Privacy policy

Data controller

Event Media srl, Via Bosio 22 · 00161 Roma, Italy, VAT IT01814310569. For any privacy request write to info@inmemories.me.

Which data we process

Account data: name, email, password (stored only in encrypted form), IP address and technical access logs.

Content you upload: voice recordings, videos, photos, letters, messages and answers to our questions. They may concern you or other people, including people who have passed away.

Data derived from the reconstruction: the cloned voice, the face model, the character and memory profile. Voice and face are biometric data and therefore special-category data: we process them only with your explicit consent, which you can withdraw.

Payment data: handled by Stripe. We never see or store card numbers.

Usage data: minutes used, calls made and conversations with the avatar, recorded for security and to improve the quality of the reconstruction.

Why we process it and on which basis

To provide the service you requested (performance of the contract). To create and run the reconstruction of a person (explicit consent, revocable at any time). For security, abuse prevention and protection of rights (legitimate interest). For legal obligations, such as invoicing. For service communications about your account (contract).

No marketing without your separate consent, no advertising profiling, and your data is never sold, to anyone.

Who can see your data

Only you and the family members you authorise. The avatar and the content are never public: we do not publish names, photos or recordings.

We rely on providers who process data on our behalf under contract: server hosting in Europe; Tavus for video calls; ElevenLabs for voice; Anthropic for text generation; Stripe for payments; the email provider. Some are based in the United States: transfers rely on the Standard Contractual Clauses approved by the European Commission.

People who have passed away and third parties

Whoever uploads content about other people declares they have the right to do so. The GDPR does not apply to deceased persons, but we grant them the same protections. Family members who believe their rights are affected can write to us: we assess every request and, where founded, remove the content.

For how long

As long as your account is active. If you delete it, content is erased within 30 days. Invoicing data is kept for 10 years as required by law. Technical logs are kept for 12 months. For inactive accounts the terms of the chosen plan apply, as stated at purchase.

Your rights

You can at any time request access to your data, rectification, erasure, restriction of processing, portability, and object to processing. You can withdraw consent to the reconstruction: the cloned voice and face are deleted. Write to info@inmemories.me: we reply within 30 days. You can also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or your local authority.

Security

All communications are encrypted (HTTPS). Access is by your own credentials only. Content is stored on servers in Europe with access limited to authorised staff.

Minors

The service is for adults only. Content concerning minors may be uploaded only by those holding parental responsibility.

Cookies

We use only technical cookies. Details are in the Cookie policy.

Changes

If we change this notice substantially, we will tell you by email or with a notice in the app.