Skip to content
Aeternum

Legal

Privacy Policy

Last updated October 8, 2026

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND OUR POLICIES AND PRACTICES FOR COLLECTING, PROCESSING, STORING, USING, AND DISCLOSING YOUR DATA. BY ACCESSING OR USING ANY PORTION OF THE PLATFORM, THE INDIVIDUAL ACCESSING OR USING THE PLATFORM (“USER”, “YOU”, “YOUR”) ACKNOWLEDGES THAT THEY HAVE READ THIS POLICY, UNDERSTAND IT, AND PROVIDE EXPRESS CONSENT TO THE POLICIES AND PRACTICES STATED HEREIN EFFECTIVE THE DATE YOU FIRST USED THE PLATFORM.IF YOU DO NOT AGREE WITH OUR POLICIES AND PRACTICES, YOUR ONLY CHOICE IS TO NOT USE THE PLATFORM, LEAVE IMMEDIATELY, AND STOP INTERACTING WITH US. PLEASE KEEP A COPY OF THIS POLICY FOR YOUR RECORDS.

01 INTRODUCTION

Aeternum Corp. (“Company”, “we”, “us”, “our”, “Aeternum”) is a company from Alberta, Canada that offers a private digital space to connect families, share cherished memories, and deliver loving messages, even after our passing. We provide the website and platform found at aeternumproject.com and as found on the Apple App Store and Google Play Store (the “Platform”). This Privacy Policy interacts with and User additionally agrees to our Terms of Service and User License Agreement. Please review those documents together with this Privacy Policy.

By accessing or using the Platform or in any other interactions with Aeternum you state that you clearly and irrevocably understand, accept, and consent to the practices described in this Privacy Policy. For greater clarity, User acknowledges and agrees that any of the following actions shall clearly evidence, constitute, and denote User’s express consent and agreement to this Privacy Policy, and any applicable agreement listed above, including when User interacts with any interactive function of the Platform, User enters into a written agreement with Aeternum, User submits any data to Aeternum or the Platform, User submits any user submission to the Platform, User publishes any user content on the Platform, User interacts with any other user on the Platform, or User engages in continued use of the Platform.

This Privacy Policy may change from time to time. Your continued use of the Platform after we make changes denotes your acceptance and consent to those changes. It is your responsibility to check this Privacy Policy periodically for updates.

03 EMAIL FROM US: SERVICE MESSAGES AND MARKETING

We send two kinds of email, and only one of them needs your permission.

Service messages. Every account receives the email the Platform needs in order to work: confirming your email address, resetting your password, security and billing notices, notices about your account, including check-ins when your account has not been used for a while (§16), and notifications about activity that involves you, such as a connection request, a message, or a digital inheritance request or notice. These are not marketing, and they are sent for as long as you have an account. They are delivered through Amazon SES (§10.3).

Marketing and newsletters. News about Aeternum, new features and offers are sent only to people who have asked for them. Creating an account does not add you to any mailing list. You are added only if you subscribe on our website, or tick the optional box, which starts unticked, on our contact, Help Center or tester application form. When you do, we record your email address, your name if you gave it, the page you signed up on, the time and your IP address, so that we can show you agreed. People who subscribed on our previous website are on the same list.

Unsubscribing. Every marketing email identifies us and has an unsubscribe link. You can also unsubscribe by writing to info@aeternumproject.com, and we will act on it within 10 business days. Unsubscribing does not stop the service messages described above.

04 AGE RESTRICTIONS

Use of and access to the Platform is not intended for individuals under 18 years of age. No one under 18 may provide any information to the Platform. We do not knowingly collect information from individuals under 18. If you are under 18, do not register for the Platform, submit any information to the Platform, use any of the interactive functions of the Platform, or submit any user submission or user content to the Platform. If you believe the information is submitted to the Platform by someone that is under 18, or that we might have information about individuals under 18 that is not provided with express consent by an authorized parents or guardian of the individual, please contact us. Any User that provides information to the Platform on behalf of an individual under the age of 18 is responsible for such information and such User acknowledges that they provide consent on behalf of such individual under the age of 18.

