1. Introduction

Welcome to Life Story ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service to create life story books through recorded Zoom interviews.

This Privacy Policy applies globally and complies with major data protection laws including GDPR (European Union), CCPA (California, USA), PIPEDA (Canada), Privacy Act (Australia), POPIA (South Africa), LGPD (Brazil), UAE Federal Law No. 45 of 2021 (United Arab Emirates), and Israel's Privacy Protection Law.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Name, email address, and contact information
• Payment information (processed securely through Stripe)
• Scheduling preferences and availability
• Photos you choose to include in your book

2.2 Interview Recordings and Content

IMPORTANT - RECORDING CONSENT: By using our service and participating in interviews, you explicitly consent to:

• Audio and/or video recording of your Zoom interviews
• Transcription of your recorded interviews
• Storage of recordings and transcripts for the duration needed to complete your book
• Processing of your stories, memories, and personal information shared during interviews
• Editing, organizing, and formatting your stories into book form

You have the right to withdraw consent at any time by contacting us at lifestory@life-story.io. Upon withdrawal, we will delete all recordings and cease processing, though this may prevent completion of your book.

2.3 Technical Information

• Browser type and version
• IP address and location data
• Cookies and similar tracking technologies
• Usage data and analytics

3. How We Use Your Information

We use your information for the following purposes:

• To schedule and conduct your life story interviews
• To record, transcribe, and process your interviews
• To create, edit, and format your life story book
• To process payments through our secure payment processor (Stripe)
• To communicate with you about your booking and book progress
• To improve our service and user experience
• To comply with legal obligations

4. Processing and Data Security

We use secure, professional tools and processes to transform your interview recordings into professionally written life story books. This involves:

• Automated transcription of interview recordings
• Professional editing and formatting of your stories
• Careful organization and structuring of your narrative

Your interview data is processed securely. It is never shared with third parties, sold, or made public, and it is used only to create your family's book. We continually refine our own writing process, but your recordings and your story remain private to your family.

5. Data Storage and Retention

• Interview recordings are stored securely on encrypted servers
• Recordings are stored securely and retained for 12 months after book completion — many families ask to keep them as a memory — after which they can be deleted on request
• You may request early deletion of recordings at any time
• Final book files are retained for 1 year to allow for reprints or revisions
• Payment information is never stored on our servers (handled by Stripe)

6. Information Sharing and Disclosure

We do NOT sell, rent, or share your personal information or stories with third parties, except:

• Service Providers: Zoom (for interviews), Stripe (for payments), secure text-processing services (for book creation)
• Legal Requirements: If required by law or to protect our rights
• With Your Consent: Only with your explicit permission

7. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your personal data
• Withdrawal: Withdraw consent for recording and processing at any time

To exercise these rights, contact us at lifestory@life-story.io. We will respond within 30 days.

8. International Data Protection Compliance

8.1 GDPR (European Union)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis for processing: Consent and contract performance
• Right to lodge a complaint with your local data protection authority
• Right to restrict processing in certain circumstances
• Data transfers outside the EEA are protected by appropriate safeguards

8.2 CCPA (California, USA)

California residents have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information (we do not sell personal information)
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

8.3 UAE Federal Law No. 45 of 2021

For users in the United Arab Emirates, we comply with the UAE Personal Data Protection Law:

• Processing based on explicit consent or legal grounds
• Right to access, correct, and delete personal data
• Data localization and security requirements are met
• Right to file complaints with UAE Data Office

8.4 Israel Privacy Protection Law

For users in Israel, we comply with the Privacy Protection Law (5741-1981):

• Registration with Israel Privacy Protection Authority
• Right to access and correct personal information
• Protection against unauthorized use or disclosure
• Right to file complaints with Privacy Protection Authority

8.5 Other Jurisdictions

We also comply with data protection laws in:

• Canada (PIPEDA): Right to access, correct personal information
• Australia (Privacy Act 1988): Australian Privacy Principles compliance
• United Kingdom (UK GDPR): Post-Brexit data protection standards
• Brazil (LGPD): Data subject rights and consent requirements
• South Africa (POPIA): Processing conditions and data subject rights
• Singapore (PDPA): Data protection obligations compliance
• Switzerland (FADP): Swiss data protection standards

9. International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by relevant authorities
• Adequate level of protection as determined by applicable law
• Your explicit consent where required
• Transfer necessary for contract performance

10. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your language preferences
• Analyze website usage and improve our service
• Enable essential website functionality

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

We comply with ePrivacy Directive (EU), PECR (UK), and other applicable cookie consent requirements.

11. Children's Privacy

Our service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Continued use of our service after changes constitutes acceptance of the updated policy.

13. Contact Us & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or file a complaint, please contact us:

Regulatory Authority Contacts:

• EU/EEA: Your local Data Protection Authority
• UK: Information Commissioner's Office (ICO)
• USA (California): California Attorney General
• Canada: Office of the Privacy Commissioner
• Australia: Office of the Australian Information Commissioner (OAIC)
• UAE: UAE Data Office
• Israel: Privacy Protection Authority
• Brazil: National Data Protection Authority (ANPD)
• South Africa: Information Regulator