Paramor Privacy Policy

Effective: June 12, 2026

Paramor is an AI voice and text companion service operated by Dynamanic LLC ("Dynamanic," "Paramor," "we," "us," or "our"). This Privacy Policy explains what personal information we collect when you use Paramor at https://paramor.ai, why we collect it, how long we keep it, who we share it with, and the choices and rights you have.

Paramor is an adults-only (18+) service. We do not knowingly collect personal information from anyone under 18.

If you have questions about this policy or want to exercise a privacy right, contact us at inquiries@dynamanic.io.

This Privacy Policy works together with our Terms of Service, Acceptable Use Policy, Cookie Policy, and Age Verification & Adult Content Notice.

1. The short version

• Paramor is artificial intelligence, not a real person. Your companion's voice, text, and any images are AI-generated. Calls are automated AI calls, not calls from a human.
• We collect what we need to run your account, place and receive your calls, take payment, keep you safe, and confirm you are an adult — and not much else.
• We do not store your payment card numbers (our payment processor, Stripe, handles those) and we do not store your ID, your selfie, or your face/biometric image from age verification (our verification provider, Yoti, processes that and, like us, does not retain the identifying media after the check).
• Call recordings are short-lived — kept about 14 days, then automatically deleted.
• We do not sell or "share" your personal information for cross-context behavioral advertising, and we do not use your personal information to train general-purpose AI models.
• You can access or delete your data and close your account. Today, account-deletion requests are handled manually by emailing inquiries@dynamanic.io.

The rest of this policy is the detail.

2. Who we are (the data controller / business)

• Operator / data controller / business: Dynamanic LLC.
• Product: Paramor (https://paramor.ai).
• Governing law: United States.
• Privacy contact: inquiries@dynamanic.io.
• Mailing address: TODO (counsel to insert Dynamanic LLC's registered/postal address for privacy notices and DSAR correspondence).
• EU/UK representative (GDPR Art. 27 / UK GDPR), if required: TODO (counsel to appoint and list an EU and/or UK representative if Paramor offers the service to EU/UK residents without an establishment there).

3. Paramor is AI — an important disclosure

Your Paramor companion is an artificial-intelligence system, not a real human being. It has no real-world existence, feelings, or independent agency. All companion conversation, voice, and images are generated by AI, and any phone calls placed or received are automated AI calls. Paramor is for entertainment and companionship and is not a substitute for professional (medical, mental-health, legal, or financial) advice, and is not an emergency or crisis service.

We disclose the AI nature of the service in-product and here to support transparency requirements (for example, the California "Bot" disclosure law and SB 243, and — for EU users — Article 50 of the EU AI Act).

4. Information we collect, and why

We collect the following categories of personal information.

We collect this information from you directly (e.g., at sign-up and in-app), automatically (e.g., technical/security logs), and from our service providers (e.g., the verification outcome from Yoti, the billing status from Stripe).

Sensitive personal information. Under the California Consumer Privacy Act (as amended, "CCPA/CPRA"), some of what we collect is "sensitive personal information" (Cal. Civ. Code § 1798.140(ae)): your account log-in credentials (email in combination with the password hash), and the biometric processing used to verify your age (which is performed by Yoti — Paramor does not store the biometric itself; see Section 6). We use these only for the purposes described in this policy and do not use them to infer characteristics about you.

We do not use your personal information to train general-purpose AI models, and we do not sell it.

5. Legal bases (for EU/UK users)

If you are in the EEA or UK, we rely on the following bases under the GDPR / UK GDPR (and, for biometric processing during age verification, Article 9). TODO (counsel to confirm the basis mapping per purpose for the EU/UK market before launch there).

Where we rely on consent (including biometric age estimation), you may withdraw it at any time; withdrawal does not affect processing already carried out.

6. Age verification and biometric (facial age estimation) handling

Paramor's default experience is PG-13. An optional adult ("R") tier exists and is gated behind real age verification. (Today the adult tier is operator-only; a per-user adult tier is planned, and the safeguards described here will apply to it.)

We verify age through Yoti Age Checks, which can use facial age estimation (and, optionally, document-based ID methods). Here is exactly how that works and what we do — and do not — keep.

6.1 What Yoti processes, and what Paramor stores

• Yoti processes the biometric. During a facial age check, Yoti captures and analyzes a facial image to estimate your age. Paramor never receives or stores your facial image, biometric template, government ID, or date of birth.
• No-retention posture. Consistent with a no-retention design, neither Paramor nor Yoti retains the identifying media (the facial image / biometric used for the estimate) after the check is completed.
• Paramor stores the outcome only — namely, the method used, a timestamp, and a verified-18+ result. That is the entirety of the age-verification data we keep.

6.2 Biometric privacy and your consent (BIPA and similar laws)

A facial scan used for age estimation is a biometric identifier / biometric information under laws such as the Illinois Biometric Information Privacy Act (BIPA, 740 ILCS 14/), the Texas Capture or Use of Biometric Identifier Act (Tex. Bus. & Com. Code § 503.001), and Washington (RCW 19.375), and special-category data under GDPR / UK GDPR Article 9.

