Privacy Policy

1. Information We Collect

We collect several types of information to provide and improve SoulEcho™:

Account Information. When you create an account, we collect your name and email address. If you subscribe to a paid plan, we collect billing information through our payment processor.

Memorial Data. This includes photos, voice recordings, text messages, letters, documents, and personality questionnaire responses that you upload to create a memorial profile. This is the most sensitive data we handle, and we treat it with the highest level of care.

Conversation History. We store conversations between users and the AI memorial to maintain continuity and improve the experience.

Payment Information. Payments are processed by Stripe. We do not store credit card numbers or full payment details on our servers. Stripe's privacy policy governs the handling of payment data.

Usage Data. We collect standard usage information including pages visited, features used, session duration, and device information. This helps us understand how people use SoulEcho™ and where we can improve.

2. How We Use Your Information

We use the information we collect to create and maintain memorial profiles, power AI conversations based on your uploaded data, process payments for subscriptions, send waitlist updates and product announcements (you can opt out at any time), and improve the SoulEcho™ platform.

We will NEVER sell your data to third parties. Your memories are not a product. They belong to you and your family.

We will NEVER use your data for advertising. You will never see ads based on your memorial content.

We will NEVER use uploaded memorial data to train AI models. Your uploaded photos, voice recordings, texts, and stories are used exclusively to power your specific memorial. They are never fed into general-purpose training datasets.

3. Data Storage and Security

Your data is stored on Supabase (PostgreSQL) with encryption at rest. Uploaded files, including photos and voice recordings, are stored on encrypted cloud storage with strict access controls.

All data transmitted between your device and our servers is encrypted using HTTPS/TLS. We implement role-based access controls to ensure that only authorized personnel can access system infrastructure.

No system is perfectly secure, and we cannot guarantee absolute security. However, we take commercially reasonable measures to protect your data and continuously evaluate our security practices.

4. Your Rights

You have the right to:

Access. Request a copy of all personal data we hold about you.

Export. Download your data in a portable format so you can take it with you.

Deletion. Request permanent deletion of your account and all associated data, including memorial profiles, uploaded files, voice clones, conversation history, and AI-generated content.

Correction. Update or correct any personal information we hold about you.

If you are a resident of the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including the right to restrict processing and the right to data portability.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt out of the sale of personal information. We do not sell personal information.

5. Memorial Data

Memorial data is the most sensitive information on our platform. Creators of memorials must attest that they have the authority to create the memorial, whether as next-of-kin, an executor of the estate, or someone pre-authorized by the individual before their passing.

Family members can only access memorials they have been explicitly invited to by the memorial creator. All memorial data is isolated per family group, meaning one family's data is never accessible to another.

If a memorial is deleted, all associated data is permanently removed from our systems. This includes uploaded files, voice clones, AI embeddings, and conversation history. This deletion is irreversible.

6. Children's Privacy

SoulEcho™ is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected data from someone under 18, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us at the address below.

7. Third-Party Services

SoulEcho™ uses the following third-party services to operate. Each service has its own privacy policy governing how they handle data:

Anthropic provides the AI language model that powers memorial conversations.

ElevenLabs provides voice synthesis technology for voice-based memorial interactions.

Stripe processes all payments and subscription billing.

Netlify hosts the SoulEcho™ website and application.

SendGrid handles transactional and marketing emails on our behalf.

8. Changes to This Policy

We may update this Privacy Policy from time to time as our practices evolve or as required by law. If we make material changes, we will notify you via email before the changes take effect. Your continued use of SoulEcho™ after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

9. Contact

If you have questions about this Privacy Policy or want to exercise your data rights, you can reach us at:

Email: support@soulecho.app

Mail: CW Affiliate Investments LLC, Combined Locks, WI 54113