IDITOR INC.

ECHOCHAT

TERMS OF USE

Effective Date: February 12, 2026

Last Updated: February 12, 2026

This document constitutes a legally binding agreement between you and Iditor Inc. Please read it carefully before using the EchoChat Services.

1. Acceptance of Terms

By accessing or using the EchoChat application, website, APIs, or any related services (collectively, the “Services”), you agree to be bound by these Terms of Use (“Terms”). If you do not agree to these Terms, you may not access or use the Services.

These Terms constitute a legally binding agreement between you and Iditor Inc., a Delaware corporation headquartered in San Francisco, California. Your continued use of the Services after any modifications to these Terms constitutes acceptance of such modifications.

IMPORTANT: These Terms contain an arbitration clause and class action waiver in Section 16. By agreeing to these Terms, you agree to resolve disputes through binding individual arbitration and waive your right to participate in class actions.

CONSENT TO MEMORY PROCESSING AND DISTRIBUTION: By accepting these Terms, you expressly consent to the processing, structuring, matching, and distribution of your Public Memory Data as described in Sections 5, 6, and 7. This includes consent for your AI Agent to engage in conversations with other users based on your Public Memory Data, and for your Public Memory Data to be surfaced to users with similar emotional or thematic patterns.

2. Description of Services

EchoChat is a memory-driven social connection platform that combines AI-powered conversation with asynchronous social networking. The Services include, but are not limited to:

(a) An AI conversational agent (“Echo Agent” or “Your Echo”) that engages in dialogue with you to help you articulate, process, and record emotional experiences and personal reflections.
(b) A memory system that transforms your conversations into structured emotional records (“Memories” or “Moments”), consisting of textual summaries, emotional tags, and contextual metadata (“Fragments”).
(c) A social discovery network where Memories, when designated as Public by the user, may be surfaced to other users based on emotional similarity, thematic relevance, and contextual matching (“Memory Matching”).
(d) Cross-dialogue functionality where users may interact with another user’s Echo Agent (“Peer Echo Interaction”), subject to the visibility and consent terms described herein.
(e) A virtual economy system using a digital currency (“Echoes”) to facilitate interactions within the Services.
(f) Geographic and event-based social features (“Journeys”) that create shared memory spaces tied to real-world activities and locations.
(g) Pre-Built Profiles derived from publicly available data, subject to the terms and limitations described in Section 6.

3. Account Registration and Eligibility

You must be at least 18 years of age to use the Services. By creating an account, you represent and warrant that you are at least 18 years old and that all registration information you provide is accurate, current, and complete.

Account creation requires a valid email address and, where applicable, a valid invitation code. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.

We reserve the right to suspend or terminate your account if any information provided is found to be inaccurate, incomplete, or in violation of these Terms.

4. User Content and Memory Data

4.1 Definitions

“User Content” means all information, text, images, audio, and other materials that you provide, upload, or generate through your use of the Services, including but not limited to conversational inputs, personal reflections, emotional expressions, and any other data you voluntarily share with your Echo Agent.

“Memory Data” means the structured outputs generated by the Services from your User Content, including Memories, Moments, Fragments, emotional tags, thematic summaries, and associated metadata. Memory Data is created by the EchoChat AI system through processing your User Content using machine learning models.

“Private Memory Data” means Memory Data that you have not designated as Public. Private Memory Data is accessible only to you and to the EchoChat system for the purpose of providing personalized services.

“Public Memory Data” means Memory Data that you have affirmatively designated as visible to other users through the Services. The specific implications of designating Memory Data as Public are described in Section 5.

4.2 Ownership

You retain ownership of your User Content. By submitting User Content to the Services, you grant Iditor Inc. a worldwide, non-exclusive, royalty-free, sublicensable license to use, reproduce, modify, adapt, process, and display your User Content solely for the purposes of operating, improving, and providing the Services.

Memory Data generated from your User Content is jointly owned. You retain all rights to your underlying User Content, while Iditor Inc. retains rights to the processed, structured, and anonymized forms of Memory Data as part of the platform’s collective intelligence and matching systems.

