Privacy Policy

1. Who We Are and Our Role

liv acts as a data controller (or the equivalent term under applicable law, such as a "business" under U.S. state privacy laws) in respect of the personal data it collects and processes in connection with your use of the Service, including data processed via connected third-party services such as reading your calendar or sending messages through a connected platform.

The Service is offered only to individuals for their own use. We do not currently offer the Service to businesses or other organizations, and no employer or organization controls your liv account. If you choose to connect a work calendar, email account, or other work-related service, you are responsible for making sure your employer's or organization's policies allow you to do so.

Contact: contact@liv.day

2. Who This Policy Applies To

This policy applies to three types of individuals whose personal data we process: liv Users, Guests, and Third-Party Individuals.

liv Users: A liv User is anyone who creates a liv account, either by explicitly signing up to the Service or by connecting their calendar. From that moment, you are a liv User and this policy governs how we handle your data, including all categories of personal data described in section 3.

Guests: A Guest is an individual who does not have a liv account and whose details a liv User provides to liv so that liv can schedule a meeting with that individual or perform any other task available through the Service. If you interact with liv directly as a Guest (for example, by using a liv scheduling page or accepting our Terms when confirming a meeting), this policy applies to that interaction.

Third-Party Individuals: A Third-Party Individual is an individual who is neither a liv User nor a Guest, but whose personal data is included in the accounts, calendars, contacts, communications, or other sources that a liv User has permitted liv to access (for example, if your name and email address appear in a liv User's calendar invitation).

Important: A liv User may not share with, provide to, or otherwise make available to liv any personal data of Guests or Third-Party Individuals, or grant liv access to such data, unless the liv User has the necessary rights, consents, and permissions to do so.

3. Personal Data We Collect

The Service is a time management tool that connects to your calendar, contacts, communications, and tasks in accordance with permissions you grant to liv. We collect data from any source or channel you connect to the Service, and any information you share with us directly. The specific sources may vary (for example, Google (such as Gmail, Google Calendar, and Google Contacts), Microsoft (such as Outlook and Microsoft 365), iCloud, WhatsApp, Signal, iMessage, SMS, Slack, Teams, or any other services you choose to connect), but the principles governing how we handle that data are consistent across all of them. The Service only accesses the applications, accounts, and environments to which you have expressly granted access permissions. You can review and revoke these permissions at any time in the liv App or in the settings of the relevant provider. The categories of personal data we collect about liv Users are described below.

• Identity and Account Information, which includes information that identifies you or relates to your account, such as your name, email address, phone number (which we may require to verify your account, for example by one-time passcode), profile photo, account credentials and access tokens for the services you connect, and any other identifying information you choose to share.
• Calendar and Scheduling Data, which includes information about your calendars, events, and availability, such as event details and participants, connected calendars, scheduling preferences and rules, time zones, and travel or other details that appear in your connected calendars or that you or other users share with liv.
• Contacts and Connections, which include information about the people you interact with, such as contact details from any contacts source you connect and relationships inferred from your data over time.
• Communications and Messages, which include content and metadata of communications you exchange with liv or that are available through the email, messaging, or other communication channels you connect, such as text, voice messages and their transcriptions, images, files, and other media, and related metadata (such as sender, recipients, timestamps, and subject), to the extent needed to provide the Service. This includes messages you send to or receive from liv by email, SMS/text, WhatsApp, or any other channel liv supports (together with the phone numbers used), and messages liv sends, receives, or relays on your behalf to and from other people, including other liv users and non-users.
• Tasks, Reminders, and Automations, which include tasks, reminders, notes, automations, and other information you ask liv to track, remember, or act on, together with related details.
• Actions Taken on Your Behalf, which include records of actions liv takes on your behalf, such as what was done, when, and the instruction or setting it was based on.
• Location and Geography, which includes location information that you provide to us or that is available through the Service or the sources you connect, such as addresses, place names, and approximate locations (including locations derived from your meetings, events, or IP address) (for example, to estimate travel time).
• Learned Preferences, which include preferences, patterns, and rules, whether inferred from your use of the Service and connected sources or set by you, such as scheduling habits and settings.
• Cookies, SDKs, and Session Tracking, which include session cookies and tokens used to keep you logged in and maintain your session state, and analytics data used to understand how the product is being used and to improve the user experience. These technologies may be provided by us or by third-party analytics processors that help us understand how the product is used so we can make it better . We do not use them for advertising or to track you across third-party websites or apps. In our mobile apps, we may use software development kits (SDKs) and similar technologies that serve the same functions. You can manage cookies through your browser settings and limit certain tracking through your device settings; blocking essential cookies or session tokens may prevent the Service from working properly.
• Technical and Usage Data, which includes information about your device and how you use the Service, such as IP address, device and browser information, operating system and app version, device identifiers, usage activity, and diagnostic data (such as crash reports and error logs).

Personal Data of Guests: For Guests, we collect contact details (such as name, email address, and phone number) and scheduling information (such as meeting times, availability, time zone, and responses to invitations), and use them for the purposes described in section 5, including to schedule meetings and perform other tasks requested by the liv User, including sending the Guest communications relating to the meeting (such as invitations, confirmations, and scheduling updates).

Personal Data of Third-Party Individuals: When you connect third-party accounts to the Service (including calendars, contacts, and messaging platforms), liv will collect and process personal data relating to Third-Party Individuals (as defined in section 2) contained in those accounts, such as names, contact details, and other information about your contacts, meeting attendees, and message correspondents. We process this data as part of your data for the purposes described in section 5. These individuals have not directly interacted with liv or accepted this Privacy Policy. By connecting such accounts and using the Service's features, you represent and warrant that you have provided any notices required under applicable law and obtained, and will maintain, all necessary consents from each such individual to share their personal data with liv and for liv to process it as described in this Policy, including personal data contained in your contacts, emails, calendars, messages, and any other information you make available through the Service. You are responsible for ensuring that your use of liv in relation to third-party personal data complies with applicable law. If you are an individual whose personal data has been shared with liv by a user and you have questions or wish to exercise your rights, please contact us using the details in section 15.

Sensitive Personal Data: You should refrain from sharing sensitive personal data with liv. liv does not knowingly collect, process, or retain sensitive personal data, as that term is defined under the laws applicable to you, including without limitation special categories of personal data under the GDPR, Protected Health Information under HIPAA, payment card information, biometric data, or any other category of data subject to heightened protection under applicable law. If you nevertheless submit sensitive personal data, you do so at your own risk and, to the maximum extent permitted by applicable law, liv assumes no responsibility or liability in connection with such data.

Deidentified and Aggregated Data: We may deidentify or aggregate personal data so that it no longer reasonably identifies any individual, and use and share it for any lawful purpose. We will not attempt to re-identify such data, except as permitted by applicable law.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, the United Kingdom, Switzerland, and other jurisdictions with similar requirements (including under the EU General Data Protection Regulation ("GDPR") and the UK GDPR), we rely on the following legal bases to process your personal data:

• Contract performance: processing necessary to provide the Service you have signed up for, including scheduling, calendar management, and any features you activate.
• Legitimate interests: processing necessary for our legitimate business interests, including improving the Service, preventing abuse, and ensuring security, where those interests are not overridden by your rights.
• Consent: where required by applicable law, we rely on your consent, which you may withdraw at any time through your account or device settings, by disconnecting the relevant integration, or by contacting us.
• Legal obligation: processing required to comply with applicable law.

5. How We Use Your Data

• To Provide the Service. We use your data to provide the Service and carry out the actions you request or authorize, such as scheduling meetings, checking your availability, and sending meeting communications on your behalf, responding to messages you send to liv, and sending, receiving, and relaying messages on your behalf to and from other people (including other liv users and non-users) by email, SMS/text, WhatsApp, or other supported channels. Text message opt-in data and consent are not shared with third parties for their marketing purposes.
• To Learn Your Preferences. We use your data to learn your preferences and personalize the Service, such as applying patterns we learn from your use of the Service and rules you set.
• To Operate and Improve the Service. We use your data to operate, maintain, secure, and improve the Service, such as troubleshooting errors, analyzing how the Service is used, reviewing interactions to improve quality, and developing new features.
• To Comply with Law and Protect liv and Others. We may use your data as we believe necessary or appropriate to comply with applicable laws, regulations, and legal process, such as responding to subpoenas, court orders, or lawful requests from law enforcement, regulators, or other public authorities; to enforce our Terms and other agreements; to detect, prevent, and investigate fraud, abuse, security incidents, and other harmful or unlawful activity; to establish, exercise, or defend legal claims; and to protect the rights, property, safety, and security of liv, our users, and others.
• To Communicate With You. We use your data to communicate with you about the Service by email, SMS/text message, WhatsApp or other messaging services, push and in-app notifications, or other channels, such as sending service, account, verification, and scheduling notifications, reminders, and updates about the Service or this Policy. We send marketing messages only where you have separately opted in. You can opt out of text messages at any time by replying STOP, or reply HELP for help. See also the "SMS Messaging" section (section 11.6) of the Terms.

6. Who We Share Data With

We do not sell your personal data. We may disclose personal data to the following categories of third parties, subject to this Privacy Policy:

• Service providers who help us operate and provide the Service, such as for hosting, infrastructure, communications delivery, security, and analytics. Our service providers are bound by written agreements that restrict their use of personal data to providing services to us.
• Third-party AI providers who help support the Service. We do not use your personal data to train third-party AI models, and our AI providers are contractually prohibited from using it to train their models. They may retain inputs for a limited period for abuse and security monitoring in accordance with their terms.
• Third parties the Service interacts with on your behalf in connection with providing the Service to you, such as meeting participants who receive invitations and other people, including other liv users and non-users, with whom liv exchanges messages on your behalf.
• Third parties you direct us to share with or whose services you connect, such as calendar, email, and messaging providers. liv's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Our affiliates and other companies within our corporate group.
• Third parties in connection with, or in anticipation of, a business transaction such as a merger, acquisition, financing, reorganization, or sale of assets.
• Professional advisors, such as lawyers, auditors, accountants, and insurers.

We may also disclose personal data for legal and security reasons, including to comply with applicable law and legal process, to cooperate with law enforcement and regulatory inquiries, to detect and prevent fraud, abuse, and other harmful or unlawful activity, to establish, exercise, or defend legal claims, and to protect the rights, property, safety, and security of liv, our users, and others.

The Service may contain links to, or integrations with, third-party websites and services that we do not control. We are not responsible for their privacy practices, and we encourage you to review their privacy policies.

7. International Data Transfers

liv operates in the United States and Israel and serves users globally, including in the European Economic Area. Your data may be stored and processed in the United States or in other jurisdictions where our service providers operate. These jurisdictions may have data protection laws that differ from those in your country.

Where we transfer personal data from the EEA or UK to countries not recognized as providing an adequate level of protection, we take steps to ensure appropriate safeguards are in place, such as the European Commission's standard contractual clauses, the UK International Data Transfer Addendum, or other lawful transfer mechanisms. You may request a copy of the relevant safeguards by contacting us. If you have questions about cross-border transfers of your data, contact us at contact@liv.day.

8. Data Retention

Your data is retained for as long as your account is active. When you close your account, we will delete your personal data without undue delay, except as described below. Logs, audit records, and residual system artifacts may be retained for as long as reasonably necessary for debugging, dispute resolution, fraud and abuse prevention, enforcement of the Terms, and legal compliance purposes. During the beta phase, the Service is not a production-grade system and data retention practices may be less predictable than in a mature service. Disconnecting an integration stops liv from accessing new data from that service but does not automatically delete data previously collected from it; you can request deletion at any time. We may retain deidentified or aggregated information, and information we are required to keep by law.

Because the Service is an early-stage product, data may also be lost or reset due to development activity or system failures. We cannot guarantee data continuity during this phase.

9. Security

• Credentials and access tokens stored encrypted
• All data transmitted over TLS (HTTPS)
• Access to production data restricted
• Limited access: we aim to request only the permissions reasonably needed to provide the Service

The Service is an early-stage product and security risks are higher than in a mature service. We apply security measures that we consider reasonable and appropriate given the current stage of the Service, but we cannot guarantee the security of your data.

