Privacy Notice

1. Who we are

Echoes From the Ancestors™ ("Echoes From the Ancestors", "we", "us") is operated by Jonathan Wheaton, the seller and data controller responsible for your personal data under this Notice. You can reach us at hello@echoesfromtheancestors.com.

2. Personal data we collect

• Account data: name, email address, password (hashed), profile photo.
• Echo content: the voice recordings, videos, photos, written stories, and Future Echoes you create.
• Echo Vault data: vault names, the family members you invite, and their roles.
• Support communications: messages you send us.
• Usage and device data: log data, device identifiers, IP address, and telemetry needed to operate and secure the service.

3. Why we use it

• To create and manage your account and Echo Vaults (legal basis: performance of our contract with you).
• To store, deliver, and play back your Echoes and Future Echoes (contract).
• To detect fraud, abuse, and keep the platform secure (legitimate interests).
• To improve the product and fix issues (legitimate interests).
• To provide customer support (contract).
• To send transactional emails about your account, vault activity, and Future Echo deliveries (contract). Marketing emails are only sent with your consent and you can unsubscribe at any time.
• To comply with legal obligations such as tax and accounting rules (legal obligation).

4. Who we share it with

• Service providers (subprocessors): our hosting, database, storage, email delivery, and analytics providers, acting on our instructions.
• Paddle.com Market Limited ("Paddle"): our Merchant of Record. Paddle processes your purchase, manages your subscription, handles payments, calculates and remits sales tax / VAT, issues invoices, and provides billing support. Paddle is an independent controller for that activity.
• Professional advisers (legal, accounting) where reasonably needed.
• Authorities where required by law, court order, or to protect rights and safety.

We do not sell your personal data, and we do not share your Echo content with anyone outside the vault members you invite.

5. How long we keep it

We keep your Echoes for as long as your account exists. Honoring our trust promise: if you cancel a paid plan, your Echoes are never deleted — your Echo Vault becomes read-only and you can reactivate at any time. If you ask us to delete your account, we will delete your personal data and Echo content within 30 days, except where we are required to retain limited records (for example, billing records held by Paddle for tax purposes).

6. Your rights

Depending on where you live, you have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw any consent you have given. To exercise any of these rights, email hello@echoesfromtheancestors.com. We will respond within one month. If you are in the UK or EEA, you also have the right to lodge a complaint with your local data protection authority.

7. Security

We use appropriate technical and organizational measures — including encryption in transit and at rest, access controls, and audit logging — to protect your personal data and Echo content.

8. International transfers

Our service providers may process data outside your country of residence, including in the United States. Where required, we rely on appropriate safeguards such as the Standard Contractual Clauses or adequacy decisions.

9. Cookies

We use strictly necessary cookies and similar technologies to keep you signed in and to keep the service secure. We do not use advertising cookies. You can control cookies through your browser settings.

10. Changes

We will post any material changes to this Notice on this page and update the "Last updated" date above.