1. Introduction

MEVIVA SRL, with registered office at str. Voievodul Menumorut nr. 34, Cluj-Napoca, Cluj, Romania, 400480, having CIF (Fiscal ID) 51134961 and registration no. J2025002458002/17.01.2025

(hereinafter referred to as the "Controller", "Meviva" or "We"), acting as controller of personal data, presents through this Privacy Policy the manner in which we collect, use, store, and protect your personal data when you visit and use the meviva.ai website or the "Meviva" mobile application, in accordance with Regulation (EU) 2016/679 on the protection of personal data (hereinafter "GDPR") and Law no. 190/2018.

Contact: hello@meviva.ai.

2. What data we process

●        Order and account data: name, email address, phone number, delivery and billing address, order history, authentication data.

●        Payment data: processed directly by our payment processor. Meviva does not store full card data. We only receive payment confirmation and partial identifiers necessary for reconciliation and refunds.

●        Memories (user-uploaded content): the media files you attach to Meviva products. These may include images, voices, and other personal data belonging to you and third parties. We treat this content with heightened confidentiality (see Section 5).

●        Activation data: activation codes, purchase email address, product identifiers, activation status, number of memory changes.

●        Technical and App data: device type, operating system, App version, logs, identifiers necessary for the operation and security of the service; camera access is used exclusively for product identification.

●        Communications: messages exchanged with the support team; marketing preferences.

●        Cookies and similar technologies: as set out in the Cookie Policy.

3. Purposes and legal grounds

●        Sale and delivery of products, provision of the Memories Service (order processing, activation, storage and playback of Memories, customer support) – Art. 6(1)(b) – pre-contractual steps at the request of the data subject.

●        Responding to questions/requests submitted via the contact form – Art. 6(1)(f) – legitimate interest in responding to requests received.

●        Traffic analysis and Website improvement (analytics cookies) – Art. 6(1)(a) – your consent, expressed via the cookie banner.

●        Displaying personalized content/advertising (marketing cookies) – Art. 6(1)(a) – your consent.

●        Compliance with legal and tax obligations – Art. 6(1)(c) – legal obligation.

●        Fraud prevention and Website security – Art. 6(1)(f) – legitimate interest.

●        Marketing communications (newsletter, offers) – consent (Art. 6(1)(a) GDPR), which may be withdrawn at any time via the unsubscribe link or at hello@meviva.ai.

4. Data recipients and transfers

Your personal data may be shared, only to the extent necessary, with:

●        hosting service providers and technical maintenance providers for the Website;

●        web analytics and online advertising service providers (e.g. Google, Meta), which may involve a transfer of data outside the European Economic Area (EEA); in such cases, we ensure that the transfer is carried out under appropriate safeguards;

●        public authorities or authorized institutions, where there is a legal obligation to do so (for example, tax authorities, health authorities);

●        courier companies for the delivery of ordered products.

Meviva does not use the content of your Memories for advertising, profiling, or AI system training purposes, and does not sell personal data.

The Controller does not sell or rent your personal data to third parties for their marketing purposes.

5. Cookies and similar technologies

The Website uses cookies (small text files stored on your device) to ensure the proper functioning of the Website, for traffic analysis, and, where applicable, for displaying personalized content. The categories of cookies used are:

Cookie type	Purpose	Provider	Duration/legal basis
Strictly necessary	Basic operation of the Website (e.g. security, remembering session settings)	Own website	Session/legitimate interest – consent not required
Analytics/statistics	Measuring traffic and how the Website is used	Google Analytics	Up to 24 months – consent More information: https://support.google.com/analytics/answer/11397207 Google Privacy Policy: https://policies.google.com/privacy
Marketing/advertising	Personalizing ads and measuring campaign effectiveness	Meta Ads/Facebook Pixel	Up to 24 months – consent Meta cookie details: https://www.facebook.com/privacy/policies/cookies/ Meta Privacy Policy: https://www.facebook.com/privacy/policy/
Marketing/advertising	Marketing automation, forms, email communications, and understanding visitor interaction with the website and our campaigns	Mautic	The duration of these cookies may vary depending on the Mautic configuration and browser settings. Mautic details: https://docs.mautic.org/en/5.2/contacts/manage_contacts.html Mautic cookie policy: https://mautic.org/cookie-policy/

 

On your first visit to the Website, you will be asked for consent to the use of analytics and marketing cookies, via a cookie banner. You can withdraw your consent at any time or change your cookie preferences from your browser settings or from the preference management module available on the Website (if implemented). Disabling cookies that are not strictly necessary does not affect the basic operation of the Website but may limit certain functionalities.

