Legal

Privacy Policy

Last updated: October 13, 2026

This Privacy Policy explains how AliveIt, Inc. (“AliveIt,” “we,” “us”) collects, uses and shares personal information when you use aliveit.app, the Web App at my.aliveit.app, the AliveIt Mobile App, the Web Viewer (browser viewer and uploader), and related services (the “Service”). Capitalized terms not defined here (Seller, Uploader, Viewer, AR Experience, Content, Web App, Mobile App, Web Viewer) have the meanings in our Terms of Service.

Who is responsible for your data. AliveIt is responsible (the “controller”) for personal information about Sellers and their team members, website visitors, people who contact us, and technical data we collect to run and secure the Service. For personal information contained in Content and AR Experiences — for example, faces or voices in a video a Seller or its customer uploads — AliveIt acts on behalf of the Seller (as a “service provider” or “processor”), and the Seller decides how that Content is used. If you are an Uploader or Viewer and have a question or request about a specific AR Experience, you can contact the Seller or us; we will help or pass your request to the Seller.

1. Information we collect

From Sellers (account holders)

• Account and contact data: name, email, password (stored hashed), company name, store or marketplace links, industry, country, team members you invite, and your public Seller profile.
• Billing data: plan, transaction history, billing address and tax details. Card details are collected and stored by our payment processor, Stripe; we receive only limited information such as card type, last four digits and expiry.
• Content and Markers you upload, and AR Experience settings.
• Communications: support requests, survey responses, and how you interact with our emails.

From Uploaders (no account required)

• The video or photo you choose from your phone’s gallery and upload, and any caption or text you add. Content may include images or voices of you and other people.
• The AR Experience or QR code it is linked to, and technical data about the upload (see below).

From Viewers

• Scan and interaction events: which AR Experience was opened, date and time, a device identifier used to count unique phones, device type, operating system, browser or Mobile App version, approximate location (country/city) derived from IP address, and whether you viewed the Seller’s profile or clicked the Seller’s content or links.
• What Sellers see: Sellers see aggregated statistics about their AR Experiences — number of scans, number of unique phones, profile views and content clicks. Sellers do not see your name, IP address or precise location. On the free plan, Sellers may see only part of these statistics.
• Camera: to display AR, the Service needs access to your camera. We do not record video or audio from your camera. To recognize the Marker, the camera image is usually processed on your device; in some cases, a still image of the Marker captured by your camera may be sent to and stored on our servers, because the Service needs it to recognize the Marker and activate the AR Experience. We use these images only for Marker recognition and to operate the AR Experience, not to identify people, and we keep them for as long as the related AR Experience remains active (see Section 5). Avoid capturing people or other personal items in the frame when scanning.
• If you save an AR Experience in the Mobile App, the copy is stored locally on your device inside the Mobile App; we do not access it.

Automatically, from everyone

• Device and log data: IP address, browser type, device identifiers, pages and screens viewed, referring URL, errors and crash reports, and similar diagnostics.
• Cookies and similar technologies, as described in our Cookie Policy.

When you use AI video generation in the Mobile App

• The text prompts, images and other inputs you provide, and the resulting generated video. These are sent to our AI providers (see Section 4) to create the video and are stored with your other Content.

Biometric and health information. AliveIt does not collect, create or store biometric identifiers or biometric information (such as face geometry, faceprints or voiceprints), does not scan or recognize faces, and does not use Content to identify people. Marker recognition analyzes printed images, not people. We do not collect physical-health or medical information.

Sensitive information. We do not ask for sensitive personal information. Please do not include it in Content unless you have the right to share it.

2. How we use information

• To provide the Service: create accounts, host and deliver AR Experiences, process uploads, show Sellers statistics about their AR Experiences, and let users save copies in the Mobile App.
• To process payments, manage subscriptions and Credits, and prevent fraud.
• To provide support and send service messages (security alerts, billing notices, changes to terms).
• To send Sellers product updates and marketing emails, which you can unsubscribe from at any time.
• To maintain security, detect abuse, enforce our Terms and handle copyright complaints.
• To understand usage and improve the Service, using aggregated or de-identified data where possible.
• To comply with legal obligations and respond to lawful requests.

We do not sell personal information, and AliveIt does not use your Content to train its own artificial-intelligence models. When you use AI video generation, your prompts, images and generated videos are processed by third-party AI providers (see Section 4) under their own terms and privacy policies. These providers may keep logs of inputs and outputs and, depending on their terms, may use them to operate and improve their services and models. Do not submit confidential material or images of people who have not agreed to it.

3. Legal bases (EEA, UK and Switzerland)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (providing the Service to Sellers); legitimate interests (security, fraud prevention, improving the Service, B2B marketing to Sellers, handling support), balanced against your rights; consent (non-essential cookies and analytics, and marketing where consent is required), which you can withdraw at any time; and legal obligation (tax, accounting, responding to authorities). For Content we process on a Seller’s behalf, the Seller is responsible for having a legal basis.

4. How we share information

We share personal information only as described here:

• Sellers: Viewer statistics about a Seller’s AR Experiences (in aggregated or limited form), and Content uploaded to a Seller’s AR Experiences, are available to that Seller.
• Viewers: anyone who scans a Marker or QR code can view the linked AR Experience. Treat Content as potentially visible to anyone who has the product.
• Legal and safety: when required by law or to protect the rights, safety and property of AliveIt, our users or others.
• Business transfers: in connection with a merger, acquisition, financing or sale of assets, subject to this Policy.
• With your direction or consent.

Our service providers may use personal information only to perform services for us.

5. How long we keep information

We may keep information longer where needed to resolve disputes, enforce our agreements, or comply with law.

6. Security

We use administrative, technical and physical safeguards appropriate to the data, including encryption in transit, access controls and storage with Amazon Web Services. No system is completely secure; please use a strong, unique password and tell us promptly about any suspected unauthorized access.

7. International transfers

AliveIt is based in the United States and stores data in the United States. If you are outside the US, your information will be transferred to and processed in the US. Inputs to AI video generation may be processed by our AI providers in other countries. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and UK equivalents) with our service providers.

8. Your privacy rights

All users. You can update most account information in the Web App, unsubscribe from marketing emails through the link in each email, and ask us to delete your account.

US state residents (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states with comprehensive privacy laws), subject to exceptions, you may have the right to: know and access the personal information we hold about you; correct inaccurate information; delete personal information; obtain a portable copy; and opt out of the sale of personal information, “sharing” for cross-context behavioral advertising, targeted advertising and certain profiling. We do not sell personal information or share it for cross-context behavioral advertising. You may appeal our decision on your request by replying to our response; if we deny the appeal, you may contact your state attorney general.

California notice at collection. In the past 12 months we collected: identifiers (name, email, IP address, device IDs); commercial information (plans, purchases, Credits); internet and network activity (usage, scan and log data); approximate geolocation (from IP); audio and visual information (Content); and professional information (company, store links). We collect these from you, your devices and the Sellers you interact with, for the purposes in Section 2, and disclose them to the service providers in Section 4. We do not collect sensitive personal information for the purpose of inferring characteristics about you. We will not discriminate against you for exercising your rights.

EEA, UK and Switzerland. You also have the right to object to processing based on legitimate interests, to restrict processing, to withdraw consent at any time, and to lodge a complaint with your local data protection authority.

How to make a request. Email hello@aliveit.app (subject line “Privacy request”) or use the Web App. We will verify your identity (for example, by confirming your account email) before acting and will respond within the time required by law. You may use an authorized agent where the law allows. If your request concerns Content in a Seller’s AR Experience, we may refer it to the Seller or act on the Seller’s instructions.

Global Privacy Control. Where required, we treat a Global Privacy Control signal from your browser as a request to opt out of sale/sharing and non-essential tracking for that browser.

9. Children

The Service is not directed to children under 13, and Sellers must be at least 18. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK) without parental consent. Content uploaded by Sellers or Uploaders may show children; the person uploading it is responsible for having a parent’s or guardian’s permission. If you believe a child has given us personal information, or want a child’s image removed, contact hello@aliveit.app and we will act promptly.

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the new version with a new “Last updated” date and, for material changes, notify Sellers by email or in the Web App before the changes take effect.

11. Contact us

AliveIt, Inc. · 533 E Girard Ave STE 43674, Philadelphia, PA 19125, USA
Privacy questions: hello@aliveit.app · Support: support@aliveit.app