05 GEOGRAPHIC RESTRICTIONS

The Platform is offered only for access and use in the United States of America and limited areas of Canada. The Platform is not intended for use in any jurisdiction where its use is not permitted, including in Quebec, Europe, or United Kingdom. Such users must leave the Platform immediately. Aeternum does not have sufficient capabilities to determine where a user is located, including to block a user based on its geographic location, prevent a user’s access to the Platform or certain features or functionality of the Platform, manage a user’s interactions with other users of the Platform, or prevent a user from completing a transaction on the Platform. If you access the Platform from outside the permitted regions, you do so at your own risk and you are responsible for compliance with local laws and regulations of your jurisdiction. You must immediately stop using the Platform if your use of it, as it is offered by Aeternum, is prohibited under your local laws or regulations and in no way shall Aeternum be responsible or liable for your unauthorized or unlawful use of the Platform. Data may be transferred across regions and User expressly authorizes such data transfer in accordance with this Policy.

06 INFORMATION WE COLLECT ABOUT YOU

We collect and use several types of information from and about you (“data”), including: personal information, that we can reasonably use to directly or indirectly identify you, including demographic and psychographic information, your name, age, gender, location, mailing address, e-mail address, telephone number, IP address, username, billing and account information, or any other identifier we may use to contact you, or any personal information contained in any user submissions or user content uploaded to or submitted to the Platform by User;non-personal information, that does not directly or indirectly reveal your identity or directly relate to an identifiable individual, such as statistical or aggregated data; technical information, including your login information, browser type and version, device and device settings, time zone setting, browser plug-in types and versions, operating system and platform, advertising identifiers and trackers, and information about your internet connection, hardware, software, and your usage and interactions with the Platform; non-personal details about your Platform interactions, including URLs, clickstream to, through, and from our Platform (including date and time), products or services you viewed or searched for, page response times, download errors, length of visits to certain pages, and page interaction information (such as scrolling, clicks, and mouse-overs); and usage information, including as pertaining to User’s submission of user submissions, posting of user content, User’s interactions with content, features, functionality, products, services, and other users on the Platform, and User’s back-end information and settings as set by User.

07 HOW WE COLLECT DATA

We use different methods to collect your information, including through: direct interactions with you when you provide it to us, for example, by submitting or publishing a user submission or user content, through interactive functions on the Platform, or when corresponding with us by phone, email, social media, mail, or otherwise;automated technologies or interactions, for example, information may be collected automatically as you use the Platform, including through cookies; third party software, including the use of third party plugins, applications, or APIs that enhance the Platform which may collect information on you; and third party tracking technologies, which may include usage details, demographic or psychographic information, IP addresses, advertising data, tracking information, identifiers, and information collected through cookies and other tracking technologies.

08 DATA YOU PROVIDE TO US

The information we collect directly from you on or through the Platform or through other means may include:

  • Information that you provide in a user submission or user content, including by interacting with interactive functions on the Platform.
  • Technical information embedded in the files you upload by the device or software that created them, including the date and time of capture, the make and model of the capturing device, the name of an author or editor, and the geographic coordinates of the place of capture. Where a file contains coordinates, we resolve them into a civic or postal address and store that address alongside the file. The place of capture recorded in a photograph or video is frequently a private residence.
  • Information provided to us during the registration process, subscribing to our services or products, or mailing list, or as uploaded to your user profile.
  • Information and copies of your correspondence and details if you contact us.
  • Details of transactions you carry out through our Platform and of the fulfillment of your orders.
  • Interactions with other users on the Platform.
  • Contract details if you enter into a contract with us.
  • Your search queries on the Platform and through usage of the Platform.

09 DATA WE COLLECT THROUGH AUTOMATIC MEANS

As you navigate through and interact with our Platform, we may use cookies or other automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns.

This may include details of your visits to our Platform, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Platform; usage information about your use of the Platform; and information about your device and internet connection, including your device make and model, IP address, operating system, and browser type.

We may also use these technologies to collect information about your online activities over time and across third-party websites or other online services.

The information we collect through automatic means allows us to improve our Platform and to deliver a better and more personalized service, including by enabling us to estimate our audience size and usage patterns; store information about your preferences; customize our Platform according to your interests; speed up your searches and load times; personalize your user experience; recognize you when you return to our Platform and allow you to pick up where you left off; and save your payment preferences and information to make future orders easier.

The technologies we use for automatic data collection may include Cookies (small files placed on the hard drive of your device or your internet browser), Flash Cookies (that collect and store information about your preferences and navigation to, from, and on our Platform), and Beacons/Pixels (small electronic files that permit us to monitor usage and gather aggregate statistics). We do not use any of these technologies for advertising, and we do not sell or share the data they produce. Our Cookie Policy lists each cookie and item of browser storage we actually use, and how to choose which ones are allowed.