Because the Service can take actions on your behalf, such as sending invitations or messages, it may occasionally take unintended actions or act on incorrect information, including where a message or calendar invitation you receive contains misleading instructions designed to manipulate AI tools. We encourage you to grant only the permissions you need, review actions taken on your behalf, and contact us promptly if you notice anything unexpected.

10. Data Breach Notification

In the event of a data breach that is likely to result in risk to your rights or freedoms, we will notify affected users and the relevant authorities without undue delay, to the extent required by applicable law. We may notify you by email to the address associated with your account, by in-app notice, or by other means permitted by law.

11. Your Rights

Depending on the laws applicable in your place of residence, you may have some or all of the following rights with respect to your personal data. Not all rights apply in all jurisdictions, and the scope and conditions of each right may vary. To exercise any of them, send an email to contact@liv.day.

• Access: request a copy of the personal data we hold about you;
• Correction: ask us to correct inaccurate or incomplete data;
• Deletion: request that your account and all associated personal data be deleted;
• Portability: request your data in a structured, commonly used, machine-readable format;
• Restriction: ask us to restrict processing of your data in certain circumstances;
• Objection: object to our processing of your data where we rely on legitimate interests as the legal basis;
• Withdrawal of consent: where we rely on consent as the legal basis for processing, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal;
• Automated decision-making: not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you (liv does not currently make such decisions); and/or
• Complaint: lodge a complaint with your local data protection authority, although we would appreciate the chance to address your concerns first.

We may need to verify your identity before fulfilling a request, and may decline requests where permitted by law. We will respond to all requests within the timeframe required by applicable law.

12. Additional Information for U.S. Residents

If you live in a U.S. state with a comprehensive consumer privacy law, such as California (under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA")), Colorado, Connecticut, Virginia, Utah, Texas, Oregon, or another state with a similar law, the following applies in addition to the rest of this Policy.

Categories of personal information. In the past 12 months, we have collected the following categories of personal information, as described in section 3: identifiers (such as name, email address, phone number, and IP address); customer records; commercial information (such as subscription status); internet or other electronic network activity information; approximate geolocation; audio and electronic information (such as voice messages); inferences used to build your preferences; and, to the extent you make them available, the contents of your email, messages, and other communications, which may be considered sensitive personal information under some state laws. We collect this information from you, your devices, and the services you connect, for the business purposes described in section 5, and disclose it to the categories of recipients described in section 6. We retain each category for the periods described in section 8.

No sale, sharing, or targeted advertising. We do not sell personal information, "share" it for cross-context behavioral advertising, or process it for targeted advertising, and we have not done so in the past 12 months. We do not knowingly sell or share the personal information of consumers under 16. We use sensitive personal information only for purposes permitted by applicable law, such as providing the service you request, and not to infer characteristics about you.

Your rights. Subject to applicable law, you may have the right to know or access the personal information we have collected about you; to correct or delete it; to obtain a portable copy; to opt out of sale, sharing, targeted advertising, and certain profiling; and to limit the use of sensitive personal information. We will not discriminate against you for exercising any of these rights.

Authorized agents and appeals. You may designate an authorized agent to submit a request on your behalf; we may require proof of the agent's authority and verification of your identity. If we decline your request, you may appeal by emailing us with the subject line "Privacy Appeal," and we will respond within the period required by law. If your appeal is denied, you may contact your state attorney general.

California "Shine the Light." California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

13. Children

The Service is not intended for users under the age of 18. By creating an account, you represent that you are at least 18 years old. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a user under 18 has provided us with personal data, we will take prompt steps to delete that data. If you believe a minor has created an account, please contact us at contact@liv.day.

14. Changes to This Policy

We may update this Privacy Policy from time to time and will revise the "Last updated" date above. We will notify you of material changes by email, in-app notice, or other appropriate means before they take effect. Where required by applicable law, we will seek your consent to material changes. Otherwise, continued use after the effective date constitutes acceptance.