Privacy Policy

This Privacy Policy applies to the website at https://edmundgrey.com and the Life Stories by Edmund Grey service.

The Service is sometimes referred to internally in technical identifiers as Time Capsule.

Life Stories by Edmund Grey creates a personalised narrated audio biography and written story text about a person you care about (the Story Subject).

The Service is designed to collect detailed biographical and family-history information through a voice interview and uses automated processing, including AI model providers, to research, write, narrate, and assemble the final story.

No account creation or login is required for the normal user flow. Access to the finished story is delivered by email and via a listen link.

Depending on how the Service is used, we may process personal data relating to:

1. Site visitors browsing edmundgrey.com
2. Purchasers, customers, and interviewees who start the interview and/or pay
3. Story Subjects, who may be living or deceased and may never use the Service
4. Final recipients or listeners who receive or open the listen link
5. People submitting a correction request
6. People signing up after an expired post-purchase offer on the listen page

A. Data you provide directly

Interview and conversation content

• Live voice conversation content processed to generate a transcript
• The transcript, stored as structured conversation data
• Detailed personal and family-history information you choose to share, which may include names, nicknames, relationships, birth year or decade, places lived, family structure, occupations, memories, anecdotes, emotional descriptions, religion, ethnicity or family origin, and similar biographical details
• Draft conversation identifiers needed to resume a draft

Checkout details

• Story Subject first name, family name, gender, and birth year
• Creator or purchaser first name, family name, and relationship to the Story Subject
• Email address
• Conversation ID and analytics or session identifiers
• Promotion or offer codes and references, if used

Correction requests

• Correction text you submit
• References to the relevant story or audio and related status fields

Expired-offer email signup

• Email address
• Source information such as listen_expired_offer

Email communications

If you contact us directly, for example by email, we process the information you send and our replies.

B. Data we collect automatically when you browse or use the Service

Website and interaction analytics

• Page URL
• Referrer
• User agent and related browser or device information
• A browser session identifier
• Approximate location such as country, city, and region
• First-touch attribution data, including landing URL, referrer, and UTM parameters
• Interaction events such as CTA clicks, sample audio clicks, checkout submits, and contact-link clicks

Network and technical data

• IP address, including where captured from request headers
• Location derived from IP, using ipinfo.io

Listen-page usage

• Play count and download count
• First and last played timestamps and first and last downloaded timestamps
• Related technical or log data, and for certain generation requests, IP address

Generation logs for cover art and scenes

• Conversation ID and generation parameters such as scene index and aspect ratio
• IP address
• Generation status and error messages
• Provider prediction IDs

C. Payment data

Payments are processed through Stripe Checkout. We do not store your full card details. Stripe processes payment information under its own terms and privacy practices.

We send Stripe metadata needed to run the transaction and reconcile it with your order, such as conversation ID, email, purchaser name, Story Subject name, analytics session ID, and promotion references.

D. Data we generate during story production

Our story-production pipeline produces and stores intermediate and final outputs such as:

• Transcript summaries
• Research outputs, including historical and contextual research
• Story arc and editorial decisions or briefs
• Chapter drafts and full final story text
• Narration timing, markup, and audio asset metadata
• Cover prompts used for image generation

The Service is designed for personal life stories, and you may choose to share information that can be considered sensitive in some jurisdictions, such as religion, ethnicity or family origin, grief and loss, or other intimate personal history.

• You control what you choose to share during the interview and in corrections.
• By submitting this information for story creation, you are asking us to process it for the purpose of producing and delivering your story and handling requested corrections.
• Where required by applicable law, we rely on your consent or another appropriate legal basis to process such information.

A key feature of the Service is that it can involve third-party personal data. You may provide information about a living Story Subject who is not you, and you may mention other living people during the interview.

We typically receive that information from you, the purchaser or interviewee, rather than directly from the Story Subject or those other people.

We use personal data to:

1. Provide the Service, including starting and running the interview, generating transcripts and story materials, creating narration and final audio, generating cover art and story-scene images, and delivering the finished story by email and via the listen link.
2. Operate, maintain, and improve the Service, including debugging, quality assurance, performance monitoring, fraud prevention, and abuse prevention.
3. Analytics and attribution, including understanding how visitors use the site, measuring which sources and campaigns bring visitors, and improving conversion and product experience.
4. Customer support and corrections, including responding to privacy requests, user questions, and one-time correction requests.
5. Communications, including service emails, delivery notices, and offer-related emails where you sign up for them, with opt-out where applicable.
6. Legal and compliance, including complying with legal obligations, enforcing agreements, and protecting rights, safety, and the integrity of the Service.

If you are in the EEA, UK, or another jurisdiction requiring a lawful basis, we generally rely on:

• Contract, to provide the story creation and delivery you request
• Legitimate interests, to operate, secure, and improve the Service and understand site usage
• Consent, where required, including where certain sensitive-data processing or marketing communications require it
• Legal obligation, where we must comply with applicable law

We share personal data with service providers and other third parties that help us operate the Service. Depending on the role they play, these parties may act as our processors or service providers, or they may process certain data under their own legal terms and responsibilities.

A. Core providers and third parties used by the Service

• Supabase for database, storage, and edge-function infrastructure
• Stripe for payment processing
• ElevenLabs for live voice interview, narration, pronunciation support, and music generation
• OpenAI for primary multi-step story generation and related processing
• Anthropic for certain pipeline paths and configurations
• Google Gemini for fallback model or provider paths in some configurations
• Resend for email delivery
• Replicate for cover art and story-scene image generation
• ipinfo.io for approximate geolocation based on IP address
• An external audio-mixing service hosted on AWS Lambda for final audio assembly
• An external correction-processing service hosted on AWS App Runner for correction handling

B. What may be shared

This depends on the feature being used, but may include:

• Transcript content and relevant identifiers such as conversation ID
• Story Subject details such as name, gender, and birth year, and creator details such as name and relationship
• Story text and prompts, including story excerpts for scene generation
• Technical data such as IP address for certain requests, user agent, timestamps, and usage events
• Email address and delivery payload needed to send the finished story
• Payment-related metadata required by Stripe

C. Other disclosures

• If required by law or legal process
• To protect rights and safety, prevent fraud, and enforce agreements
• In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate protections

The Service uses multiple AI and model providers. Your interview content, transcript, and story materials may be processed by these providers to generate your story.

• We do not make blanket promises in this policy about whether any specific AI provider uses submitted content for model training or improvement, because that depends on provider terms and account configuration.
• These providers process data in accordance with their own terms and privacy commitments, and you may wish to review them if that is important to you.

Stratara is based in Israel, and we use service providers that may process data in other countries, including the United States and other locations where our providers operate.

If you access the Service from outside Israel, your personal data may be transferred and processed internationally. Data protection laws may differ between countries.

If you would like more information about the international transfer arrangements that may apply to your data, contact us at [email protected].

The active frontend currently relies on browser storage rather than active first-party cookies.

A. sessionStorage

• Analytics session ID
• First-touch attribution details

B. localStorage

• A draft conversation resume token
• Accumulated call duration
• Checkout form contents stored locally on your device and keyed to the conversation

You can control browser storage through your browser settings, for example by clearing site data. If you clear this storage, you may lose the ability to resume drafts or restore checkout fields.

Some third-party services we use, such as payment providers, may use their own cookies or similar technologies within their own flows.

The finished story is delivered by email and via a listen link such as /listen/:id.

• The listen link is shareable and is not protected by a user account login.
• The listen route is marked as noindex, but the link is still accessible to anyone who has it.
• Treat the listen link like a private URL. If you share it, you may be disclosing story content and personal information to others.

If you believe a link has been shared beyond your intent, contact us at [email protected] and we will review available options consistent with our retention rules.

We use internal tools to operate the Service. As a result, authorised personnel may access personal data, including transcripts and story outputs, for purposes such as customer support, correction handling, service maintenance, troubleshooting, fraud prevention, and quality control.

Support is handled by real people. We do not claim no human review as an absolute rule.

We apply a standard 30-day retention clock to story-creation data.

• If you complete a purchase, we retain story-creation data for up to 30 days after delivery of the completed story.
• If you start an interview but do not complete purchase, we retain draft interview data for up to 30 days after interview start or your last activity.
• If a correction is requested and a corrected story is re-delivered, the relevant story-creation data may be retained for up to 30 days after the corrected delivery.

This may include transcripts, final story text and audio, and intermediate production materials.

We may retain limited records for longer where needed for payment processing, legal compliance, fraud prevention, security, dispute resolution, tax or accounting requirements, or similar legitimate business needs. Some such records may also be retained by providers like Stripe under their own retention rules.

If you want deletion sooner, contact us at [email protected].

We use administrative, technical, and organisational measures intended to protect personal data. However, no method of transmission or storage is completely secure.

Payment card information is handled by Stripe, and we do not store full card details on our systems.

A. General rights

Depending on your jurisdiction, you may have rights to:

• Request access to personal data we hold about you
• Request correction or rectification
• Request deletion
• Object to or restrict certain processing
• Request portability of certain data
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority where applicable

B. Rights relating to Story Subjects and other third parties

Because the Service can include data about Story Subjects and other people mentioned in interviews, we will consider requests from Story Subjects, or their authorised representatives, to access, correct, or delete their data where applicable law provides such rights. We may need to verify identity and authority before acting.

C. Marketing and offer communications

If you sign up for an expired-offer email or receive offer-related messages, you can opt out using the unsubscribe mechanism provided in the message, where available, or by contacting us.

D. How to exercise rights

Email [email protected] or [email protected] with your request. We may ask for information needed to verify your identity and locate the relevant record, such as the email used for delivery or the listen link.

If you provide personal information about a living Story Subject or any other living person, you represent that:

• You have the right and authority, and any legally required permission, to provide that information to us for the purposes of creating and delivering the story.
• You will not submit information unlawfully, including content that violates privacy, confidentiality, or other rights.

If you are unsure whether you have permission, do not submit the information.

The Service is not directed to children, and we do not knowingly seek to collect personal data directly from children through the normal Service flow.

If you believe a child has provided personal data to us, contact [email protected].

We may update this Privacy Policy from time to time. We will post the updated version on edmundgrey.com and update the Last updated date at the top of the page.