10 THIRD PARTIES ON THE PLATFORM

Certain services on the Platform including content, functions, features, links, plugins, or APIs may be operated or provided by third parties. They may collect and use your data when you use the Platform. The Platform may also include outbound links to third-party sites and pages off the Platform. These third parties have their own privacy and data policies and practices, and we do not accept any responsibility or liability for such policies and practices.

This list covers the whole Platform, not only the forms on our website. It includes the systems that host and store your content, take your payments, deliver your email and notifications, monitor for faults, measure product usage, handle your support requests, and power our AI features Memoria and Aela.

Two things to understand about how this list is maintained:

  1. A provider remains listed for as long as it may still hold your data, not only for as long as we actively send it more. When we stop using a service, the data already transferred to it remains in that provider’s hands until it is deleted under their own retention terms. Removing the name on the day we stop using it would misrepresent where your data actually is, so retired providers are listed in §10.9 rather than deleted from this policy.
  2. This list describes categories as well as named vendors. Where a type of provider is structurally part of how the Platform works, we tell you what it receives and name who we currently use, so that a routine change of vendor within a category does not leave you relying on a document that has silently gone stale. Where we name alternatives, treat them as disclosed even if a given feature is not yet enabled for you.

We do not sell your data. We do not use any provider below for advertising, ad targeting, or profiling. None of the providers we currently use is permitted to use your content for their own purposes.

10.1 Hosting, storage and infrastructure

Amazon Web Services (AWS) operates all of our infrastructure and is therefore able, in principle, to access everything you store with us. This covers compute, our databases, object storage for your photos, videos, audio and documents, our content delivery network, message queues, logging and DNS. Your data is held in AWS regions in Canada and the United States — see §13.

10.2 Payments

Stripe processes all subscription payments. When you subscribe, your name, email address, billing address and payment card details are collected and processed by Stripe. We never receive or store your full card number. We retain only Stripe’s customer and subscription identifiers and the status of your plan.

10.3 Email and messaging

  • Amazon SES sends our service email (§03) — account, security, billing and notification messages — and the emails our website forms produce (§10.12). AWS processes your email address, the message, and whether it was delivered or bounced.
  • Brevo holds our marketing and newsletter list and sends those messages. You are on it only if you asked to be (§03), and every message carries an unsubscribe link. Brevo receives your email address, your name if you gave it, and the record of your agreement: the page you signed up on, the time and your IP address. Brevo can also record whether each message it sends is opened and which of its links are clicked.
  • Google Workspace hosts our own company email. If you write to us, and when our website forms or the app’s support reports send a copy to our inboxes, the message and your address are processed by Google.

10.4 Notifications and push delivery

The Platform shows you notifications inside the app. If notifications for Aeternum are turned on in your device’s settings, we can also send some of them to your phone or tablet through our mobile apps as push notifications. On iPhone, iPad and Android 13 or later, your device asks you first; on Android 12 and earlier, they are on unless you turn them off. We keep what a push notification carries deliberately small:

  • Its title and text are fixed wording that we wrote, such as “New message from Sam”. The only personal detail they can contain is the first name of the person whose action caused the notification. The words of a message, comment or memory are never included.
  • Routing data, so that tapping the notification opens the right screen: the kind of notification, and our internal reference codes for it and for the people, memory, conversation, profile or request it concerns.
  • The number of unread notifications you have, which your device may show on the app icon.
  • The push token of the device it is addressed to, described below.

A new memory, a new comment or reply, and a new connection made by someone else in your network are shown only inside the app and are not sent as push notifications. A push notification is still sent when someone tags you in a memory or mentions you in a comment.

To reach your device, every push notification passes through:

  • Expo’s push service, operated by 650 Industries, Inc. in the United States, which receives each notification from our servers, tells us whether it was passed on successfully, and relays it onward to:
    • Apple Push Notification service for iOS devices; or
    • Google Firebase Cloud Messaging for Android devices.

Push tokens. When notifications are on and you are signed in, your device obtains a device token from Apple or Google, and our app exchanges it with Expo for an Expo push token, which is the address we send your notifications to. That exchange gives Expo the device token, an identifier for this installation of the app, the app’s identifier and your IP address. On Android, the Google Firebase software built into our app, which issues the device token, also creates a Firebase installation identifier and registers the app with Google as soon as the app is opened, whether or not notifications are on.

