This Privacy Policy describes what personal information Viveir collects, how we use and share it, how long we keep it, and the rights you have over it. By using Viveir, you agree to the practices described here.

Viveir is designed with privacy as a foundational value. We collect only what we need to operate the service, we do not sell your personal information, and we do not use your content to train third-party AI models beyond what is strictly necessary to deliver the features you have enabled.

1. Who We Are

Viveir is operated by Nathan Viveiros as a sole proprietor and its successor entity. Our mailing address is 82 County Rd, PMB #57, Mattapoisett, MA 02739. For privacy questions, contact privacy@viveir.com.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: name, email address, password (hashed), date of birth (optional, used to place your memories on your timeline and in your autobiography), profile photo.
• Subscription and billing information: payments are processed by Stripe. We store your Stripe customer identifier, plan and billing status. We never see or store your card number.
• Memory content: text, audio, and video recordings you create; answers to interview questions; photos you upload; documents stored in your vault; scheduled messages; and all related metadata such as titles, dates, and captions.
• Voice data: recordings used to create your AI voice clone; the resulting voice clone data; and audio generated using your cloned voice.
• Family and contact information: names, email addresses, and relationship details you provide for your circle members and message recipients.
• Family tree information: names, relationships, contact details, dates of birth and notes about the people you add, including data you import from a GEDCOM file.
• Activation documents: documents your executor uploads to open access, such as a death certificate, a doctor's letter or a power of attorney.
• Partner program information: if you apply to our affiliate program, your application details, and which accounts signed up through your referral link.
• Usage records: a log of the AI features you use, so we can enforce plan limits and track costs.
• Communications: emails, support tickets, and feedback you send us.

2.2 Information Collected Automatically

• Device and usage data: browser type, operating system, IP address, pages visited, features used, and timestamps.
• Log data: technical logs that help us diagnose errors and maintain security.
• Cookies and similar technologies: we use cookies and similar browser storage only to keep you signed in and to remember a referral code if you arrived through a partner's link. We do not use analytics or advertising cookies.

3. How We Use Your Information

We use your information to:

• Provide and operate Viveir, including creating your account, delivering features, and maintaining your data.
• Process payments and manage subscriptions through Stripe.
• Generate AI interview responses, autobiographical drafts, voice synthesis, and other features you have enabled, using the third-party AI providers listed in Section 5.
• Deliver timed messages to recipients you have designated, at the times or upon the events you have specified.
• Give your circle members the access you have authorized, at the time you chose for each of them.
• Send you service emails, such as invitations, security alerts and notices about your legacy. If we start sending marketing emails, each one will include an unsubscribe link.
• Troubleshoot problems, prevent fraud, and enforce our Terms.
• Comply with legal obligations.

We do not sell your personal information, and we do not share your content with third parties for their independent marketing purposes.

4. Legal Bases for Processing

Although we currently operate only in the United States, we process your information under the following bases: to perform our contract with you (providing the Viveir service), with your consent (for features like voice cloning), to comply with legal obligations, and for our legitimate interests in operating a secure, reliable service.

5. Third-Party Service Providers

Viveir relies on the following third-party processors to operate. Each processes your data under its own published terms for business customers:

• Supabase: database, authentication, and storage for all user content. Supabase servers are located in the United States.
• Vercel: application hosting and serverless function execution.
• Stripe: subscription billing, payment processing, and billing portal. Stripe is a PCI-DSS Level 1 service provider.
• Anthropic (Claude): primary AI provider for conversational interviews, autobiography generation, and family member conversations. Anthropic does not use Viveir user data to train Anthropic's models.
• OpenAI: secondary AI provider used for automatic failover if Anthropic is unavailable; also used for audio transcription (Whisper) and text-to-speech fallback. OpenAI processes API data under its business/API terms, which exclude training on customer data by default.
• ElevenLabs: voice cloning and synthesis. ElevenLabs stores your voice model to generate speech at your direction.
• Resend: transactional email delivery (invitations, confirmations, delivery notifications).
• Upstash: rate limiting to protect the service from abuse. Upstash receives your account identifier or IP address and a request count, not your content.

We may update this list as our infrastructure evolves. Material changes will be reflected in an updated Privacy Policy and announced through our standard notification channels.

6. Sharing With Family and Other People

Viveir shares your content with other individuals only when you have explicitly configured that sharing. Examples include:

• Sending a timed message to a family member at a date or event you specify.
• Giving a circle member access immediately, on a date you choose, or after your death or incapacitation.
• Publishing a public memorial page. You can publish it yourself, and after your death the executor you chose can publish it if you have not.

You control these settings. You can change or revoke them at any time while your account is active, subject to the effects of actions already taken (for example, a message already delivered cannot be unsent).

7. Legal Disclosures

We may disclose information when we believe in good faith that disclosure is required to comply with applicable law, a valid legal process, or a lawful government request. Where permitted, we will attempt to notify you of such requests before disclosure. We may also disclose information to protect the rights, property, or safety of Viveir, our users, or the public.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide the service. If you cancel, your account moves to the Free plan and your content stays until you delete your account. When you delete your account, your content is removed right away. We keep a record that you accepted our Terms, and Stripe keeps your billing history.

After you die, we keep your legacy for your circle for as long as your preservation runway lasts. After that, only your memorial page stays online. We do not delete a deceased member's legacy because its runway has run out.

We may retain limited records longer than this for legal compliance, fraud prevention, or to resolve disputes.

9. Your Rights

You have the right to:

• Access a copy of the personal information we hold about you.
• Correct inaccurate information through your account settings or by contacting us.
• Download a copy of the content and account information you have stored in Viveir from your Profile ("Download my data"), and your family tree as a GEDCOM file from My Circle. You can also email privacy@viveir.com for a copy of anything else we hold about you.
• Delete your account and the content in it.
• Withdraw consent to specific features, such as voice cloning.
• Unsubscribe from any marketing email we send, using the link in that email (service emails cannot be turned off while you have an account).

To exercise these rights, use in-app controls where available or email privacy@viveir.com. We aim to respond within 30 days of verifying your identity.

10. Security

We protect your information using a combination of technical and organizational measures, including:

• Encryption of data in transit using TLS 1.2 or higher.
• Encryption of data at rest by our database provider.
• Row-level security on our database so users can access only their own data.
• Optional multi-factor authentication on user accounts.
• Administrative access limited to the owner and protected by sign-in checks.

No system is perfectly secure. If we become aware of a security breach affecting your personal information, we will notify you and any regulatory authorities as required by applicable law.

11. Children's Privacy

Viveir is not intended for individuals under 18. We do not knowingly collect personal information from children under 13, and everyone who creates an account confirms, by creating it, that they are at least 18 years old. If you believe a child under 18 has created an account, please contact privacy@viveir.com and we will delete the account and associated information.

12. Do Not Track and Advertising

We do not track users across third-party websites, and we do not display advertising in Viveir. We honor Do Not Track browser signals by not engaging in any behavioral tracking regardless of the signal.

13. California Residents

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what categories of information we collect, the right to delete, the right to correct, and the right to limit the use of sensitive information. We do not sell or share personal information for cross-context behavioral advertising. To exercise California rights, email privacy@viveir.com.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be announced by email or in-app notice at least 30 days before they take effect. The "Last Updated" date at the top of this Policy reflects the most recent revision.

15. Contact

Questions about privacy? Contact privacy@viveir.com or write to us at the mailing address above.