4.3 Voluntary Provision of Sensitive Information

NOTICE: In the course of conversing with your Echo Agent, you may voluntarily share information that constitutes sensitive personal data, including but not limited to: mental health status, emotional conditions, health-related information, philosophical or religious beliefs, sexual orientation, and other deeply personal information.

By using the Services, you acknowledge and consent to the collection and processing of such information as described in these Terms and our Privacy Policy. You are never required to share sensitive personal information, and you may choose to limit the depth of your conversations at any time.

The Echo Agent is an AI system, not a licensed therapist, counselor, or medical professional. Information shared with the Echo Agent should not be considered a substitute for professional mental health services.

5. Memory Visibility and Public Sharing

5.1 The Two-State Privacy Model

All Memory Data exists in one of two states:

Private (Default): All Memory Data is Private by default. Private Memory Data is used solely to personalize your Echo Agent experience and is not visible to other users. Private Memory Data may be used in de-identified, aggregated form to improve the Services’ matching algorithms, but will not be attributable to you.
Public (User-Designated): You may affirmatively choose to designate specific Memories or Fragments as Public. This is an active, per-item decision that requires your explicit confirmation for each piece of content.

5.2 Consequences of Designating Memory Data as Public

BY DESIGNATING ANY MEMORY DATA AS PUBLIC, YOU ACKNOWLEDGE, UNDERSTAND, AND CONSENT TO THE FOLLOWING:

(a) Visibility to Other Users. Public Memory Data may be displayed to other users of the Services. The EchoChat system uses emotional similarity, thematic relevance, geographic proximity, and contextual matching algorithms to determine which users may see your Public Memory Data. You do not control which specific users will see your Public Memory Data, although you will be notified when other users view it.
(b) AI Agent Activation for Cross-Dialogue. Once Memory Data is designated as Public, your Echo Agent becomes available for Peer Echo Interactions regarding the topics and emotional themes contained in your Public Memories. Other users may initiate conversations with your Echo Agent, and your Echo Agent will generate responses informed by your Public Memory Data. By making Memory Data Public, you expressly authorize your Echo Agent to represent your publicly shared emotional expressions, perspectives, and themes in conversations with other users.
(c) Emotional and Thematic Matching and Distribution. Public Memory Data is indexed and processed by our matching algorithms to identify emotional and thematic connections with other users’ content. Your Public Memory Data, including its emotional tags, thematic summaries, and contextual metadata, will be actively compared against other users’ data to facilitate connections. Users with similar emotional patterns or thematic interests may be presented with your Public Memory Data as a potential connection opportunity.
(d) Derivative Insights. The EchoChat system may generate derivative insights, summaries, or representations of your Public Memory Data for the purpose of facilitating connections and social discovery. These derivatives are designed to preserve emotional resonance while protecting specific personal details.
(e) Persistence and Discoverability. Public Memory Data remains discoverable by other users across time and geography. A Memory you make Public today may be discovered by a user in a different city months or years later. This is a core feature of the EchoChat platform’s asynchronous connection model.
(f) Interaction Transparency. When other users view or interact with your Public Memory Data, you will receive notifications and records of such interactions through your Memory Log, including the identity of the viewing user and the specific Memories they accessed.

5.3 Revocation of Public Status

You may revoke the Public status of any Memory Data at any time by changing its designation back to Private through the Memory Log interface. Upon revocation:

(a) The Memory Data will no longer be surfaced to new users through the matching system.
(b) Your Echo Agent will no longer reference the revoked Memory Data in new Peer Echo Interactions.
(c) Existing cross-dialogue conversations that referenced the Memory Data prior to revocation will remain visible to participants who already accessed them, as these conversations constitute independent User Content of the interacting parties.
(d) Cached or indexed versions of the Memory Data may take up to 30 days to be fully removed from the matching system.

5.4 No Guarantee of Anonymity for Public Data

YOU ACKNOWLEDGE THAT DESIGNATING MEMORY DATA AS PUBLIC CARRIES INHERENT RISKS. While the EchoChat system is designed to prioritize emotional resonance over personal identification, the nature of deeply personal emotional content means that Public Memory Data may, in combination with other publicly available information, allow other users to infer aspects of your identity, location, experiences, or personal circumstances. Iditor Inc. does not guarantee anonymity for Public Memory Data.

6. Pre-Built Profiles and Unclaimed Accounts

6.1 What Are Pre-Built Profiles

To enhance the quality and density of the EchoChat meaning network, Iditor Inc. may create “Pre-Built Profiles” derived from publicly available data on social media platforms and other public online sources. Pre-Built Profiles are preliminary account structures that contain AI-processed emotional and thematic data derived from public content.

Pre-Built Profiles are not active user accounts. They exist in a restricted, dormant state until claimed by the individual to whom the underlying public data pertains.

6.2 Restrictions on Unclaimed Pre-Built Profiles

Prior to being claimed by the original content creator, Pre-Built Profiles are subject to the following mandatory restrictions:

(a) No Real Identity Disclosure. Pre-Built Profiles do not display the original author’s name, username, profile image, or any other directly identifying information. All such identifying data is permanently removed or cryptographically obscured during the profile creation process.
(b) Memory Data Not Displayed. The Memory Data contained within an Unclaimed Pre-Built Profile is not visible to any user of the Services. No user may browse, read, or access the specific Memories, Moments, or Fragments within an Unclaimed Pre-Built Profile.
(c) AI Agent Not Available for Conversation. The Echo Agent associated with an Unclaimed Pre-Built Profile is not active and cannot be engaged in conversation by any user. No Peer Echo Interactions are possible with Unclaimed Pre-Built Profiles.
(d) No Participation in Memory Matching. The Memory Data within Unclaimed Pre-Built Profiles is not indexed in the active Memory Matching system and is not surfaced to users as potential connections.
(e) Backend Use Only. The de-identified emotional and thematic data derived from public sources may be used solely in Iditor Inc.’s backend systems for the purpose of training and improving matching algorithms, emotional analysis models, and AI response quality. This use is limited to aggregate, non-attributable pattern analysis.

6.3 Claiming a Pre-Built Profile

If a Pre-Built Profile has been created based on your publicly available data, you may claim it by verifying your identity through the Services. Upon claiming a Pre-Built Profile:

(a) You will gain full access to the Memory Data generated from your public content and may review, edit, delete, or modify any Memories or Fragments.
(b) You will be presented with these Terms of Use and must affirmatively accept them before the account becomes active.
(c) Upon acceptance of these Terms, your account becomes a full active account. At this point, and only at this point, the consent and authorization provisions of Section 5 become applicable to your account. This means that if you subsequently choose to designate any Memory Data as Public, the full consequences described in Section 5.2 will apply, including Memory Matching, AI Agent activation for cross-dialogue, and distribution to users with similar emotional patterns.
(d) You may choose to delete the Pre-Built Profile entirely, in which case all associated Memory Data will be permanently deleted within 30 days.
(e) You may choose to keep the account but maintain all Memory Data as Private, in which case no data will be visible to other users and your Echo Agent will not be available for Peer Echo Interactions.

6.4 Consent Architecture for Claimed Profiles

The consent flow for Pre-Built Profiles operates as follows:

Step 1 — Claim: You verify your identity and gain access to the Pre-Built Profile. No data is shared with other users at this stage.
Step 2 — Accept Terms: You review and accept these Terms of Use, which constitutes your informed consent to the data processing practices described herein, including the potential for Memory Matching and AI Agent cross-dialogue upon designation of Memory Data as Public.
Step 3 — Review and Curate: You review all Memory Data in your account and may edit, delete, or modify any content before making any designation decisions.
Step 4 — Designate (Optional): You may choose to designate specific Memories as Public, which activates the full Memory Matching and cross-dialogue features described in Section 5. This designation is entirely voluntary, per-item, and revocable at any time.