We store the Expo push token with your account, together with whether the device runs iOS or Android, which of our apps it belongs to, the sign-in it was registered under, when it was registered, and when we last sent to it. We keep at most ten devices for each account. A device’s record is deleted when you sign out on that device; when you change your password while signed in, for every device other than the one you used to change it; when Apple or Google, through Expo, tell us the token no longer works, for example because the app was uninstalled; and, once you have more than ten devices, for the one you used least recently. If someone else signs in to Aeternum on the same device, its record moves to their account. Expo, Apple and Google keep their own records of tokens and deliveries under their own retention terms.

Turning it off. You can stop push notifications at any time by turning off notifications for Aeternum in your device’s settings, or by signing out of the app on that device. In the app, Settings › Push Notifications also lets you choose which kinds of notification are sent to your devices. A few important notices, about a declaration of death or an offer or request to take over a profile, cannot be switched off individually there; only your device’s settings or signing out stops those. None of this affects the notifications shown inside the app.

Web browsers. We do not currently send push notifications to web browsers. If we introduce them, they will pass through the push service of your browser vendor, which may be operated by Google, Mozilla, Microsoft or Apple depending on which browser you use.

10.5 Mobile applications

  • Apple App Store and Google Play distribute our mobile apps and handle their own account, download and, where applicable, in-app purchase data under their own policies.
  • Expo, operated by 650 Industries, Inc. in the United States, provides our mobile build and over-the-air update infrastructure, and relays our push notifications (§10.4). When your app checks for an update it transmits technical information such as the app version, the platform, and a device or installation identifier.

10.6 Memoria and Aela — our AI features

This part of the Platform works differently from the rest, so we would rather be precise than reassuring.

What stays with us. The search index that lets Memoria find the right memories is built by a model running on our own infrastructure. Your memories are not sent anywhere in order to be indexed or searched. When you mention someone by name or nickname, our own servers work out who you mean; your list of connections is not sent to an AI provider to do it.

What leaves us. The following is sent to a third-party AI provider over an encrypted connection:

  • Questions and drafts. When you ask Memoria or Aela something, or ask Aela to draft a memory or rewrite one you are editing: your question, what you told Aela or the text being rewritten, and the recent conversation, together with excerpts of the memories and profile details relevant to it, with whose they are, their date and place, and the names of the people tagged in them. Profile details are the parts of a profile its owner has shared with you, such as a birthday, places, work, beliefs or life events. Those excerpts are real content — the words you or your connections wrote.
  • Relationship descriptions. When you describe in your own words how you are related to someone — for example when you invite them, or answer an invitation or connection request — what you type is sent as you wrote it, so that the AI can work out the relationship. It can name other people (“Sam Lee’s dad”); nothing else about you or your connections is sent with it. Simple descriptions such as “my cousin” or “my sister’s daughter” are worked out on our own servers and are not sent.
  • Support reports. When you file a support report through Aela, the report is sent so that the AI can suggest a subject line for it, even if you wrote it yourself. If you ask Aela to help write it, what you told Aela is sent too, so that it can draft the report.

Who receives it. Anthropic is our only AI provider. Until October 8, 2026, we also used Google’s Gemini when Anthropic could not answer; §10.9 explains what that means for anything sent to it before then. We may add or change AI providers as the technology changes.

The terms that apply. Anthropic provides its service to us under commercial terms that do not permit it to train its models on what we send, and that limit how long it keeps it.

If you would rather not. Memoria and Aela are optional. If you do not use them, your questions are never sent to an AI provider, and the Help & Support form in Settings reaches us without using AI. Memories and profile details you share with other people can still appear as excerpts when they use Memoria or Aela, just as those people can already read them. Describing a relationship is part of inviting or connecting with someone; a simple description, such as “my cousin”, keeps it on our own servers.

10.7 Analytics and search reporting

We use Google Analytics 4 to understand how the Platform is used and to improve it, never for advertising. It reaches Google in two ways.

  • In your browser, in the web app only. On app.aeternumproject.com, Google Analytics runs only after you allow Analytics cookies; until you choose, or if you say no, it does not load at all. You can change your answer at any time under Settings › About & Support › Cookie settings, or with the Cookie settings link on the signed-out welcome screen, and our Cookie Policy lists the cookies it sets. Once allowed, Google receives the address and title of each screen you open, with anything after a ”?” removed and the private codes in invitation, inheritance, check-in and death-report links taken out; the activity Google records automatically, such as scrolling; your account’s ID, a random code rather than your name or email, while you are signed in; and what any browser sends, such as your IP address, browser, device, language and screen size. Advertising features and Google signals are switched off. The iOS and Android apps contain no analytics or advertising software.
  • From our own servers. Our servers also report to Google each request the web and mobile apps make to them — what kind of request it was, its address and whether it succeeded — together with your account’s ID while you are signed in, and events such as signing up, signing in and out, posting, commenting and updating a profile. These reports set no cookie and do not include your IP address. Your cookie choice does not control them.

Google Search Console and Bing Webmaster Tools report on how our public pages appear in search results. They receive aggregate search data only, and have no access to your account or your content.

10.8 Support and feedback

Support requests and feedback you send from inside the app — the Help & Support form in Settings, or a report you file through Aela — are stored in our own systems on AWS (§10.1), together with an identifier for your account, the device or browser you were using, and any file or screenshot you attach. The Help & Support form also sends the app’s recent technical log messages and, on the web, the address of the page, to help us find the fault. A report filed through Aela is also emailed to our support inbox (Google Workspace, §10.3), sent to our AI provider so that it can suggest a subject line (§10.6), and confirmed to you by email through Amazon SES. If Aela helps you write the report, what you told Aela is sent to the AI provider too.

10.9 Providers we have retired, which may still hold data

Our previous website was built on WordPress and carried a number of analytics, advertising and form-handling services. That website has been replaced. The site you are reading now carries no advertising or social pixels, no tracking cookies, and no analytics of any kind. It does load one third-party script on every page — the spam check on our forms — which is described in §10.12.

Data those services collected before the change, however, remains with them under their own retention terms, and is not within our power to erase retrospectively. We therefore continue to disclose them rather than quietly drop them from this list: WordPress, Google Tag Manager, Google Site Kit, Google Ads, Meta (Facebook) Pixel, LinkedIn Pixel, JotForm, Contact Form 7, WPForms, and Vercel.

Until October 8, 2026, Memoria and Aela also used Google Gemini (§10.6) when Anthropic could not answer. We used it through Google’s unpaid Gemini API service, and we no longer send it anything. Google may still hold what was sent to it before then, under that service’s terms, which allowed Google to use it, and the replies, to improve its products and AI models, and allowed people at Google to read them.

If you want to know whether any of these providers holds data relating to you, or you want it erased, write to us at info@aeternumproject.com and we will tell you what we know and help you make the request. Each of those providers also has its own privacy policy and its own process for access and deletion.

10.10 Signing in

You sign in with your email address and password. We do not offer sign-in through Google, Apple or any other third-party account, so no sign-in provider receives your details or learns that you use Aeternum.

The Platform may link to third-party websites and pages that we do not operate. Those sites have their own privacy practices, and we accept no responsibility or liability for them.

10.12 Our public website

Our marketing website at aeternumproject.com serves its own fonts and images, sets no cookies, keeps nothing optional in your browser and runs no analytics. The only record of visits is the access logs that our content delivery network, Amazon CloudFront (§10.1), keeps for every request: the address asked for, including anything after a ”?”; the time; your IP address; your browser’s user-agent string; the page that linked to ours, if your browser sends it; and technical details of the request and connection, such as the protocol and encryption used and how long the response took. The logs do not record cookies, put nothing in your browser, stay in our own AWS account and are deleted after 30 days. Beyond that, the site makes two kinds of third-party request, and we would rather name them than describe the site in general terms that are not quite true.

Cloudflare Turnstile, on every page. Our forms were receiving automated spam, so every form on the site — the contact form, the Help Center form, the newsletter signup and the tester application — is now behind a check that confirms the sender is a person rather than a script. Because the newsletter signup sits in the footer, that check loads on every page, whether or not you go near a form.

To perform it, Cloudflare receives your IP address, your browser’s user-agent string, and signals about how the page behaved in your browser. It is a privacy-preserving alternative to a conventional captcha: it does not ask you to identify photographs, it is not used to build an advertising profile, and Cloudflare states that it does not use the data for cross-site tracking. We receive none of it — only a yes or no.

Turnstile sets no cookies. It keeps one security entry in your browser’s storage, inside Cloudflare’s own frame (challenges.cloudflare.com). That entry is the only thing stored in your browser when a page of this website loads, and it is strictly necessary to protect our forms from spam.

YouTube, on our tester application page only, and only if you press play. That page offers a video introducing Aeternum. Until you press play it shows a still image stored on our own site, and nothing is requested from YouTube or any other Google service. When you press play, the video loads from YouTube’s youtube-nocookie.com player. From then on YouTube receives your IP address and viewing information, such as your browser details and what you play, and may store data in your browser, under Google’s own terms and privacy policy. If your browser does not run JavaScript, the page offers a link instead, which opens the video on youtube.com in a new tab under YouTube’s own terms.

Why this website has no cookie banner. Turnstile is necessary to protect our forms, and nothing optional runs until you choose it by pressing play, so there is nothing to ask before then. Our web app at app.aeternumproject.com is different: it asks first, as described in §10.7 and our Cookie Policy.

What our forms do with what you type. Submitting the contact or Help Center form sends your name, email address and message, with your IP address and the page you sent it from, to Amazon SES so it can reach our inbox. Applying to be a tester sends your name, email address, device type and referral answer, with your IP address, to Amazon SES so we can email you a confirmation and notify our support team. Subscribing to the newsletter, or ticking the optional box on any of those forms, adds you to Brevo (§03, §10.3), and a copy of the signup, with the same details, is emailed to our inbox through Amazon SES. The box starts unticked, and nothing is added unless you tick it.

10.13 Places, pricing and content delivery

Geoapify (Geoapify GmbH, Germany) finds places for the Platform’s location fields and turns a photo’s location into an address. When you type into a location field, what you type and your device’s IP address go to Geoapify. When you upload a photo that carries location data — the GPS coordinates many cameras save, which are often where you live — our servers send those coordinates to Geoapify to look up the address, and the app may look them up again when the memory is viewed.

ipapi.co (Kloudend, Inc., United States) tells us which country an IP address is in, so that we can show subscription prices in US or Canadian dollars. Our servers send it your IP address when you view our plans.

jsDelivr, a public content delivery network, serves the emoji images on some of the app’s welcome screens. Your device requests those images directly, so jsDelivr receives your IP address and your browser’s or app’s user-agent, but no account information.

Hugging Face (Hugging Face, Inc., United States) hosts the open AI model that Memoria uses to search your memories. Our servers download the model from Hugging Face and then run it on our own servers; none of your data is sent to Hugging Face.

11 HOW WE USE YOUR DATA

We use information that we collect on users or that is provided to us in order to:

  • Offer our Platform and its content and functionality to our users; provide users information and fulfill their requests; send marketing communications to people who have asked for them (§03); and provide users with notices about their account.
  • Carry out our obligations and enforce our rights arising from any contracts with a user, including for billing and collection purposes or to comply with legal requirements.
  • Verify the accuracy or appropriateness of any user submission or user content; monitor our Platform and enforce our standards; notify users about changes to our Platform or any products or services we provide.
  • Allow users to register for the Platform; participate in interactive functions; publish user content or submit user submissions; manage our relationship with users; and, where they have asked us to (§03), contact users about Aeternum goods and services that may be of interest to them.
  • Collect and measure data used to make the Platform and Aeternum and our products and services more effective; create recommendations, legacy summaries, and emotional analyses; or in any other way we may describe when a user provides the information or for any other purpose with their consent.

12 DISCLOSURE OF YOUR DATA

We may disclose your information that we collect or you provide:

  • Directly on the Platform when you submit a user submission or user content or interact with an interactive function of the Platform; to other users of the Platform for the purposes of facilitating the Platform’s digital inheritance functionality; or to third parties authorized to receive such information by User.
  • Together with any user content you choose to share, the technical information embedded in that content and any address derived from it, to each user, circle, or other recipient you share it with, and to a digital inheritor on a digital inheritance. Sharing user content is a deliberate act and discloses that information to every such recipient.
  • To each Digital Inheritor and Legacy Steward you have named who has accepted that role, the fact that you have not used the Platform for nine (9) months, as described in §16. That notice includes your name and that fact, and nothing else about your account or your content. You are told about this when you name them, and again on the day any such notice is sent.
  • To our subsidiaries, assigns, and affiliates; to contractors, service providers, and other third parties we use to support our business or deliver our products and services.
  • To comply with any court order, law, or legal process, including to respond to any government or regulatory request, in accordance with applicable law; to enforce our Terms of Service and User License Agreement including for compliance and billing and collection purposes; or if we believe disclosure is necessary to protect the rights, property, or safety of Aeternum, our customers, other users, or the public.