Because of our no-retention design, Paramor itself does not collect, capture, or store a biometric identifier — Yoti performs the facial scan and neither party keeps the identifying media. Even so, we apply BIPA-grade safeguards out of caution and to cover Yoti's transient facial-geometry capture:

• Consent before any scan. Before a facial age check runs, we present a separate, plain-language consent screen that tells you a facial scan will be used to estimate your age, who performs it (Yoti), the specific purpose, and that the identifying media is not retained. We record your consent (your account reference, the timestamp, and the consent-text version). For EU/UK users this is treated as explicit consent under Art. 9(2)(a). This consent screen is presented for the age-verification (facial age estimation) flow specifically. TODO (counsel to confirm whether a BIPA § 15(b) "written release" is legally required given the no-retention posture — where Paramor stores no biometric — or is offered purely out of caution, and to finalize the exact statutes named to the user.)
• No sale, no profit, limited use. We do not sell, lease, trade, or profit from biometric data, do not use it to identify you anywhere else, and do not use it to train AI models. It is used only to confirm you are an adult.
• Voluntary; you stay in control. Facial age estimation is used only where you choose to verify; you may withdraw consent at any time by contacting us (Section 11), and you may decline or use an alternative verification method where available. TODO (counsel to confirm the available alternative method(s) — e.g., document-based ID via Yoti — and any state-specific consent wording before the per-user adult tier launches.)

For more detail on our biometric handling, see our Biometric Information Privacy Policy and the in-flow biometric consent we present before any scan. TODO (LAUNCH-GATING — counsel/privacy: the existing internal Biometric Information Privacy Policy and in-flow consent screen are written around a deprecated "Couple Photos" design in which Paramor derived and stored an encrypted face embedding ("face token") for up to 3 years. Those documents MUST be conformed to the no-retention facial-age-estimation model described here — no stored embedding, no multi-year retention, outcome-only — before this Privacy Policy links to them publicly, or the cross-reference will contradict this section.)

7. Call recordings, transcripts, and retention

We retain personal information only as long as needed for the purposes described here, then delete or de-identify it.

• Call audio / recordings: retained for a short window — by default about 14 days — then automatically deleted, including the copy held by our telephony provider (Twilio), not just the copy on our own servers.
• Call transcripts (verbatim speech-to-text): the full word-for-word transcript is retained for a short window — by default about 30 days — then automatically removed, except where it must be preserved for an active safety or legal matter (see the legal-hold exception below).
• Memory (what your companion remembers about you): short derived notes and highlights distilled from your calls are kept while your account is active so your companion stays consistent. You can wipe this at any time in-app, and it is deleted when you close your account.
• Call logs (times, duration, outcome): retained while your account is active for service and security purposes.
• Account, persona, and configuration data: retained while your account is active; deleted on account closure, subject to the legal-hold exception below.
• Subscription/billing status: retained while your account is active and for a limited period afterward as required for tax, accounting, and dispute purposes. TODO (counsel to set the exact retention tail.)
• Age-verification outcome (method + timestamp + 18+ result): retained as audit evidence that the gate was satisfied. TODO (counsel to set the exact retention period — e.g., life of account plus a limited statute-of-limitations tail.)
• Security and audit logs: retained for a limited period appropriate to security and legal needs. TODO (counsel to set exact period.)

Legal-hold / child-safety exception (overrides deletion). If any content is flagged by our child-safety (CSAM) screening or our non-consensual-imagery (NCII) takedown process, we are legally required to preserve it and report it to the National Center for Missing & Exploited Children (NCMEC) under 18 U.S.C. § 2258A. We cannot delete such material in response to a deletion request until that obligation is satisfied; consistent with the REPORT Act, such material is preserved for at least one year. We will tell you when a deletion request is withheld on legal-hold grounds, to the extent the law permits. (See our CSAM Detection, Escalation & NCMEC Reporting Procedure and NCII Notice-and-Takedown Procedure.)

8. Billing and payments (Stripe)

Paid subscriptions are processed by Stripe. When you subscribe, your card details are collected and processed directly by Stripe under its own terms and privacy policy. Paramor never receives or stores your full card number. We receive and store only the status of your subscription and an opaque Stripe customer/payment reference so we can manage your access and renewals.

9. Cookies and similar technologies

Paramor uses only essential cookies and similar technologies needed to keep you securely signed in and to operate the service (for example, your authenticated session token and basic security state). We do not use advertising or cross-site tracking cookies, and we do not use Paramor cookies to build advertising profiles or to sell or "share" your information. Because we use only strictly necessary cookies, you can use the service without consenting to non-essential tracking — there is none. For more detail, see our Cookie Policy. TODO (counsel/engineering to confirm no analytics or marketing tags are present before publication; if any are added, this section, the Cookie Policy, and the "no sale/share" statements must be updated.)