6.5 Right to Request Deletion of Unclaimed Pre-Built Profiles

Any individual who believes that a Pre-Built Profile has been created based on their publicly available data may request its deletion at any time by contacting us at echo@iditor.com. Upon receiving a verified request:

(a) We will confirm whether a Pre-Built Profile associated with the requester’s identity exists.
(b) If a Pre-Built Profile exists, we will permanently delete all associated data, including all Memory Data, emotional tags, thematic summaries, and metadata, within 30 days of verification.
(c) We will provide written confirmation of deletion upon request.
(d) For California residents, this right is provided in accordance with the California Consumer Privacy Act (CCPA). For EU/UK residents, this right is provided in accordance with Article 17 of the General Data Protection Regulation (GDPR).

6.6 De-Identification Standards for Pre-Built Profile Source Data

All publicly sourced data used to create Pre-Built Profiles undergoes a mandatory de-identification process that meets the standard set forth in Cal. Civ. Code § 1798.140(m). This process includes:

(a) Extraction of abstract emotional vectors, thematic tags, and sentiment patterns from source content using machine learning models.
(b) Permanent removal of all original source text in its verbatim form, usernames, profile identifiers, timestamps, geographic metadata, and URLs that could be used to trace the data back to its original source.
(c) Retention of only AI-processed emotional and thematic representations that cannot be reverse-engineered to reconstruct the original content or directly identify its source.
(d) Prohibition on any attempt to re-identify the source of de-identified data, contractually binding all employees and service providers with access to such data.

Limitation on De-Identification: Iditor Inc. acknowledges that while our de-identification process is designed to prevent direct identification, the inherently personal nature of emotional content means that complete de-identification cannot be absolutely guaranteed. Individuals who recognize content patterns that may relate to their own public expressions may contact us to request review and deletion.

7. AI Agent Interactions and Cross-Dialogue

7.1 Your Echo Agent

Your Echo Agent is an AI system trained on your User Content and Memory Data to represent aspects of your personality, emotional patterns, and expressed thoughts. Your Echo Agent is not you, and its responses in cross-dialogue interactions are AI-generated approximations that may not perfectly represent your views or intentions.

7.2 Peer Echo Interactions

When another user initiates a conversation with your Echo Agent:

(a) The conversation content is visible to both you and the initiating user.
(b) Your Echo Agent will draw upon your Public Memory Data to inform its responses.
(c) Your Echo Agent will not disclose Private Memory Data during Peer Echo Interactions.
(d) You will be notified of all Peer Echo Interactions and may review transcripts at any time.
(e) You may disable Peer Echo Interactions at any time through your account settings, which will prevent other users from initiating conversations with your Echo Agent.
(f) Peer Echo Interactions are only available for fully active accounts that have accepted these Terms. Unclaimed Pre-Built Profiles cannot participate in Peer Echo Interactions under any circumstances.

7.3 AI-Mediated Introductions

The EchoChat system may suggest real-world introductions between users based on Memory Matching. Such introductions require explicit consent from both parties and are facilitated through the Echo Agent’s email introduction feature. No personal contact information is shared without your affirmative opt-in.

8. The Echo Economy (Echoes Currency)

“Echoes” are a virtual currency within the Services. Echoes are earned when other users view or interact with your Public Memory Data, and are spent to initiate Peer Echo Interactions or access certain premium features.

Echoes have no monetary value and cannot be exchanged for cash, gift cards, or any other form of real-world currency. Iditor Inc. reserves the right to modify the earning rates, spending rates, and availability of Echoes at any time.

Echoes are non-transferable between accounts and will be forfeited upon account termination.

9. Privacy and Data Protection

9.1 Categories of Data We Collect

We collect the following categories of personal data:

Profile Data: Name, email address, username, profile image, and invitation code.
Conversational Data: All text, voice transcriptions, and other inputs you provide during conversations with your Echo Agent or Peer Echo Interactions.
Memory Data: Structured outputs including Memories, Moments, Fragments, emotional tags, thematic summaries, and contextual metadata derived from your Conversational Data.
Device and Technical Data: IP address, device identifiers, operating system, browser type, and app version.
Location Data: Geographic location data when you use Journey features or check-in at events, subject to your device permissions.
Usage Data: Interaction patterns, feature usage, session duration, and engagement metrics.
Economic Data: Echoes balance, transaction history, and interaction records.
Publicly Sourced Data: De-identified emotional and thematic data derived from publicly available social media content, processed in accordance with Section 6.6.

9.2 How We Use Your Data

We use collected data for the following purposes:

(a) Providing, operating, and personalizing the Services, including training and improving your Echo Agent.
(b) Facilitating Memory Matching and social discovery among users.
(c) Operating the Echo Economy and processing Echoes transactions.
(d) Improving and developing the Services, including machine learning model training on de-identified data.
(e) Communicating with you about the Services, including notifications about interactions with your content.
(f) Creating and maintaining Pre-Built Profiles in accordance with Section 6.
(g) Ensuring safety, security, and compliance with applicable laws.

9.3 Data Sharing and Disclosure

We do not sell your Private Memory Data. We disclose personal data only in the following circumstances:

(a) With other users, limited to your Public Memory Data and cross-dialogue transcripts, as described in Sections 5 and 7.
(b) With service providers who process data on our behalf, subject to contractual data protection obligations.
(c) As required by law, regulation, legal process, or governmental request.
(d) In connection with a merger, acquisition, or sale of assets, subject to the acquiring entity’s assumption of these Terms.
(e) In de-identified, aggregated form that cannot reasonably be used to identify you.

9.4 Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Services. Upon account deletion, we will delete or de-identify your personal data within 90 days, except where retention is required by law or necessary to resolve disputes. De-identified data derived from your content may be retained indefinitely for service improvement purposes.

Pre-Built Profile data for Unclaimed Profiles is retained for a maximum of 24 months from the date of creation. If a Pre-Built Profile remains unclaimed after 24 months, all associated data will be permanently deleted.

10. Biometric and Sensitive Data (BIPA / CCPA Compliance)

10.1 Voice Data and Biometric Information

If you use the voice input feature of the Services, your voice recordings are processed by third-party transcription services to convert speech to text. The resulting text transcription is retained as Conversational Data.

Voice Recordings: Raw voice recordings are retained only for the duration necessary to complete transcription and are deleted within 24 hours of processing. We do not create voiceprints, voice models, or other persistent biometric identifiers from your voice recordings.

Illinois Residents (BIPA Notice): Under the Illinois Biometric Information Privacy Act (740 ILCS 14), we provide the following notice: Iditor Inc. does not collect, capture, or otherwise obtain biometric identifiers or biometric information as defined under BIPA from end users of the Services. Voice recordings processed through the transcription feature are transient data used solely for text conversion and are not used to identify any individual. If our practices change in the future, we will obtain your informed written consent before collecting any biometric identifiers or biometric information.

10.2 Sensitive Personal Information Under CCPA

Certain information you voluntarily share during conversations may constitute Sensitive Personal Information under the California Consumer Privacy Act (Cal. Civ. Code § 1798.140(ae)), including information about mental or physical health, philosophical beliefs, or other protected categories.

We collect such Sensitive Personal Information only as voluntarily provided by you during conversations with your Echo Agent. We use this information solely for the purposes of operating the Services, including personalizing your Echo Agent and facilitating Memory Matching. We do not use Sensitive Personal Information for the purpose of inferring characteristics about you beyond the scope of the Services.

You have the right to limit the use and disclosure of your Sensitive Personal Information. To exercise this right, please contact us at echo@iditor.com.

10.3 Health Data

In the course of using the Services, you may voluntarily share information related to your mental or physical health. This information is processed as User Content and Memory Data subject to the protections described in these Terms.

Washington Residents: If you are a resident of Washington State or if we collect your health-related data in Washington, please refer to our Washington Consumer Health Data Privacy Policy for additional information about your rights under the Washington My Health My Data Act.

11. Data Collection from Third-Party Sources

11.1 User-Authorized Social Media Import

The Services may offer features that allow you to import content from third-party platforms, including but not limited to Twitter/X, Instagram, and other social media services. Such imports occur only with your explicit authorization and are subject to the following conditions:

(a) You must authenticate with the third-party platform and grant explicit permission for EchoChat to access specified content.
(b) Imported content is treated as User Content and is subject to all protections described in these Terms.
(c) We access only the content categories you explicitly authorize and do not maintain persistent access to your third-party accounts beyond the initial import.
(d) You represent and warrant that you have the right to share any content imported from third-party platforms.

11.2 Publicly Available Data for Pre-Built Profiles

As described in Section 6, Iditor Inc. may access publicly available data from social media platforms and other public online sources for the purpose of creating Pre-Built Profiles and improving our matching algorithms and AI systems. All such data is processed in accordance with the de-identification standards described in Section 6.6 and the restrictions on Unclaimed Pre-Built Profiles described in Section 6.2.

12. Intellectual Property

The Services, including all software, algorithms, designs, text, graphics, and other materials, are owned by or licensed to Iditor Inc. and are protected by intellectual property laws. Nothing in these Terms grants you any right, title, or interest in the Services except the limited right to use the Services in accordance with these Terms.

The EchoChat name, logo, and all related marks are trademarks of Iditor Inc. You may not use any of our trademarks without our prior written consent.

13. Prohibited Conduct

You agree not to:

(a) Use the Services to harass, abuse, stalk, or threaten other users.
(b) Upload or share content that is unlawful, defamatory, obscene, or otherwise objectionable.
(c) Attempt to access other users’ Private Memory Data through any means.
(d) Use automated tools, bots, scrapers, or similar technologies to access the Services without authorization.
(e) Manipulate the Echo Economy, including creating multiple accounts or engaging in fraudulent transactions.
(f) Impersonate another person or entity, or misrepresent your identity or affiliation.
(g) Reverse engineer, decompile, or attempt to extract the source code of the Services.
(h) Use the Services for any purpose that violates applicable law.
(i) Attempt to manipulate or exploit the Memory Matching algorithms for purposes other than genuine social connection.
(j) Attempt to identify or re-identify individuals associated with de-identified data or Unclaimed Pre-Built Profiles.

14. Disclaimers and Limitation of Liability

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

IDITOR INC. DOES NOT WARRANT THAT: (a) the Services will be uninterrupted, secure, or error-free; (b) the Echo Agent’s responses will be accurate, complete, or appropriate; (c) Memory Matching will result in meaningful connections; or (d) Public Memory Data will remain fully anonymous or unattributable.

THE ECHO AGENT IS NOT A SUBSTITUTE FOR PROFESSIONAL MENTAL HEALTH SERVICES. If you are experiencing a mental health crisis, please contact emergency services or a licensed mental health professional.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IDITOR INC.’S TOTAL LIABILITY TO YOU FOR ALL CLAIMS ARISING FROM OR RELATED TO THESE TERMS OR THE SERVICES SHALL NOT EXCEED THE GREATER OF: (a) THE AMOUNT YOU PAID TO IDITOR INC. IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (b) ONE HUNDRED DOLLARS ($100).

15. Indemnification

You agree to indemnify, defend, and hold harmless Iditor Inc. and its officers, directors, employees, and agents from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys’ fees) arising out of or related to: (a) your use of the Services; (b) your User Content; (c) your violation of these Terms; or (d) your violation of any rights of another person or entity.

16. Dispute Resolution and Arbitration

PLEASE READ THIS SECTION CAREFULLY. IT AFFECTS YOUR LEGAL RIGHTS, INCLUDING YOUR RIGHT TO FILE A LAWSUIT IN COURT.

Binding Arbitration. Any dispute, claim, or controversy arising out of or relating to these Terms or the Services shall be resolved by binding individual arbitration administered by JAMS under its Comprehensive Arbitration Rules. The arbitration shall take place in San Francisco, California, unless otherwise agreed by the parties.

Class Action Waiver. YOU AND IDITOR INC. AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE PROCEEDING.

Exceptions. Notwithstanding the above, either party may seek injunctive or other equitable relief in any court of competent jurisdiction to prevent the actual or threatened infringement of intellectual property rights.

Governing Law. These Terms shall be governed by and construed in accordance with the laws of the State of Delaware, without regard to its conflict of laws provisions. For any disputes not subject to arbitration, the exclusive jurisdiction shall be the state and federal courts located in San Francisco, California.

17. U.S. State Privacy Rights (CCPA and State Privacy Laws)

17.1 California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020:

Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your information.
Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
Right to Correct: You have the right to request correction of inaccurate personal information.
Right to Opt-Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information. Iditor Inc. does not sell personal information for monetary consideration.
Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of your Sensitive Personal Information to what is necessary to perform the Services.

To exercise these rights, contact us at echo@iditor.com. We will verify your identity before processing any request and will respond within 45 days as required by law.

17.2 Illinois Residents

If you are an Illinois resident, your rights regarding biometric information are described in Section 10.1. Iditor Inc. does not currently collect biometric identifiers or biometric information as defined under the Illinois Biometric Information Privacy Act (BIPA) from end users.

17.3 Other State Privacy Laws

Residents of Colorado, Connecticut, Montana, Oregon, Texas, Utah, Virginia, and other states with enacted consumer privacy laws may have additional rights as provided by applicable state law, including rights of access, deletion, correction, portability, and the right to opt out of targeted advertising. To exercise any state privacy rights, contact us at echo@iditor.com.

18. European Union and United Kingdom Rights (GDPR)

If you are located in the European Union, United Kingdom, or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including:

(a) Right of access to your personal data.
(b) Right to rectification of inaccurate personal data.
(c) Right to erasure of your personal data.
(d) Right to restrict processing of your personal data.
(e) Right to data portability.
(f) Right to object to processing of your personal data.
(g) Right to withdraw consent at any time.
(h) Right to lodge a complaint with a supervisory authority.

Our lawful bases for processing include: contractual necessity (to provide the Services), legitimate interests (to improve and secure the Services), and consent (for optional data processing such as Public Memory sharing and Pre-Built Profile creation). To exercise your GDPR rights, contact us at echo@iditor.com.

19. Termination

You may terminate your account at any time by contacting us at echo@iditor.com or through the account settings within the Services.

We may suspend or terminate your account at any time for violation of these Terms, with or without notice. Upon termination:

(a) Your right to use the Services will immediately cease.
(b) Your Private Memory Data will be deleted or de-identified within 90 days.
(c) Public Memory Data that has already been accessed by other users may persist in those users’ interaction histories as described in Section 5.3.
(d) Your Echoes balance will be forfeited.
(e) Sections 4, 5, 6, 9, 12, 14, 15, and 16 shall survive termination.

20. Modifications to Terms

We may modify these Terms at any time. We will provide notice of material changes through the Services, by email, or by other reasonable means at least 30 days before the changes take effect. Your continued use of the Services after the effective date of any modifications constitutes acceptance of the updated Terms.

If you do not agree to the modified Terms, you must stop using the Services and may request account deletion.

21. General Provisions

Severability. If any provision of these Terms is held to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.

Entire Agreement. These Terms, together with our Privacy Policy, constitute the entire agreement between you and Iditor Inc. regarding the Services and supersede all prior agreements and understandings.

Waiver. The failure of Iditor Inc. to enforce any right or provision of these Terms shall not be deemed a waiver of such right or provision.

Assignment. You may not assign or transfer your rights under these Terms without our prior written consent. Iditor Inc. may assign its rights and obligations under these Terms without restriction.

Force Majeure. Iditor Inc. shall not be liable for any failure or delay in performing its obligations under these Terms due to circumstances beyond its reasonable control.

22. Contact Information

If you have questions about these Terms, please contact us at:

Iditor Inc.
A Delaware Corporation
Headquartered in San Francisco, California
Email: echo@iditor.com

For privacy-related inquiries or to exercise your rights under applicable data protection laws, please contact us at the email address above with the subject line "Privacy Request."

For Pre-Built Profile deletion requests, please contact us at the email address above with the subject line "Pre-Built Profile Deletion Request" and include sufficient information to verify your identity.

By using the Services, you acknowledge that you have read, understood, and agree to be bound by these Terms of Use.

Table of Contents