Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, upload photos, or contact us for support.

• Account information (email address, name)
• Photos and images you upload for video creation
• Payment information (processed securely through third-party providers)
• Communication preferences and support inquiries
• The country you signed up from, estimated from your IP address at signup (we store the country only, not the IP address), and the billing country our payment provider reports for a purchase
• Support conversations on WhatsApp: if you contact us on WhatsApp, we receive your phone number, your WhatsApp display name, and the content of the messages you send us. We do not download or store photos, voice notes, or other files sent in that chat.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our video creation services
• Process your photos to create animated videos
• Send you technical notices and support messages
• Process payments and send billing information
• Respond to your comments and questions

We do not use your photos to train AI models. To generate your videos we send your photos to third-party AI providers (listed in Section 3). Those providers process your photos under their own terms; our agreements with them do not authorize training on your data, but their general policies are theirs to publish.

Automated support assistant. Our WhatsApp support line is answered first by an automated assistant powered by an AI language model. It tells you that it is automated, and you can ask for a human at any time. To answer you, the text of your messages is sent to our AI provider (listed in Section 3). If you ask about your account and give us the email address on it, the assistant may look up a small set of status details for that account (whether an account exists, whether a purchase was made, how many animations remain, how many projects exist, the status of the most recent video, and the sign-up date) in order to answer. It never accesses your photos or payment details, and it cannot make changes to your account. When a conversation is handed to a human, a summary and the recent messages are emailed to our support team. When a conversation ends, we keep a short summary of it (the topics and the outcome) so that the next time you write from the same number, the assistant knows what you already asked. These summaries are stored and deleted together with the conversation. We also use conversations, without your personal details, to improve the assistant's answers; any improvement is reviewed by a person before the assistant uses it.

3. Who We Share Information With

We do not sell, rent, or trade your personal information. We share information only with the following categories of service providers, strictly for the purposes shown:

AI video generation - your photos are sent to one of the following providers at the time of generation, selected by us. If that provider fails, the same generation may be sent to a second provider from this list:

• Runway ML (United States)
• Atlas Cloud (United States)
• Higgsfield (United States)
• AIMLAPI / Kling V2 (United States; models developed by Kuaishou)
• Hailuo 02 / MiniMax (China)
• KIE AI / NEXUSAI SERVICES LLC (United States; including ByteDance Seedance models). KIE states that generated media is retained for 14 days and task log text/metadata for 2 months.

Face comparison for Growing videos - Amazon Web Services Rekognition (United States). For Growing videos, we may send the two photos of a transition to AWS Rekognition to compare the faces and work out which person is which, so the video keeps each person's identity. We do this only for transitions that may include more than one person. The comparison happens at the moment of generation and is not kept: we do not store face data, face measurements or face templates, and we do not create face collections. We keep only the resulting text instruction (for example, "the person on the left should become the person on the right") and a short result code (for example, that no instruction was needed). The instruction is sent, together with the photos, to the video-generation provider that creates the animation.

Payments - Freemius (Israel; with payment-card networks in their jurisdictions).

Email delivery - Resend (United States).

Support messaging - Meta Platforms / WhatsApp Business Platform (United States and other regions), which delivers messages to and from our support number.

AI support assistant - Anthropic, PBC (United States), which processes the text of support messages to generate replies. We send only what is needed to answer you, and never your photos.

Frame delivery and warranty support - for digital frame orders, we collect recipient and delivery details and may share them with the courier and warranty provider solely to fulfill and support the order.

Analytics - PostHog (United States/EU), Google Tag Manager and Google Analytics (United States), Meta Pixel (United States).

Hosting and storage - Vercel (United States), Supabase (Singapore/EU depending on region), AWS (United States).

International transfers. Some processors are located outside Israel and the EEA, including the United States and China. By using Echoes, you consent to the international transfer of your data to these processors for the purposes described above.

Public sharing. If you choose to share a clip or video using the share button, we copy that file to a public storage bucket with a permanent URL. Anyone with that URL can view the content. Sharing is opt-in per clip; you can stop sharing by deleting the shared copy from your dashboard.

Other disclosures. We may share information to comply with legal obligations, to protect our rights and prevent fraud, or with your specific consent.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

5. Data Retention

We retain your personal information only for as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law.

WhatsApp support conversations are deleted automatically once they have been inactive for 12 months. You can ask us to delete your support conversations sooner at any time (see Section 6), and we will remove them, including earlier resolved conversations from the same phone number.

When you delete your account. You can delete your account at any time from the account menu (Delete account). We then permanently delete your photos, animations, videos and music, your project titles and other text you wrote, your contact messages and your support conversations linked to your account, and we remove your name, email address and sign-in details. Links you shared stop working, usually within an hour. We also delete your analytics profile, including session recordings.

What we keep after deletion. We keep your purchase records (including the email address used to pay) for as long as tax and accounting law requires, and a usage history (for example, how many animations were created and when) that contains no photos, videos, name, email address or text. Because this history is linked to your purchase records, we keep it only as long as those records and then delete it. Our payment provider, Freemius, keeps its own records as the seller of record.

Copies held elsewhere. Our AI providers may keep copies of generated media for a short time under their own policies (see Section 3). Database backups are overwritten on a rolling basis, so deleted data can remain in a backup for a limited period before it is overwritten. WhatsApp support conversations that are not linked to your account are deleted after 12 months of inactivity, as described above.

6. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Object to processing of your information
• Data portability

You can delete your account and data yourself at any time from the account menu (Delete account; see Section 5). To exercise any of these rights, including deletion, you can also email contact@your-echoes.com from the email address on your account. We will respond within 30 days. EU and Israeli residents have the right to lodge a complaint with their supervisory authority (the Israeli Privacy Protection Authority for Israeli residents; your national DPA for EU residents).

These rights also apply to your WhatsApp support conversations. To have them deleted, message our support number or email contact@your-echoes.com.

7. Cookies and Tracking

We use cookies and similar tracking technologies to improve your experience, analyze usage patterns, and personalize content.

We also use a short-lived essential cookie, echoes_marketing_opt_in, to carry your marketing email preference across the Google sign-in redirect. It is set only when you submit the sign-in form, expires after 10 minutes, and is cleared once your preference is saved to your account.

Marketing emails. We send marketing emails only to users who explicitly opt in at sign-up. You can withdraw consent at any time through the in-app email preferences page, by clicking the unsubscribe link in any marketing email, or by emailing contact@your-echoes.com. Withdrawing marketing consent does not affect transactional emails (account, billing, generation status).

8. Children

Child users. Echoes is not intended for users under 16 in the EEA or under 13 elsewhere. We do not knowingly create accounts for children under those ages.

Photos of children. When you upload a photo of a child, you confirm that you have parental authority over that child or have permission from a person who does (see Terms section 3.1). If you become aware that someone else's child appears in your uploads without permission, you should remove that content.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page.

10. Contact Us

If you have any questions about this privacy policy, please contact us at:

Email: contact@your-echoes.com