Privacy Policy

1. Who We Are

LifeScribe (“LifeScribe,” “we,” “us,” or “our”) operates the website at lifescribe.us and the LifeScribe platform — a service that allows individuals to create, preserve, and share personal autobiographies, life stories, photo galleries, timelines, family trees, and legacy content (“the Service”).

Questions about this policy may be directed to privacy@lifescribe.us.

2. Information We Collect

2.1 Information You Provide Directly

• Waitlist registration: Your email address when you join our waitlist.
• Account creation: Your name, email address, and password (stored as a secure hash). If you sign in via Google, Apple, or Facebook, we receive only the profile information those services share with us per your settings.
• Profile information: Any optional profile details you choose to add (display name, profile photo, bio).
• User content: All content you create on the platform — written posts, timeline milestones, photo and video uploads, family tree data, map pins, and any other material you submit (“Your Content”).
• Communications: Messages you send us via email or support channels.
• Invitations: Email addresses you provide when inviting collaborators to your LifeScribe site. We use these solely to send the invitation and do not add them to our marketing list without their separate consent.

2.2 Information Collected Automatically

• Log data: IP address, browser type, operating system, referring URL, pages visited, and timestamps.
• Usage data: Features used, content created, and interaction patterns within the platform.
• Cookies and similar technologies: We use session cookies required for authentication and platform functionality. We do not use advertising or cross-site tracking cookies. See Section 8 for details.

2.3 Information From Third Parties

If you connect a third-party account (Google, Apple, Facebook) for sign-in, we receive limited profile data from that provider. We do not receive or store your password for any third-party account.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the LifeScribe platform;
• Create and manage your account and your LifeScribe site(s);
• Send transactional emails (account verification, password resets, invitations);
• Send waitlist and early-access communications to those who have opted in (you may unsubscribe at any time);
• Respond to your support requests and communications;
• Monitor platform security, detect fraud, and enforce our Terms of Service;
• Comply with legal obligations and protect the rights and safety of users and the public.

We do not use your personal information or Your Content to train AI or machine-learning models, nor do we sell your data to third parties.

4. Your Content and Visibility Controls

LifeScribe is built around your control over your own story. Every site you create starts private by default. You may make your site or individual sections public, friends-only, or private at any time through your site settings.

When you invite collaborators, you assign them a role (Co-Admin, Editor, or Viewer) that defines exactly what they can see and do. You may revoke access at any time.

Public sites are visible to anyone with the URL. We do not index public sites in search engines during the beta period. After general availability, search indexing will be opt-in and clearly communicated.

5. Memorial Mode and Data After Death

LifeScribe includes a Memorial Mode feature designed to transition a site into a permanent tribute when an owner passes away. We understand this involves sensitive circumstances and handle it accordingly:

• Memorial Mode must be activated by a designated Co-Admin or through a verified request; it is never activated automatically.
• Once active, the original owner's content is preserved and locked from modification. A guestbook opens for family and friends to contribute tributes.
• Memorial sites remain hosted for as long as the account remains in good standing. Designated family members may transfer account ownership to ensure continuity.
• Family members may submit a verified request to us to access, download, or permanently delete a deceased user's data. We will require reasonable proof of relationship or authority (e.g., next-of-kin declaration or legal documentation).

6. How We Share Your Information

We do not sell your personal information. We share it only in these circumstances:

6.1 Service Providers

We use a limited number of trusted third-party providers to operate the Service. Each processes your data only as needed to provide their service to us:

• Hosting & infrastructure: Vercel (web hosting), Neon or Railway (PostgreSQL database), Upstash (session caching)
• Media storage: Cloudflare R2 or AWS S3 (photo and video uploads)
• Email delivery: Resend or SendGrid (transactional emails only)
• AI writing assistance: Anthropic or OpenAI may process text prompts you voluntarily submit for AI-assisted suggestions. We do not send your full biography content to AI providers — only the specific text you choose to submit for a suggestion.

6.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

6.3 Business Transfers

If LifeScribe is acquired, merged, or its assets transferred, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our site before your information is transferred and becomes subject to a different privacy policy.

7. Data Retention

We retain your account information and Your Content for as long as your account is active. If you delete your account, we will delete your personal data and Your Content within 30 days, except where we are required to retain it by law or for legitimate business purposes (such as fraud prevention records), and except for Memorial Mode sites where a family member has assumed ownership.

Waitlist email addresses are retained until you unsubscribe or request deletion, after which they are removed within 14 days.

8. Cookies

We use the following types of cookies:

• Strictly necessary cookies: Required for authentication and secure sessions. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences (e.g., theme, editor settings).

We do not use advertising cookies, third-party tracking pixels, or cross-site analytics. We do not participate in any ad networks.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (“right to be forgotten”).
• Portability: Request an export of your data in a machine-readable format.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdraw consent: Where processing is based on consent (e.g., marketing emails), withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, email us at privacy@lifescribe.us. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

If you are located in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

The Service is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at privacy@lifescribe.us and we will delete it promptly.

Family content (such as adding a child's photos or milestones to a family member's LifeScribe page) is the sole responsibility of the account holder creating that content.

11. Data Security

We implement industry-standard technical and organizational measures to protect your data including:

• Passwords stored as bcrypt hashes — never in plain text;
• All data transmitted over HTTPS/TLS;
• Media files stored in private, access-controlled cloud storage buckets;
• Database access restricted to application-layer credentials;
• Session tokens rotated regularly and stored in secure, HTTP-only cookies.

No system is 100% secure. In the event of a data breach that affects your personal data, we will notify you as required by applicable law.

12. International Data Transfers

LifeScribe is operated from the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. By using the Service, you consent to this transfer. Where required, we rely on standard contractual clauses or other lawful transfer mechanisms approved by relevant data protection authorities.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address on your account) and update the effective date at the top of this page. Your continued use of the Service after the effective date constitutes your acceptance of the revised policy.

14. Contact Us

For privacy-related questions, data requests, or concerns, please contact us at: