Privacy policy

1. Controller and contact details

Next Technologies, Inc., operator of Time Machine / Máquina del Tiempo, is responsible for the processing it determines to provide the service. Contact address: 1616 W Cape Coral Pkwy, Suite 102, PMB 1004, Cape Coral, FL 33993, United States. Contact privacy@timemachinepro.ai for privacy, access, correction, deletion, permission withdrawal and data questions; support@timemachinepro.ai for service support and complaints.

This policy covers timemachinepro.ai, maquinadeltiempo.ai and the Time Machine app/PWA. Account, echo and Presence provisions concern app features. Browsing, forms and website TIM follow their specific purposes; visiting the website does not authorize training or activate app commercial permissions.

Personal echoes, private Presence conversations, Reportero, website TIM and app/PWA TIM have different purposes and permissions. AI involvement alone does not change a record's privacy.

Next Technologies, Inc., a Delaware corporation in the United States, is responsible for the processing described in this policy and operates Time Machine / Máquina del Tiempo. Mailing address: 1616 W Cape Coral Pkwy, Suite 102, PMB 1004, Cape Coral, FL 33993, United States. General contact: info@timemachinepro.ai; telephone: +1 (469) 984-8798. Privacy contact: privacy@timemachinepro.ai.

This policy covers maquinadeltiempo.ai, timemachinepro.ai and their Spanish, English, and Portuguese versions, together with the private Icon processing described here when enabled for your account. Feature notices and applicable agreements explain their scope; they do not authorize uses incompatible with the information provided.

The family experience, conversational Presence, custodianship, and other future features are not activated by this policy. Before new processing is introduced, its scope will be disclosed and the appropriate permissions requested.

• Contact us about privacy
• Read the terms of use

2. Information processed to provide the service

We process account and contact data; acceptance and permission evidence; Orbit relationships, recipients and Custodians; subscription and transaction status; echoes and metadata; conversations needed for features used; support requests; and technical access, error and security data.

Website browsing, forms and website TIM involve the inquiry and contact details you provide, plus technical information such as IP address, browser, device and logs needed to deliver pages, assist you and protect the service. Storage and measurement technologies are explained in section 12.

Complete payment details are entered through the identified processor or store. Time receives information needed to recognize payment, manage subscriptions and handle issues. Identity documents or biometrics are requested only in procedures requiring them, with specific information.

Operational data may support service delivery and protection, permission records, support and technical usage measurement. Activity reports for management and support exclude private echo and conversation content.

We receive information you submit directly and technical records associated with your interaction. If someone represents you, we may also receive information from them about you and their authority to represent you.

• Waitlist: email address, preferred platform, language, source page and domain, registration date, and a record of authorization for the launch notice.
• Partnership inquiries: name, professional email, organization, sector, message, language, and a record of permission to contact you.
• Icon applications: applicant name and relationship, email, phone, country, Icon name, identification number, category, proposed edition description, contact language, authorization declaration, and optional preference for updates. This information is sent to Salesforce to manage the application record.
• Operation and security: information such as IP address, browser, device, time, errors, and abuse-prevention signals that hosting and security services may receive.
• Fields marked as required are needed to process that form; you may browse without submitting it. Do not enter passwords, payment details, document copies, or intimate stories in free-text fields. The Icon form requests an identification number in its designated field, not a document upload.

3. Echoes and personal vault

Personal echoes, recordings and transcripts are processed only for authorized preservation, organization, delivery and Presence operation. They are excluded from consumption-data mining, advertising, commercial profiles and training general models of Time or third parties.

Access is limited to authorized people and necessary technical processing. Ordinary human assistance requires your specific sharing or authorization of relevant material. Legally required action or a substantiated complaint is limited to necessary content and does not permit general vault exploration.

Commercial Icon participation requires its own contract and permissions and remains separate from the same person's private vault.

4. Traveler conversations with a Presence

History is private to the Traveler's conversation: the Creator and Custodian cannot view it. It is not a commercial source or general-model training data and does not modify original echoes.

The Traveler may delete individual conversations or all history. While the particular Presence subscription is active, history remains until the Traveler deletes it or closes the account, without automatic age-based deletion.

When that subscription becomes inactive, messages already six months old or older are deleted. While inactivity continues, remaining messages are deleted on reaching six months. Age is measured per message and applied per Presence. Reactivation preserves only messages still existing and does not restore deleted messages.

Deleting history does not affect a Creator's echoes, permissions or originals. Copies expressly shared with support follow support-specific retention and the narrow legal exceptions in this policy.

5. Reportero and the two TIM environments

Reportero operates inside the app. Assistance and interviews do not automatically publish answers or turn them into echoes. Commercial use may consider only preferences from authorized conversations outside the vault, within your chosen optional permissions.

When an interview answer becomes an echo, both the original answer and preferences derived from it are excluded from commercial use and removed from the commercial profile. A parallel transcript or copy outside the vault cannot circumvent this protection.

Website TIM guides users about the product. Its conversations are not used for model training or consumption-data mining. It is separate from app/PWA TIM.

Time may use authorized app/PWA TIM conversations to train and improve its own models and analyze consumption preferences. Permissions are presented before app use and separately from terms acceptance. Private echoes, the vault and private Presence conversations are excluded.

Authorized app-TIM training copies are retained for no more than six months from the conversation date and then deleted. Copying or moving them into another dataset does not restart that period.

Withdrawing training permission immediately stops use for new training and triggers deletion of retained training copies without waiting for six months. It does not itself delete echoes or service history, which follow their own rules.

Deleting copies does not itself reverse completed training. Requests about personal data that may remain in a model are assessed and handled under applicable law. This does not limit rights or permit retention of copies that must be deleted.

Permission to improve Time's models does not independently authorize providers to train their own models or exploit the data for their purposes. Additional purposes require prior information and the applicable permission.

Records of inquiries handled by TIM, follow-up email and authorized context remain for up to six months after resolution. Approved, generalized questions and answers without identifying information may remain as service guidance knowledge. This does not authorize training with website TIM conversations.

6. Commercial preferences and consent

Before app/PWA use, two separate optional commercial choices are offered: personalize offers within Time Machine, and share an authorized preference profile with identified group companies or partners. App-TIM training has a separate permission. Declining or withdrawing these permissions does not prevent echo creation or Reportero use within the purchased service.

Permitted preferences include general interests such as sports, music and consumption tastes. Health information, minors' data and financial hardship are excluded. Preferences are not extracted from echoes, their audio or transcripts, or private Presence conversations.

Religion and political preferences require a specific permission solely to help find similar Icons within Time Machine. That permission is revocable and does not allow sharing those data with partners.

Each permission may be withdrawn, stopping future covered uses or transfers. When both commercial permissions are off, the previously authorized profile remains inactive for up to one year, without use or new transfers, and is then deleted. Statutory deletion and restriction rights remain available.

Recipients and purposes must be clearly identified before preference-sharing authorization. Echoes or complete conversations cannot be shared as a substitute for the profile. A recipient's independent uses must be disclosed and comply with authorized conditions.

7. Providers and transfers

Providers support infrastructure, storage, transcription, AI, voice, payments, verification and support according to enabled features. Each receives only what its task needs and follows instructions and protection measures compatible with the service.

Google Cloud and Vertex AI provide infrastructure and AI processing and may receive account data, content and requests needed for the feature, subject to this policy's permissions and exclusions. ElevenLabs provides voice services and may process the text, recordings and voice data needed for the authorized feature; voice preparation or generation does not permit advertising or general training with private echoes.

Stripe processes payments and subscriptions and receives necessary transaction data. DocuSign supports contract signing with relevant identification, contact, signature and document data. Contracting either service does not grant general vault access.

Salesforce supports relationship management and support using necessary contact, account, operational activity and case data. Usage reports exclude private content; shared support excerpts remain limited to authorized material and section 8's retention.

Processing may occur in the United States and other countries where contracted providers operate, with applicable safeguards and transfer information. Exclusive residence in any country is not promised unless expressly offered. Technical providers are distinct from commercial partners; operating the app does not authorize selling data, advertising or independent training outside applicable authorization.

Private echoes and private Presence conversations are not sold or shared with partners for commercial purposes. Optional preference profiles follow section 6. Operational access is limited to authorized people and providers needing data for their task.

• Authorized staff: application handling, verification, support, and security, according to their responsibilities. Support access to private content must have an applicable need and authorization.
• Salesforce: receives Icon application fields and manages the record and operational statuses. Private Vault recordings are not part of that form submission.
• DocuSign: supports signature of the Icon Agreement and biometric identity verification before access. The process may involve identification data, documents, and signature and verification evidence, under its notices and the applicable agreement. These administrative data do not become public Presence content.
• ElevenLabs: the planned provider for preparing and operating the authorized voice through its integration with Time Machine. Only materials and data needed for that scope may be sent, with the Icon’s prior permission and under the Agreement and specifically negotiated provider terms. A technical API response does not replace the Icon’s approval recorded in the app.
• Hosting, database, and communications: the website uses Sites / Cloudflare infrastructure. The pilot uses Google Cloud services for active private features. Operational notifications may include necessary application information.
• Google: participates in reCAPTCHA, analytics if accepted, authentication if used, and enabled AI assistance. These are separate processing purposes.
• Recipients you choose: only through enabled access or publication features and within your authorization. A partner, employer, club, or sponsor does not obtain access to private memories by funding or facilitating the experience.
• Authorities, advisers, or parties to a business transaction: only where there is a legal obligation or legitimate need, with the applicable scope and safeguards. A reorganization does not itself grant new permissions to exploit your identity or publish stories.

8. Support and human access

For a private Presence conversation, human support may review only excerpts the Traveler expressly shares for that case. Authorization identifies the case and material and does not open the remaining history, vault or other Travelers' conversations.

Copies remain during resolution and are deleted when the case is resolved. The residual administrative record contains only case number, dates and outcome, without private conversation content. It is deleted within forty-eight hours after support closes the case satisfactorily.

This deletion concerns support copies and records, not the Traveler's own history or right to delete it. Independent payment and consent records follow their own purposes and duties and must not conceal copies of private support content.

9. Retention and deletion

Retention depends on data type. Commercial inactivity, account closure, permission withdrawal and message deletion are different events. A valid privacy request may require earlier action.

Deletion extends to copies controlled by Time and the relevant providers. Backups must not reintroduce deleted content into ordinary use. Time verifies propagation and keeps only legally necessary minimal evidence of completion.

Only a specific item may be exempted where a law, valid order or legal evidence-preservation duty requires it. Purpose, scope and duration are documented; material stays isolated, access-restricted and unavailable for commercial use or training, then is deleted when the duty ends. A generic possibility of a claim does not justify keeping an entire history.

There is no single retention period for all data. For applications and inquiries, we consider the time needed to respond and follow up; for the waitlist, the notice's purpose and your authorization; for accounts and materials, the requested feature, current permissions, and applicable agreement. Contract, security, or dispute records may need to be retained for a documented legal obligation or need.

You may unsubscribe from messages, withdraw a permission, or request deletion; these are different actions. Withdrawing consent does not affect earlier lawful processing. It also does not automatically remove a contract or records that must legally be retained.

A deletion request requires determining the scope across existing originals, copies, and derived results, including transcripts, indexes, or associated models where relevant. If data needs to be retained, we will explain why and to what extent. Backups, where they exist, may follow a different technical cycle and should not be used to reactivate a withdrawn use.

We do not promise instant deletion from every system or an unconfirmed uniform technical deadline. You may request the status and scope of your request. Where there is no self-service control, use the privacy contact.

• Inactive echoes and vault: Preserved. At ten years, infrastructure may change to lower consumption; this is not a deletion trigger.
• Active Presence history: Kept while that subscription is active unless deleted by the Traveler or the account is closed.
• Inactive Presence history: Messages aged six months or more are deleted on inactivity; others are deleted on reaching six months while inactivity continues.
• Support excerpts: During case resolution; deleted on resolution.
• Support administrative record: No more than forty-eight hours after satisfactory closure by support.
• TIM inquiry records: Up to six months after resolution; approved non-identifying general knowledge may remain. Website TIM is not used for training.
• App-TIM training copies: Up to six months from the conversation. Withdrawal immediately stops new-training use and deletes retained copies.
• Commercial profile with both permissions off: Up to one year inactive, without use or new transfers; then deletion.
• Archive after voluntary Creator closure: Up to twelve months after effective closure, with no Presence operation, unless expressly reactivated or validly deleted earlier.
• Purchased text-to-speech balance: Remains while the account exists; use requires an active subscription to the Presence.
• Permission and transaction evidence: Only for the contractual purpose or applicable legal period; does not extend private support-content retention.

10. User rights and control

Depending on applicable law, you may request access, correction, deletion, a copy or portability, object to or restrict processing, and withdraw consent using app controls or privacy@timemachinepro.ai. You may also complain to the competent authority.

Time verifies identity proportionately and explains its response or limitation within the legal deadline. Rights in your own data do not grant access to another vault, Traveler conversation or unauthorized information.

Withdrawal affects future processing covered by that permission. It does not make valid earlier processing unlawful or limit statutory rights regarding remaining data. Commercial permissions may be withdrawn without giving up the basic purchased service.

Depending on applicable law, you may request access to and a copy of your data, correction, updating, deletion, portability, restriction of or objection to certain processing, and withdrawal of consent. You may also ask where your data came from and with whom it is shared.

Email privacy@timemachinepro.ai and identify the service and your request. Where possible, use the email associated with your data; if you no longer have access to it, we will help verify identity through an alternative method. We may request proportionate information to protect you without requiring unnecessary documents through an open channel.

We will respond within the applicable legal period and explain any exception, extension, inability to act, and complaint options. You may contact the competent authority, such as PRODHAB in Costa Rica, ANPD in Brazil, or the relevant data-protection authority in the European Economic Area, where their laws apply.

You can withdraw Time Machine’s authorization through your Google account controls. This does not itself erase data we already hold or necessarily close an active session; contact us to request deletion or help with access. Unsubscribing from updates also does not prevent necessary communications about an application or active service.

• Send a privacy request
• Manage Google account connections

11. Security and communications

Time applies reasonable security, access-control, backup and incident-response measures. Where an incident requires notification, it notifies affected users or authorities as required and explains relevant measures. Privacy commitments do not mean a system can never suffer an incident.

Necessary account, payment, security, permission and contractual messages are distinguished from promotions. Changes are notified in the app; new data uses requiring permission receive a specific request. Terms acceptance does not itself activate commercial choices.

We use technical and organizational measures intended to protect access and reduce unauthorized use, appropriate to the service and data. We do not claim that the system is invulnerable, that every feature uses end-to-end encryption, or that all local material has a remote copy.

Keep your access credentials secure, check save confirmations, and tell us if you suspect exposure or unauthorized access. If an incident requires notice to individuals or authorities, we will act under applicable obligations.

12. Cookies and storage technologies

Necessary cookies and similar technologies maintain sessions, remember requested choices, protect access and provide website/app features. Browser controls can manage storage; blocking necessary elements may prevent features from working.

Measurement or advertising technologies requiring consent activate only after consent. Before authorization, purposes, providers and duration of optional categories are available through privacy controls, where choices can be withdrawn. Terms acceptance is not consent to optional categories.

Technical page-usage measurement differs from using conversation content. It does not authorize model training or commercial-preference extraction from website TIM, or commercial analysis of private echoes.

We use browser storage to remember preferences and support the experience. Your analytics choice is saved in that browser; you may need to repeat it on another device, browser, or domain.

Google Analytics loads only if you choose to accept analytics. It may measure visited pages, interaction events, device information, and visit sources to help us understand and improve the website. Change your choice through “Privacy preferences.” Rejecting analytics allows you to keep browsing.

The Icon form uses Google's reCAPTCHA to detect abuse. When it runs, it may use the _GRECAPTCHA cookie and receive technical data and interaction signals needed for that assessment. It serves a purpose separate from Google Analytics. If verification prevents a valid application from being submitted, contact us for help.

You can manage cookies and storage in your browser. Blocking security or session mechanisms may prevent some features from working; rejecting analytics cookies should not do so. Google services also have their own notices.

Google Analytics uses _ga and _ga_* cookies to distinguish visits and measure interactions. Their configured expiration is two years from creation or update during a consented visit; browser limits may shorten it. They do not load before analytics acceptance. Withdraw through Privacy preferences.

The analytics choice remains in local storage until changed or browser data is cleared. An AI-tool referral signal is remembered only for the tab session to avoid duplicates and is sent as a provider name, not conversation text. Analytics consent is not permission for personalized advertising or training.

• Google Privacy Policy
• Google Terms of Service
• Google's reCAPTCHA information

13. Private Icon access data

When a private feature is enabled for you, the data needed for that feature is processed. A profile may include a public name, date of birth to verify adulthood, country, language, time zone, optional photo or biography, preferences, and acceptance records. Legal identity and contract information belongs to the verification record; completing a profile does not make that information public.

When you record or contribute materials, we process the audio, photographs, or text you choose, together with information such as the associated question, title, language, date, duration, and save status. Transcripts or other derived results relate only to processes that are enabled and authorized. An original and a generated result serve different purposes.

Google sign-in verifies your identity using the account identifier, email, and basic profile data authorized for that access. Time Machine does not receive your Google password. Authentication does not authorize reading Gmail, Drive, contacts, or calendars. Identity and session records are used to control access, not to publish your profile.

Some demonstrations or pilot features keep preferences and materials in your browser. These should not be confused with a confirmed remote upload: clearing browser data may delete local content. The available storage mode and save result are indicated in the experience you use.

14. Icon Echoes and public Presence

Joining as an Icon includes a signed contract and biometric identity verification through DocuSign before access to contribute materials is enabled. Initial acceptance in the app complements that process. The contract already governs the relationship during preparation; later approval of the Presence concludes the review of the result.

Echoes contributed and authorized in the Icon module are intended to build and operate the Icon’s public Presence and promote Time Machine within the scope of the Icon Agreement. This purpose differs from a private or family account. It does not make identity documents, contact details, signature evidence or original vault files public, or authorize endorsements of third-party products.

You review each Echo and choose to save it when satisfied. This includes the material under the contract and initial acceptance, without a new checkbox or signature for each file. Saving an Echo or receiving an automated audio review does not by itself authorize publication.

Authorization evidence must link the Icon, contract, Echoes and their versions, authorized uses, and the version, text and date of acceptance. Permission to prepare synthetic voice and translations must be obtained before those processes. Final approval must identify the Presence version, reviewed voice sample, features and languages, date and time, accepted text, and the voice reference used through the ElevenLabs integration.

Before a Presence is offered to end customers, the Icon must approve their complete Presence, including its voice, and Time Machine must separately authorize publication through an authorized person. Both decisions must be recorded in the app. This final approval and publication process is in preparation. An AI agent may support review but will not replace those decisions.

During preparation, you may review and delete your Echoes until you approve your complete Presence, including its voice. Finishing the questionnaire does not end that opportunity. Approval fixes the reviewed set submitted to Time Machine for publication authorization.

When the Presence is published for end customers, its supporting Echoes will be retained and protected in the vault, with no direct deletion from the app. Later requests for changes, withdrawal or deletion will be handled under the Agreement and this policy, including their effects on originals, derivatives and backups. This does not establish indefinite retention or remove applicable rights. The contractual contact for Icons is iconos@timemachinepro.ai.

• Ask about my participation as an Icon

15. Purposes and legal grounds

We use information for the purposes below, under the legal ground permitted or required by applicable law. Consent required by law is not replaced by generic acceptance of these terms.

• Responding to inquiries, evaluating applications, and managing invitations: your permission to contact you and, where legally applicable, pre-contractual steps you request.
• Providing a private feature, managing identity, permissions, support, or a signed agreement: the requested service and performance of the applicable agreement, together with necessary specific consents.
• Sending a requested notice or optional updates and measuring usage through analytics: your consent, which you may withdraw. Necessary messages about your application, security, or service are separate from advertising.
• Preventing fraud and abuse, handling incidents, and defending claims: applicable obligations and, where permitted, the legitimate interest in protecting users and systems, balanced against your rights.
• Meeting legal requirements and retaining evidence of contracts or permissions: the relevant obligation. We do not use this purpose as unlimited permission to retain content.

16. Stories, voice, and artificial intelligence

Private stories do not become public when you save them, complete a profile, or receive an invitation. Publication or commercial use requires specific authorization. Permission to store audio is also not consent to voice cloning, biometric recognition, or creation of a Presence.

Pilot AI assistance, when enabled, uses Gemini through Google Cloud / Vertex AI. A request sends the question and text you provide; the explicit AI review option sends the selected audio to return a suggestion. This assistance is not required to save your own work and does not certify your story. Other features, such as biography suggestions, must explain the materials they use before running.

Private echoes, transcripts and derivatives are excluded from general-model training. Optional training permission is limited to authorized app-TIM conversations under section 5; it excludes website TIM, Reportero, echoes and private Presence conversations. Processing material for a requested feature does not grant that permission.

AI suggestions can be inaccurate. You may review or discard them and request corrections. Approval of an Official Edition or publication rights requires human review; a technical audio assessment or automatic suggestion does not replace that decision.

Echoes in the Icon module are not used to train general-purpose models or for providers’ independent exploitation of the Icon’s voice or identity.

17. International processing

Next Technologies, Inc. is established in the United States, and providers may process information there and in other countries where they operate. Location depends on the service and its configuration; we do not claim that all data stays in your country.

Where a transfer is subject to specific legal requirements, it must have the required mechanism and safeguards. You may ask our privacy contact about recipients, countries, and safeguards applicable to your situation. Merely browsing or accepting these terms is not generic consent to any transfer.

18. Children and information about others

Accounts and private access are intended for people aged 18 or over. These forms do not offer a children's account or authorize cloning a minor's voice.

If your story mentions other people, limit their data to what is necessary and respect their rights. Avoid sharing intimate or health information or third-party documents without a valid basis. A family relationship does not by itself authorize every use.

If you find a child's data submitted without valid authorization, or materials about you improperly provided by someone else, write to us so we can review, restrict, or withdraw the relevant processing.

19. Changes to this policy

The current version and effective date appear at the beginning. Material changes to the processing of data belonging to users with an active relationship will be appropriately communicated. New uses requiring consent will not be applied merely by publishing a new version.

This policy describes processing; it does not replace feature-specific notices or authorizations for voice, likeness, publication, or future services. You may keep a copy for reference and send questions to privacy@timemachinepro.ai.