Legal
Privacy Policy
Last updated: May 25, 2026
1. Who we are
BookRealm is operated by SpeakerRealm LLC. Data controller contact: hello@everarealm.com.
2. What we collect
- Account data: name, email, password hash, profile preferences.
- Recordings: audio and video you record or upload, plus generated transcripts.
- Voice biometrics: if you enable voice cloning, a voice model derived from your recordings.
- Documents and media: photos, letters, files you upload to your vault.
- Family graph: people you invite, relationships you describe, permissions you assign.
- Usage data: device, browser, IP address (hashed for rate-limiting), and feature interaction.
- Billing: handled by Stripe; we store only customer and subscription IDs, never card numbers.
3. How we use it
We use your data to operate the service: store and play back your recordings, generate transcripts and source-linked answers, send invites you authorize, deliver time-released and post-life messages, and provide customer support. We do not sell personal data. We do not use your recordings to train external AI models.
4. Sub-processors
- Supabase — database and file storage (US region).
- Cloudflare — application hosting and edge delivery.
- Stripe — payment processing.
- Resend — transactional email delivery.
- ElevenLabs — voice cloning and synthesis (only when you enable voice features).
- OpenAI / Google AI Gateway — language model inference for transcription and grounded Q&A.
Each sub-processor receives only the minimum data needed for its function. See our Data Processing Addendum for the full list and contract terms.
5. Security
Data is encrypted in transit (TLS 1.2+) and at rest. Row-Level Security policies in our database enforce that only you, your authorized contributors, and your designated stewards can read your data. Voice models are stored separately from public profiles. Service-role keys never leave the server.
6. Your rights
Depending on where you live (GDPR, CCPA/CPRA, BIPA, Texas CUBI, Washington My Health My Data, and other laws), you have the right to access, correct, export, restrict, or delete your data, and to withdraw consent for biometric processing. Exercise any right from Settings or by emailing hello@everarealm.com. We respond within 30 days.
7. Retention
We retain your Legacy for the life of your account, or until you delete it. If a Legacy Release fires, content is retained for delivery to designated recipients per the workflow you configured. Backups are retained for 30 days after deletion.
8. Children
BookRealm is not directed at children under 13. We do not knowingly collect data from children. If a child has contributed via a family invite, the inviting adult is responsible for that consent.
9. International transfers
Data is processed in the United States. EU and UK transfers rely on Standard Contractual Clauses.
10. Changes
Material changes will be notified by email and posted here. The "Last updated" date reflects the latest revision.
11. Contact
Privacy questions, data requests, or biometric consent revocation: hello@everarealm.com.