Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your display name, email address, and a securely hashed password. We do not store your plain-text password at any time.

Memorial & Profile Content

You may provide information about deceased loved ones including names, dates, photographs, biographical details, and personal memories. This content is stored securely and used solely to power your memorial profiles and AI-generated tributes.

Payment Information

Subscription billing is processed entirely by PayPal. We do not receive, store, or process your payment card numbers. We receive a subscription status and transaction reference from PayPal to update your account tier.

Usage Data

We collect standard server logs including IP addresses, browser type, pages visited, and feature interactions. This data is used for security monitoring, system stability, and service improvement.

AI Interaction Data

When you use AI features, the prompts and responses may be logged for safety monitoring, abuse prevention, and service quality. We do not use your memorial content to train AI models.

Communications

If you opt into SMS comfort messages, we collect your phone number and send messages via Twilio. You can opt out at any time by replying STOP.

2. How We Use Your Information

• To create and manage your account and memorial profiles
• To generate AI-powered tributes, narratives, and memory content
• To process and manage your subscription through PayPal
• To send SMS comfort messages if you have opted in
• To detect and prevent fraud, abuse, and security threats
• To monitor for emotional distress signals and offer crisis support resources
• To improve the platform and fix issues
• To comply with legal obligations

We do not sell your personal data. We do not use memorial content or grief-related interactions for advertising purposes.

3. Information Sharing & Third Parties

We share data with the following service providers solely to deliver the platform's features:

• PayPal — subscription billing and payment processing
• OpenAI — AI-generated narratives, captions, conversations, and meditation content. OpenAI's data use policy applies to prompts sent to their API.
• ElevenLabs — text-to-speech audio and voice cloning features
• Twilio — SMS comfort messages and notifications
• fal.ai — AI image and video generation
• Replicate — age progression image generation
• Neon (PostgreSQL) — secure cloud database hosting

We do not share your data with advertisers, data brokers, or any other parties not listed above. We may disclose data if required by law, court order, or to protect the safety of users or the public.

4. AI Processing & Data

Lazarus AI uses artificial intelligence to generate memorial content, narratives, tributes, and wellbeing content. Important disclosures:

• AI-generated content about deceased individuals is entirely synthetic — it does not represent real statements, opinions, or communications from the deceased.
• We do not use your memorial photographs or biographical data to train AI models.
• Prompts sent to third-party AI providers (OpenAI, ElevenLabs, fal.ai) are governed by those providers' data policies. We send only the minimum data necessary.
• Voice cloning features require explicit consent before activation. Cloned voice data is stored securely and tied to your account.

5. Data Retention

We retain your account data for as long as your account is active. Memorial profiles and associated content are retained until you delete them or close your account.

When you request account deletion, we permanently delete your personal data, memorial profiles, uploaded files, and AI-generated content within 30 days, except where we are required by law to retain records longer. Anonymized usage statistics may be retained indefinitely.

6. Your Rights (GDPR / CCPA)

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — correct inaccurate data
• Deletion — request deletion of your account and all associated data
• Portability — receive your data in a machine-readable format
• Opt-out of SMS — text STOP to any message, or contact us directly
• Withdraw consent — for any consent-based processing (e.g., voice cloning)

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

7. Cookies & Local Storage

We use a secure, HttpOnly authentication cookie to maintain your login session. We also use browser localStorage to store non-sensitive preferences such as your chosen theme and journey type.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Security

We implement industry-standard security measures including:

• bcrypt password hashing with salt
• JWT authentication with secure, HttpOnly cookies
• HTTPS encryption for all data in transit
• SQL injection and XSS prevention
• Rate limiting on all API endpoints
• CSRF protection
• Continuous security scanning and monitoring

No method of transmission over the internet is 100% secure. If you discover a security vulnerability, please contact us immediately at the address below.

9. Children's Privacy

Lazarus AI is intended for users aged 18 and older. We do not knowingly collect personal information from individuals under 18. If you believe a minor has created an account, please contact us immediately and we will delete the account and associated data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice in the application. Your continued use of Lazarus AI after the effective date of any changes constitutes your acceptance of the updated policy.

11. Contact Us

For privacy questions, data requests, or to report a concern, please contact us: