Privacy Policy & Terms of Service

1. Introduction

Welcome to Liveforever ("Platform," "we," "us," or "our"). This Privacy Policy and Terms of Service ("Agreement") govern your access to and use of our Platform, including all content, services, and products offered.

We are committed to transparency and compliance with the General Data Protection Regulation (GDPR) and the ePrivacy Directive. This document explains how we collect, use, protect, and manage your personal data.

2. Data We Collect

2.1 Information You Provide

• Account Registration: Name, email, username, password, date of birth, location
• Profile Data: Bio, photos, videos, messages, family relationships, personal stories
• Family Tree Data: Names, dates, relationships of family members
• Payment Information: Billing name, address, payment method (processed securely via third-party providers)
• Communications: Messages, letters, time capsule content, tributes
• Guardian Information: For profile guardians, we collect contact information and access permissions

2.2 Information Collected Automatically

• Usage Data: Pages viewed, time spent, clicks, interactions
• Device Information: IP address, browser type, operating system, device identifier
• Cookies & Tracking: Session data, preferences, analytics (Google Analytics, similar tools)
• Location Data: City/region level data (not precise GPS)

2.3 Third-Party Data Sources

• Social media platforms (if you sign in with Google, Facebook, etc.)
• Payment processors (Stripe, PayPal) for transaction verification
• Family Tree invitations from other users

3. Legal Basis for Processing (GDPR Article 6)

Under GDPR, we process your data based on the following legal grounds:

• Consent (Article 6.1.a): When you provide explicit consent (e.g., marketing emails, optional features)
• Contract (Article 6.1.b): To provide Platform services you requested
• Legal Obligation (Article 6.1.c): Tax, fraud prevention, legal compliance
• Legitimate Interests (Article 6.1.f): Platform security, analytics, improvement
• Vital Interests (Article 6.1.d): In emergencies affecting life/safety

4. How We Use Your Data

We use your information for:

• Platform functionality and account management
• Providing requested services (family tree, time capsules, tributes)
• Processing payments and managing subscriptions
• Communicating with you (support, updates, policy changes)
• Preventing fraud, abuse, and security threats
• Analytics and platform improvement
• Legal compliance and enforcement (if required by law)
• Marketing communications (only with your explicit consent)

5. Privacy Consent Settings & Implicit Permissions

Liveforever operates on a basis of explicit user consent. During registration, you are required to define and authorize several core processing activities that are essential to our services:

5.1 Life and Death Privacy Preferences

You must authorize the platform to manage your digital identity both during your lifetime and after your passing. This includes the right for us to store, protect, and display your information according to the visibility rules you set.

• Life Privacy: Protection of your active digital footprint.
• Post-Mortem Privacy: Execution of your legacy instructions regarding profile memorialization.

5.2 Content & Media Authorization

To function as a digital legacy platform, we require explicit permission for:

• Image Publication: Storing and displaying photographs you provide or appear in.
• Biographical Processing: The archiving of your life stories, professional background, and triumphs.
• Family Relationship Mapping: The processing of connections between you and other users (living or deceased).

6. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

6.1 Right of Access (Article 15)

You have the right to request a copy of all personal data we hold about you in a structured, commonly used, and machine-readable format (Data Subject Access Request - DSAR).

6.2 Right to Rectification (Article 16)

You can request correction of inaccurate or incomplete personal data. You can update most of your information via your account settings.

6.3 Right to Erasure - "Right to Be Forgotten" (Article 17)

You can request deletion of your personal data, except where we have a legal obligation to retain it (e.g., tax records, fraud prevention). We will delete your account and associated data within 30 days, unless legal holds apply.

6.4 Right to Restrict Processing (Article 18)

You can request that we limit processing of your data (e.g., during disputes) without deleting it.

6.5 Right to Data Portability (Article 20)

You can request your data in a portable, machine-readable format (JSON, CSV) to transfer to another service.

6.6 Right to Object (Article 21)

You can object to processing based on legitimate interests or direct marketing. We will stop processing immediately unless we have compelling reasons.

6.7 Right to Withdraw Consent

If we process data based on your consent, you can withdraw it anytime by contacting us or updating your preferences.

