Privacy Policy

For any matter relating to personal data protection you can write to the address above. We have not formally appointed a Data Protection Officer (DPO) at this time because, based on our internal assessment, the circumstances of article 37.1 GDPR that would require it do not apply: the main processing is the provision of a service requested by the user and the profiling is instrumental to that provision. This assessment is reviewed periodically; if it changes, a DPO will be appointed and this section updated.

LiveMemoriesAI relies on external legal advice in data protection, at least every six months, to review compliance and update the measures when needed.

We do not process special-category data (art. 9 GDPR) as a purpose of the service. When the materials incidentally contain them, the minimisation measures described in §7 of the Terms apply.

The channel set up for these requests is the Opposition channel, available at /opposition. The platform processes the precautionary suspension and, where appropriate, the removal without undue delay, except for records strictly necessary to evidence the request and the decision taken.

The interlocutor may request access, rectification or deletion of their data and may order the deletion of their account from the memorial by sending /borrarme to the bot or writing to contact@livememoriesai.com.

We do not process interlocutor data for advertising or for commercial profiling.

We do not use memorial conversations, materials or memories to build advertising profiles, to train external AI models, to sell data or to build engagement rankings. Analytics, when you accept it, serves only service improvement and is described in §19. Any other use requires your express and specific consent.

Under art. 22 GDPR, automated decisions that produce legal effects on you or significantly affect you generally require human intervention, the ability to contest the decision or your explicit consent. Here, no automated decision of the service produces legal effects on the user outside the strictly contractual scope. Memory, photo and style proposals are always subject to custodian approval (HITL), and conversational responses do not replace professional advice.

The current named list of providers with their regions and transfer mechanisms is published and maintained in the technical documentation of the service. Any material change is notified to registered users at least 15 days in advance, per §16 of the Terms.

In particular, voice synthesis (MiniMax), processing by some large models and the delivery of certain transactional emails may rely on services outside the EEA. In all these cases the contractual agreement includes the SCCs and, when the provider participates in the EU-US DPF, it is considered covered by adequacy decision.

When a paid plan is contracted, Stripe may process billing data outside the EEA (for example, in the United States) under the SCCs and, where applicable, the EU-US DPF. Card data never reach LiveMemoriesAI’s servers.

Google Analytics 4 processes measurement data on Google’s servers, in the United States and the European Union, under Google’s standard contractual clauses and, where applicable, the EU-US DPF. It is only enabled with your consent (§19) and is configured without personalised advertising and without Google Signals.

The category, country and specific mechanism of each transfer are documented and updated when providers or regions change.

The cookie banner lets you accept all, reject the optional categories or customise your choice per category. Your choice is stored in the lm_consent cookie for 12 months and you can change it at any time by reopening the preferences panel or clearing your browser cookies.

Necessary cookies are exempt from the prior-consent requirement; the optional categories do not load until you accept. Before your choice, no optional cookie is set.

To configure cookies in your browser, please consult its help section. Blocking strictly necessary cookies may prevent the service from working.

Materials uploaded by the family and the conversations are not used to train external AI models. The platform uses the models as processors and applies the safeguards of §8 and §9.

When a model is invoked from regions outside the EEA, the mechanisms of §9 apply and calls are anonymised and pseudonymised where possible (avoiding unnecessary identifiers of the custodian or interlocutors in the prompt sent to the AI).

Generated audio carries machine-readable marking under art. 50.2 of the AI Act; the synthetic nature of the voice is additionally communicated audibly and in text.

To exercise them, write to contact@livememoriesai.com, use the controls in your account (settings, export, deletion) or use the Opposition channel (/opposition) if you do not have an account. Telegram interlocutors can use the /identidad and /borrarme commands. We will respond within a maximum of one month (art. 12.3 GDPR), extendable to two months when the request is complex, with prior notice.

We may ask for proportionate identity or relationship verification to avoid disclosing information to the wrong person. This verification is strictly the minimum necessary and is documented.

If you reside in another EEA country, you may complain to the supervisory authority of your country of habitual residence. In cross-border consumer disputes the European Commission ODR platform can facilitate out-of-court resolution (https://ec.europa.eu/consumers/odr).

Before complaining to an authority, we invite you to write to us so we can try to resolve the issue. Most incidents are resolved without administrative intervention.

Google Ireland Limited acts as a processor for these data. You can withdraw your consent at any time from the cookie preferences panel.