AfterToMe Member Account Terms

1. Who may open an account

1. You may open an AfterToMe account if you are 18 or over and act for yourself. An account is personal; you will not share credentials or open an account for another person.

2. You will keep your registration details accurate, keep your credentials secret, enable the security features offered, and notify support@aftertome.com without delay of any suspected compromise.

2. Contract formation

1. A contract for the platform service is formed when the Operator records your acceptance of the applicable terms through the acceptance control shown to you (an unticked checkbox, an order button labelled with an obligation to pay, or an electronic signature) and, for paid services, when the payment provider confirms payment.

2. The Operator keeps an append-only record of the document identifier, version, content hash, date, time and acceptance method. You may request a copy of the record and of the accepted version at any time at legal@aftertome.com. Each version is archived at /legal/account-terms/v/<version>.

3. Acceptance by a person acting for an organisation is a representation that the person is authorised to bind that organisation. Where the Operator requires verification of that authority, the service for the organisation is not activated until verification is complete.

4. The Operator may rely on an electronic signature produced through its signature provider as the signature of the signatory under Regulation (EU) No 910/2014 and, for the UK, the UK eIDAS regulation.

5. At signup you accept these terms through an unticked checkbox that links to this exact version. The Privacy Notice is shown for information and is not part of the acceptance. Marketing email, optional analytics, voice and likeness permission for EchoSoul (ACC-02), cross-platform sharing and release instructions (LEG-01) are each granted through their own control and never through this checkbox.

6. Opening an account does not create a payment obligation. A paid plan is contracted separately under CUS-01 through the order button at checkout.

3. The account and the vault

1. The account gives you access to the features of the plan shown in your account (Free or paid). The vault stores the content and instructions you place in it. The Operator stores, integrity-checks and releases content only as described in SEC-01, LEG-01 and BEN-01.

2. You will place in the vault only content you are entitled to store and to pass on. Where content contains another person's personal data, you are responsible for having a lawful basis to store it and to release it to the recipient you designate.

3. You will not use the service to store or distribute unlawful content, to defraud, to harass a recipient, or to interfere with the service or another user's vault.

4. Content and intellectual property

1. You retain ownership of content you upload. You grant the Operator a worldwide, non-exclusive, royalty-free licence to host, store, reproduce, adapt, display, distribute and create derivative works of your content for the purpose of operating, promoting (listing content only) and improving the service, for the term of your account plus the period required for backup and legal retention.

2. You warrant that your content does not infringe third-party rights and is not unlawful.

3. The Operator may remove or restrict content that it reasonably believes is unlawful, infringes these terms or creates a risk to users, and will inform you of the reason and the review route.

4. All platform software, designs, models, trade marks and data compilations are owned by the Operator or its licensors. No licence is granted except as stated.

5. The licence in paragraph 1 does not extend to promotion: vault content is private and is never displayed publicly. "Improving the service" does not include training AI models on your content; that use requires your separate permission (C07.5).

5. AI features

The EchoSoul feature and every other AI feature are governed by the AI and Identity Use Policy (ACC-02), which you accept before first use.

6. Data protection

1. Platform data. The Operator is the controller of personal data processed to operate the platform: account, identity verification, acceptance records, payments, security, support, communications and analytics.

2. Provider supply data. Where a provider supplies services to a customer through the platform, the provider is an independent controller of the data it needs for that supply (booking, order, clinical, educational or professional records), and the Operator is a controller of the platform-level record of the transaction. Each party complies with its own obligations; neither acts for the other.

3. Processor services. Where the Operator processes personal data on behalf of a business customer under the customer's instructions (for example an enterprise tenant's employee data), the Data Processing Agreement (DAT-01) applies and governs; it is signed as part of the order.

4. Sharing between SET platforms. Personal data is not shared with any other platform operated by the Operator or its group unless you enable the specific destination in your settings. Enabling one destination does not enable others, and you may disable it at any time.

5. International transfers. Personal data is stored in the European Economic Area (or, for wellbridge.uk, the United Kingdom). Where a processor outside those areas is used, the transfer is covered by Standard Contractual Clauses or the UK Addendum/IDTA, listed in the subprocessor annex.

7. Retention and closure

1. Account data is kept for the life of the account and deleted or anonymised within 90 days after closure, except where a longer period is required by law (tax and accounting records: 6 years; acceptance and consent records: 5 years after the end of the relationship, as evidence of compliance; records subject to a legal hold: until the hold ends).

2. Conversation logs, recordings and uploads not linked to an active contract are deleted no later than 12 months after the last interaction, and earlier on your request, unless a legal hold applies.

3. Backups are rotated on a cycle not exceeding 35 days; data deleted from production is removed from backups at the end of the cycle.

4. Where a provider is an independent controller, its own retention rules apply to its records.

5. You may close your account at any time from account settings or through support@aftertome.com. Closing an account cancels any active release instruction unless you have a paid plan whose release provisions you keep in force under LEG-01 §6; the closure screen states which instructions will lapse before you confirm. Closure does not cancel a plan fee already due.

8. Suspension and termination by the Operator

1. The Operator may suspend or close an account for material breach of these terms, for unlawful use, where required by law, or for a threat to the security of the service, and tells you the reason and the review route (C15) unless the law prevents it.

2. On termination the vault content is available for export for 30 days, after which C16 applies, subject to legal hold.

9. Liability

1. The Operator is liable for damage caused by its breach of these terms, by its negligence, or under mandatory law. The Operator is not liable for loss that was not foreseeable at the time of contracting, for loss caused by a provider's supply where the provider is the contracting party, for your breach of these terms, or for events outside its reasonable control.

2. Nothing in these terms excludes or limits liability for death or personal injury caused by negligence, for fraud, for wilful misconduct or gross negligence, or for any liability that cannot be limited by law.

10. Changes

1. The Operator may amend these terms for legitimate reasons: changes in law, in the service, in security or fraud prevention, in the payment provider, or to clarify wording. The Operator notifies you of material changes by email and in-product at least 30 days before they take effect (immediately where required by law or security).

2. If you do not accept a material change, you may terminate before it takes effect and receive a pro-rata refund of any prepaid period affected. Continued use after the effective date is acceptance; for major changes the service asks you to confirm acceptance at your next sign-in.

3. Every version is archived with its date and content hash at /legal/account-terms/v/.

11. Governing law and forum

These terms are governed by Spanish law. You also benefit from any mandatory consumer protection provisions of the law of the country where you reside. Disputes are heard by the courts of your domicile; the Operator may bring proceedings in your domicile.

12. Complaints

1. Complaints may be sent to support@aftertome.com or submitted through /legal/account-terms/complaints. The Operator acknowledges within 2 business days and answers within 15 business days (one calendar month maximum under Spanish customer-service rules).

2. Consumers resident in Spain may use the consumer arbitration system (Sistema Arbitral de Consumo) or the consumer mediation services of their autonomous community. Consumers resident in the UK may use a certified ADR provider named in the complaints page; the Operator states on that page whether it has agreed to use that provider. The The The EU Online Dispute Resolution platform has been discontinued and is not used.

3. Nothing in this clause prevents you from bringing a claim in court.

Platform-specific terms

Digital legacy and release instructions

1. The service stores instructions and content that you designate for release to named recipients after a verified trigger event. The service does not create a will, does not transfer title to property, and does not replace probate or inheritance procedures.

2. Release is executed only after human verification of the trigger event against the evidence rule you selected (for example an official death certificate presented by a named recipient plus a waiting period), and may be suspended where a dispute, legal hold or court order is notified.

3. You may revoke or change instructions at any time while you have capacity. Recipients have no right to content before release.

4. The Operator keeps released content available to recipients for the period stated in your plan and then deletes it; rights of erasure and court orders prevail over any technical lock.

---

Integrity proof and verification records

1. A proof record attests that a specific digital content (identified by its cryptographic digest) existed at a point in time and was signed by the stated signer. A proof record does not attest to the truth, accuracy, legality or regulatory status of the content, and is not a certification, accreditation or qualified electronic time stamp unless the record states a qualified trust service provider.

2. Verification pages show the digest, the signer, the timestamp source and the retention period; records are retained for the period stated in the plan or required by law.

---