Privacy Policy

We collect the following categories of information:

• —Account information: Name, email address, and birth information you provide when creating an account or setting up an Echo.
• —Interview responses:Text and audio answers you provide during the guided Interview — the 487-prompt questionnaire used to build an Echo’s source material.
• —Voice recordings: Audio files submitted for Voice Cloning. Voice data is collected only with your explicit consent and is subject to additional protections described in Section 4.
• —Uploaded artifacts: Photos, documents, letters, audio clips, obituaries, recipes, and other materials submitted to build or enrich an Echo.
• —Family access tokens: Shareable tokens used to grant family members access to an Echo. Tokens are stored as one-way SHA-256 hashes — we cannot recover the plaintext value.
• —Payment information: Billing is processed by Stripe. We do not store credit card numbers, CVVs, or full card data on our servers. Stripe returns only a token and the last four digits of your card for display purposes.
• —Usage data: Standard server logs including IP address, browser type, pages visited, and timestamps. We use this data to operate and improve the platform and do not sell it.

We use the data we collect to:

• —Build and operate Echo digital avatars — ingesting your source material into our retrieval-augmented generation (RAG) pipeline and knowledge graph to produce grounded, sourced responses.
• —Power the ZH verification audit chain — each response is hashed and linked to its source material so every reply carries a confidence score and citation. This chain is immutable.
• —Clone a voice (Voice Echo tier) from audio you provide, with your explicit consent.
• —Process payments through Stripe and manage your subscription.
• —Communicate with you about your account, subscription status, and platform changes.
• —Diagnose technical issues and improve the platform.

Active subscription: All Echo data — interview responses, artifacts, voice models, and audit chain records — are retained for as long as your subscription is active.

Hibernation: When a subscription lapses (payment fails or is not renewed), the Echo enters Hibernation. During Hibernation, your data is preserved in full for 12 months. You may reactivate at any time within that window. After 12 months without reactivation, we will contact you at the email on file before beginning deletion. Data deletion in Hibernation is permanent and cannot be undone.

Account deletion: If you request full account deletion, all associated data is permanently removed from our systems within 30 days, except where retention is required by law.

We do not sell your data. We share data only in the following limited circumstances:

• —Stripe: Payment processing. Stripe receives billing information necessary to complete transactions and is subject to its own privacy policy.
• —Family members you authorize: When you share a family access token, the recipient gains access to the Echo associated with that token. You control who receives tokens.
• —Legal requirements: If required by valid legal process (court order, subpoena), we will comply and notify you to the extent permitted by law.

You have the right to:

• —Access a copy of the personal data we hold about you.
• —Correct inaccurate personal data.
• —Delete your account and all associated data.
• —Revoke voice consent at any time (see Section 4).

To exercise any of these rights, email us at contact@my3chos.com. We will respond within 30 days.