1. Introduction

Afterword, Inc. ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital legacy service ("Service").

We believe that your personal messages and data should remain private. This policy describes our privacy practices and your choices regarding the collection and use of your information.

2. Information We Collect

2.1 Information You Provide

• Account information (name, email address, password)
• Profile information and preferences
• Recipient contact information
• Check-in schedules and delivery preferences
• Payment and billing information
• Communications with our support team

2.2 Message Content

Important: Your message content is encrypted on your device before transmission. We cannot read, access, or analyze your encrypted messages due to our zero-knowledge architecture.

• Message text (encrypted)
• File attachments (encrypted)
• Message metadata (delivery dates, recipient lists)

2.3 Automatically Collected Information

• Device information (browser type, operating system)
• Usage data (check-in patterns, feature usage)
• Log data (IP addresses, access times, error logs)
• Security event data (login attempts, suspicious activity)

3. How We Use Your Information

3.1 Service Provision

• Creating and managing your account
• Storing and delivering your encrypted messages
• Processing check-ins and triggering deliveries
• Providing customer support

3.2 Service Improvement

• Analyzing usage patterns to improve features
• Monitoring system performance and reliability
• Developing new features and services

3.3 Security and Compliance

• Detecting and preventing fraud and abuse
• Monitoring for security threats
• Complying with legal obligations

4. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except as described below:

4.1 Message Recipients

Your encrypted messages are delivered only to the recipients you specify, only when your delivery conditions are met.

4.2 Service Providers

We may share limited data with trusted service providers who assist us in operating our service, conducting our business, or serving our users, provided they agree to keep information confidential.

4.3 Legal Requirements

We may disclose your information when required by law, such as to comply with a subpoena or similar legal process, or when we believe disclosure is necessary to protect our rights or the safety of others.

5. Data Security

5.1 Encryption

All message content is encrypted using AES-256 encryption on your device before transmission. Encryption keys are derived from your account credentials and are never stored on our servers.

5.2 Infrastructure Security

We implement industry-standard security measures including SSL/TLS encryption, secure data centers, access controls, and regular security audits.

5.3 Data Breach Response

In the event of a data breach, we will notify affected users and relevant authorities as required by law, typically within 72 hours of discovery.

6. Your Privacy Rights

6.1 Access and Portability

You can access and download your account data at any time through your account settings.

6.2 Correction and Updates

You can update your account information and preferences at any time through your account settings.

6.3 Deletion

You can delete individual messages or your entire account. Deleted data is securely overwritten and cannot be recovered.

6.4 Communication Preferences

You can control what communications you receive from us and how we contact you about your account.

7. Data Retention

We retain your information only as long as necessary to provide our services and fulfill the purposes described in this policy:

• Account data: Until account deletion or service termination
• Message content: Until delivered or manually deleted by you
• Log data: Automatically deleted after 30 days
• Billing records: Retained for tax and accounting purposes as required by law

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your privacy and data.

For users in the European Economic Area, we comply with GDPR requirements for international data transfers, including the use of Standard Contractual Clauses where appropriate.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18.

If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after we post any modifications constitutes your acceptance of the new Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

AuravisionX Pty. Ltd.

Afterword Privacy Officer

Email: support@avxlabs.io

For users in the European Union: You have the right to lodge a complaint with your local data protection authority if you believe your privacy rights have been violated.