6. Gifts and third-party data

When a product is given as a gift, the recipient receives the activation code together with a buyer identifier, without including any personal data. If you upload Memories containing other people (e.g. family members, children), you are responsible for having their consent or another legitimate basis for sending us that content. At the request of a data subject, we will review and, where required by law, remove such content.

7. Data security

The Controller implements appropriate technical and organizational measures (access restriction, password protection, security updates, encryption where applicable) to protect personal data against unauthorized access, loss, destruction, or accidental disclosure.

Memories uploaded through the meviva.ai website or the Meviva app are stored on servers located in Europe, with encryption in transit and at rest, access controls, and logging. Memories can only be played back through the App, by users who have activated the associated product. Meviva staff do not access the content of Memories except when strictly necessary for technical support requested by you, for legal obligations, or for investigating abuse.

8. Retention periods

●        Memories are stored for a minimum of 15 years. Storage may be extended for successive 5-year periods, for a fee displayed on the Site/App at the time of renewal. If storage is not renewed, the Memory may be deleted after a 30-day grace period, of which the Beneficiary will be notified in advance by email.

●        Order and billing data: 10 years, in accordance with tax legislation.

●        Account data: for the duration of the account's activity, then deleted or anonymized within 2 months of account closure.

●        Data collected through the contact form: 3 years.

●        Data collected for marketing purposes is retained for the period indicated in the table in Section 5, or until consent is withdrawn.

●        Data necessary for compliance with legal obligations (e.g. financial-accounting) is retained for the periods required by applicable legislation.

9. Your rights

As a data subject, you have, under the conditions and limits set out in the GDPR, the following rights:

●        Right of access – to obtain confirmation as to whether your data is being processed and, if so, access to it;

●        Right to rectification – to request correction of inaccurate data or completion of incomplete data;

●        Right to erasure ("right to be forgotten") – to request deletion of data, under the conditions set out in Art. 17 GDPR;

●        Right to restriction of processing – to request limitation of processing, in certain situations;

●        Right to data portability – to receive the data provided in a structured format and to request its transmission to another controller, where technically possible;

●        Right to object – to object, on grounds relating to your particular situation, to processing carried out on the basis of legitimate interest, as well as to object to processing for direct marketing purposes;

●        Right to withdraw consent – at any time, without affecting the lawfulness of processing carried out before withdrawal;

●        Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you;

●        Right to lodge a complaint with a supervisory authority.

You may exercise these rights by contacting us at hello@meviva.ai. We will respond to your request within one month of receipt at the latest, a period which may be extended by up to two further months depending on the complexity of the request, in which case you will be informed accordingly.

You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), headquartered at B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, or online at www.dataprotection.ro, or with the supervisory authority in your country of residence.

10. Minors

The Site and the App are intended for persons at least 18 years of age. Purchases and account creation by minors require the consent of a parent or guardian. Memories depicting children may only be uploaded by their parents/guardians or with their consent.

11. Security

We apply appropriate technical and organizational measures (encryption, access control, backup procedures for service data, staff confidentiality obligations). No system is completely secure; in the event of a breach likely to result in a high risk to your rights, we will notify you and the supervisory authority, in accordance with Art. 33–34 GDPR.

12. Changes to the policy

This Privacy Policy may be updated periodically to reflect any legislative changes or changes to the operation of the Website and the App. Any change will be published on this page, indicating the date of the last update. We recommend that you check this page periodically.

13. Contact

●        Email: hello@meviva.ai

●        Address: str. Voievodul Menumorut nr. 34, Cluj-Napoca, Cluj, Romania, 400480

 

Last updated: 09.07.2026