10. Who we share information with (service providers / subprocessors)

We share personal information only with vendors that process it on our instructions under a data-processing agreement that forbids them from using it for their own unrelated purposes. Our subprocessors and third parties are:

We may also disclose information to NCMEC and law enforcement where we are legally required to report or preserve child-sexual-abuse material, to respond to lawful process, or to protect rights and safety.

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising.

TODO (counsel to confirm each provider's controller/processor role and that an executed DPA — and, for EU/UK transfers, SCCs/IDTA — is in place; see the internal Vendor DPA & Data-Flow Checklist.)

11. Your privacy rights and how to exercise them

11.1 Everyone

• Access the personal information we hold about you.
• Delete your personal information and close your account. Account deletion is currently handled manually: email inquiries@dynamanic.io from your account email and we will process it (subject to the legal-hold exception in Section 7).
• Withdraw biometric consent for facial age estimation at any time.

11.2 California residents (CCPA / CPRA)

You have the right to know/access, delete, correct, opt out of the sale or sharing of personal information, and to limit the use and disclosure of sensitive personal information (which, for us, means your account log-in credentials and the biometric processing used to verify your age). Paramor does not sell or share your personal information, so there is no sale/share to opt out of, and we use sensitive personal information only for the limited, expected purposes described in this policy. We honor verifiable requests within the statutory timeframes (we acknowledge within 10 business days and respond within 45 days, extendable), and we will not discriminate against you for exercising your rights.

Categories disclosed for a business purpose (preceding 12 months). We disclose the following categories of personal information to the categories of recipients shown, each only for a business purpose. We do not sell or share any category.

TODO (counsel to confirm whether Paramor currently meets a CCPA/CPRA "business" threshold under Cal. Civ. Code § 1798.140(d), or whether these rights are offered voluntarily, and to finalize this table once data flows are locked.)

11.3 Other US states

Residents of states with comprehensive privacy laws (for example, Virginia, Colorado, Connecticut, Texas, and others) have analogous rights to access, delete, correct, and obtain a portable copy of their data, to opt out of targeted advertising/sale, and to consent before processing of sensitive data such as biometric information. Contact us to exercise these rights. TODO (counsel to confirm the multistate list and any state-specific mechanics, e.g., recognized universal opt-out signals.)

11.4 EEA / UK residents (GDPR / UK GDPR)

If applicable, you have the rights of access, rectification, erasure, restriction, data portability, and objection, and the right to withdraw consent (including for biometric processing) at any time. You may also lodge a complaint with your supervisory authority. We respond within one month (extendable for complex requests). TODO (counsel to confirm EU/UK applicability, the lead supervisory authority, and the Art. 27 representative before any EU/UK launch.)

11.5 How to make a request

Email inquiries@dynamanic.io. We will take reasonable steps to verify your identity before acting on a request, particularly for access or deletion. Where a request affects data held by a service provider (for example, instructing deletion at a vendor), we will pass on your instruction where applicable. You may use an authorized agent where the law permits. TODO (counsel to add a dedicated request web form/email and any required agent-authorization process.)

12. Security

We use technical and organizational measures appropriate to the sensitivity of the data, including: storing passwords only as salted hashes (never in clear text), encryption in transit, access controls and audit logging, data minimization (we do not store card numbers, IDs, selfies, or biometric images), and short retention of call recordings and transcripts. No system is perfectly secure. If a data breach affecting your personal information occurs, we will notify you and the relevant authorities as required by applicable law, including US state breach-notification statutes and, for EEA/UK users, GDPR Articles 33–34.

13. Children — strictly 18+

Paramor is only for adults aged 18 and over. We do not knowingly allow anyone under 18 to use the service or knowingly collect their personal information, and we do not collect personal information from children under 13. The optional adult tier requires age verification. If we learn that we have collected personal information from someone under 18, we will suspend the account and delete the data (subject to any legal-preservation obligation). If you believe a minor is using Paramor, contact us at inquiries@dynamanic.io.

14. International data transfers

Paramor is operated from the United States, and our service providers (Section 10) may process your information in the United States and other countries. If you are in the EEA or UK and we make the service available to you, transfers of your personal data outside your region will rely on appropriate safeguards — such as the EU Standard Contractual Clauses and, for UK data, the UK International Data Transfer Agreement / Addendum — together with a transfer assessment. You may request information about the safeguards we use. TODO (counsel to confirm each provider's transfer mechanism, including any reliance on the EU-US Data Privacy Framework, before any EU/UK launch.)

15. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective" date above and post the updated policy here. For material changes to how we handle sensitive or biometric data, we will obtain fresh consent where the law requires.

16. Contact us

Dynamanic LLC — Paramor Email: inquiries@dynamanic.io Web: https://paramor.ai Mailing address: TODO (counsel to insert).

To delete your data or close your account, email us from your account email address and we will process your request manually, subject to the legal-hold exception described in Section 7.