send us.

2.2 Information Collected Automatically

• Device and usage data: browser type, operating system, IP address, pages visited, features used, and timestamps.
• Log data: technical logs that help us diagnose errors and maintain security.
• Cookies and similar technologies: small files stored on your device to maintain your login session, remember preferences, and measure basic usage. We do not use advertising cookies.

3. How We Use Your Information

We use your information to:

• Provide and operate Viveir, including creating your account, delivering features, and maintaining your data.
• Process payments and manage subscriptions through Stripe.
• Generate AI interview responses, autobiographical drafts, voice synthesis, and other features you have enabled, using the third-party AI providers listed in Section 5.
• Deliver timed messages to recipients you have designated, at the times or upon the events you have specified.
• Provide Legacy Contacts with the access you have authorized after a triggering event.
• Send you service notifications, security alerts, and occasional product updates. Marketing emails are opt-out; service emails are not.
• Troubleshoot problems, prevent fraud, and enforce our Terms.
• Comply with legal obligations.

We do not sell your personal information, and we do not share your content with third parties for their independent marketing purposes.

4. Legal Bases for Processing

Although we currently operate only in the United States, we process your information under the following bases: to perform our contract with you (providing the Viveir service), with your consent (for features like voice cloning), to comply with legal obligations, and for our legitimate interests in operating a secure, reliable service.

5. Third-Party Service Providers

Viveir relies on the following third-party processors to operate. Each is bound by contractual privacy and security obligations:

• Supabase: database, authentication, and storage for all user content. Supabase servers are located in the United States.
• Vercel: application hosting and serverless function execution.
• Netlify: hosting for the Viveir marketing website.
• Stripe: subscription billing, payment processing, and billing portal. Stripe is a PCI-DSS Level 1 service provider.
• Anthropic (Claude): primary AI provider for conversational interviews, autobiography generation, and family member conversations. Anthropic does not use Viveir user data to train Anthropic's models.
• OpenAI: secondary AI provider used for automatic failover if Anthropic is unavailable; also used for audio transcription (Whisper) and text-to-speech fallback. OpenAI processes API data under its business/API terms, which exclude training on customer data by default.
• ElevenLabs: voice cloning and synthesis. ElevenLabs stores your voice model to generate speech at your direction.
• Resend: transactional email delivery (invitations, confirmations, delivery notifications).

We may update this list as our infrastructure evolves. Material changes will be reflected in an updated Privacy Policy and announced through our standard notification channels.

6. Sharing With Family and Other People

Viveir shares your content with other individuals only when you have explicitly configured that sharing. Examples include:

• Sending a timed message to a family member at a date or event you specify.
• Granting a Legacy Contact access to specified content upon your death or incapacitation.
• Publishing a public memorial page that you have chosen to make public.

You control these settings. You can change or revoke them at any time while your account is active, subject to the effects of actions already taken (for example, a message already delivered cannot be unsent).

7. Legal Disclosures

We may disclose information when we believe in good faith that disclosure is required to comply with applicable law, a valid legal process, or a lawful government request. Where permitted, we will attempt to notify you of such requests before disclosure. We may also disclose information to protect the rights, property, or safety of Viveir, our users, or the public.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide the service. When you cancel, your content is retained as described in our Terms of Service (90-day grace period, then a 90-day export window, then permanent deletion). Backups follow normal rotation schedules and are typically purged within 35 days of their source data being deleted.

We may retain limited records longer than this for legal compliance, fraud prevention, or to resolve disputes.

9. Your Rights

You have the right to:

• Access a copy of the personal information we hold about you.
• Correct inaccurate information through your account settings or by contacting us.
• Export your content in a machine-readable format (full export during active subscription; summary export during the wind-down window).
• Delete your account and the content in it.
• Withdraw consent to specific features, such as voice cloning.
• Opt out of marketing emails at any time (service emails cannot be opted out of while you have an account).

To exercise these rights, use in-app controls where available or email privacy@viveir.com. We respond within 30 days of verifying your identity.

10. Security

We protect your information using a combination of technical and organizational measures, including:

• Encryption of data in transit using TLS 1.2 or higher.
• Encryption of data at rest using industry-standard algorithms.
• Row-level security on our database so users can access only their own data.
• Optional multi-factor authentication on user accounts.
• Access controls and logging on administrative systems.
• Regular dependency and security patching.

No system is perfectly secure. If we become aware of a security breach affecting your personal information, we will notify you and any regulatory authorities as required by applicable law.

11. Children's Privacy

Viveir is not intended for individuals under 18. We do not knowingly collect personal information from children under 13, and we restrict account creation to users 18 and older. If you believe a child under 18 has created an account, please contact privacy@viveir.com and we will delete the account and associated information.

12. Do Not Track and Advertising

We do not track users across third-party websites, and we do not display advertising in Viveir. We honor Do Not Track browser signals by not engaging in any behavioral tracking regardless of the signal.

13. California Residents

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what categories of information we collect, the right to delete, the right to correct, and the right to limit the use of sensitive information. We do not sell or share personal information for cross-context behavioral advertising. To exercise California rights, email privacy@viveir.com.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be announced by email or in-app notice at least 30 days before they take effect. The "Last Updated" date at the top of this Policy reflects the most recent revision.

15. Contact

Questions about privacy? Contact privacy@viveir.com or write to us at the mailing address above.