13 STORAGE OF YOUR DATA

We currently use Amazon Web Services to host our servers and data, which stores your information in the USA and Canada. In instances where your data is held outside of Canada, different privacy laws may apply that may not be as comprehensive as Canadian standards. In these circumstances, the governments, courts, law enforcement, regulatory agencies, and other third parties in that country may be able to obtain access to your data through the laws of the foreign country.

14 CHOICES ABOUT YOUR DATA

You can control the collection and use of your data including with:

  • Browser and device choices, including by setting your browser to refuse cookies, and in our web app with Cookie settings, as described in our Cookie Policy.
  • Opting out of marketing communications, by using the unsubscribe link in any marketing email or by writing to us, as described in §03.
  • Choices about information embedded in your files, including by removing that information from a file before you upload it, or by choosing not to share a file whose embedded information you do not wish disclosed to others.
  • By opting out of any feature, you may be unable to access or use some or all of the Platform.
  • To withdraw your consent to the practices stated in this Privacy Policy, please provide us notice in accordance with the notice provision at the end of this Privacy Policy.

15 DATA SECURITY

We use physical, electronic, and administrative measures to help secure your data from accidental loss and from unauthorized access, use, alteration, and disclosure. The safety and security of your data also depends on you. You are responsible for your profile on the Platform and for keeping your login and password confidential. The transmission of data via the internet is not completely secure and we cannot guarantee the security of your data on the Platform. Any transmission of data is at your own risk.

16 DATA RETENTION

Except as otherwise permitted or required by applicable law or regulation, we will only retain your data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Under some circumstances we may anonymize your data so that it can no longer be associated with you. We reserve the right to use and retain such anonymous data indefinitely for any legitimate business purpose without further notice to you.

Accounts that go quiet. If you have not used the Platform for a while, we will check in with you by email and on the Platform after six (6), nine (9), and twelve (12) months without activity, and after nine (9) months we will also let your Digital Inheritors and Legacy Steward know you have not used the Platform recently (§12). Signing in, using the Platform while signed in, or answering a check-in starts the count again. If your account has no active subscription and no user activity for twelve (12) months, it may become subject to inactive status, and its data may be deleted under section 09(D) of our User Licence Agreement, but not before these check-ins have been sent.

17 ACCESSING AND CORRECTING YOUR DATA

It is important that the data we hold about you is accurate and current. Please keep us informed if your data changes. By law you have the right to request access to it and to correct the data that we hold about you. By withdrawing your consent, you will not be able to access and use the Platform or our products or services. If you want to otherwise review, verify, correct, or withdraw consent to the use of your data, you may send us written notice in accordance with the notice provision at the end of this Privacy Policy. We may not accommodate a request to change data if we believe the change would violate any law or legal requirement or cause the information to be incorrect. We may request specific information from you to help us confirm your identity and your right to access the data, and to provide you with the data that we hold about you or make your requested changes. Applicable law may allow or require us to refuse to provide you with access to some or all the data that we hold about you, or we may have destroyed, erased, or made your data anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your data, we will inform you, subject to any legal or regulatory restrictions.

18 CHANGES TO OUR PRIVACY POLICY

It is our policy at Aeternum to post any changes we make to our Privacy Policy on this page. We include the date the Privacy Policy was last modified at the top of the page. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our Platform and this Privacy Policy to check for any changes.

Any hyperlink in this Privacy Policy is provided for convenience only and is subject to change from time to time as the server, data, or destination changes, or as posts or pages are taken down or moved. You understand that a wrong or missing hyperlink shall not affect the interpretation of this Privacy Policy.

20 NOTICES

All notices and communications to Aeternum shall be delivered in writing via email to:

Aeternum Corp. Attention: Privacy Officer legal@aeternumproject.com

All notices and communications to User shall be delivered to User by email to the email address User used to contact Aeternum and/or the email address we have on file for User.

We welcome your questions, comments, complaints, and requests regarding this Privacy Policy and our privacy and digital practices.

If submitting a notice, complaint, or request to withdraw consent or remove your account, content, data, or information from the Platform, please particularize and substantiate all information and evidence Aeternum needs to comply with such notice, complaint, or request, including to comply with all relevant rules, regulations, and this Privacy Policy, within TEN (10) days of the circumstances of such notice, complaint, or request was made known to User.