7. Data Retention

We retain your data according to the following schedule:

8. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in Transit: SSL/TLS (HTTPS) for all data transmission
• Encryption at Rest: AES-256 encryption for sensitive data in databases
• Password Security: Passwords hashed with bcrypt algorithm
• Access Control: Role-based permissions, multi-factor authentication available
• Regular Audits: Security testing and vulnerability assessments
• Data Backups: Daily encrypted backups with disaster recovery protocols
• Breach Notification: In case of data breach, we notify affected users within 72 hours (GDPR requirement)

9. Content Ownership & Rights

You retain all rights to content you create on Liveforever (photos, videos, messages, stories):

• You own all content you upload
• You grant us a license to store, display, and manage your content
• We do not sell, share, or use your content for advertising
• You can delete your content anytime (except where archived by family members with permission)
• After your death, your designated legacy guardian controls your content
• We do not claim copyright ownership of user-generated content

10. Family Relationships & Consent

When you create or manage family relationships on Liveforever:

• Invitations: If you invite someone to join your family tree, they receive an invitation and can decline
• Relationship Approval: Both parties must approve relationships (parent-child, spouse, sibling, etc.)
• Privacy Respect: We respect both parties' privacy settings and only show approved relationships
• Data Sharing: Family members see only the information you've chosen to share
• Consent Withdrawal: You can remove relationships or block family members anytime
• Deceased Profiles: Family members may create profiles for deceased relatives; living relatives can approve

11. Guardian Access & Legacy Planning

Liveforever allows you to designate a legacy guardian to manage your profile after death:

• Guardian Assignment: You choose one or more trusted people as guardians
• Guardian Permissions: Define what guardians can do (edit profile, release time capsules, manage family tree)
• Verification: When a guardian claims access, we verify your death record (optional, privacy-respecting)
• Documentation: Guardians may be asked to provide legal documentation (death certificate, will)
• Successor Guardians: You can designate backup guardians if primary guardian is unavailable
• Guardian Responsibilities: Guardians must respect your privacy wishes and family relationships
• Legal Compliance: Guardian access complies with inheritance and privacy laws in your jurisdiction

12. Payments & Billing

Payment information processing on Liveforever:

• Payment Processor: We use Stripe and PayPal (PCI DSS Level 1 certified)
• Data Handling: Your credit card details are NOT stored on our servers
• Billing Information: We store only billing name, address, and last 4 digits of card
• Invoices: Available in your account for tax purposes (7-year retention)
• Refund Policy: Refunds processed within 10 business days
• Subscription Management: Cancel subscriptions anytime in account settings
• Price Changes: We notify you 30 days before price changes

13. Prohibited Activities

You agree not to:

• Engage in harassment, bullying, or threats
• Post defamatory, discriminatory, or hateful content
• Collect or scrape personal data of other users
• Impersonate others or create fake profiles
• Violate intellectual property rights
• Hack, attempt unauthorized access, or disrupt platform security
• Engage in spam, phishing, or malicious activities
• Violate any applicable laws or regulations
• Disclose other users' private information without consent

14. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW:

• Liveforever is provided "AS IS" without warranties of any kind
• We are not liable for indirect, incidental, special, or consequential damages
• Our total liability is limited to the amount paid by you in the 12 months prior to the claim
• We are not responsible for third-party services, content, or links
• We are not liable for data loss due to user negligence or third-party breaches (outside our control)

However, nothing herein excludes liability for death, personal injury, fraud, or violations of applicable law.

15. Governing Law & Jurisdiction

This Agreement is governed by and construed in accordance with:

• Applicable Law: The laws of the European Union (Italy), specifically Italian law (where applicable)
• GDPR Compliance: All data processing complies with GDPR (EU 2016/679)
• ePrivacy Directive: Cookie policies comply with ePrivacy Directive 2002/58/EC
• Data Processing Agreement: Available upon request for Business customers
• Jurisdiction: Any disputes are resolved in the courts of Foggia, Italy
• Alternative Dispute Resolution: We encourage mediation before litigation

16. Contact Us

For privacy questions, data requests, or concerns, please contact us:

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority (Supervisory Authority). In Italy, this is the Garante per la protezione dei dati personali (Italian Data Protection Authority).