How we handle what you send us.
Introduction
Welcome to MemoryBoxd. We respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, disclose, and safeguard your information when you use our video scheduling service.
Information we collect
Personal information
- Email addresses (yours and your recipients')
- Account information (your Google account email, used for authentication)
- Payment information (processed securely through Stripe)
- Profile information you choose to provide
Video content
We store the video files you upload, along with associated metadata such as:
- Video file name, size, and format
- Upload date and scheduled delivery date
- Delivery status and timestamps
Automatically collected
- IP address and device information
- Browser type and version
- Essential cookies for authentication and functionality
How we use it
- Operate and maintain the video scheduling service
- Process and deliver scheduled videos to recipients
- Send transactional emails (confirmations, reminders, notifications)
- Process payments and prevent fraud
- Improve and optimize the service
- Respond to inquiries and provide support
- Send marketing communications (with your consent)
- Comply with legal obligations
Third-party services
We rely on the following providers, each with their own privacy policies:
- Supabase: database and authentication
- Cloudflare R2: video and thumbnail file storage
- Google: OAuth authentication provider
- Resend: email delivery
- Vercel: hosting and infrastructure
- Stripe: secure payment processing
Storage & security
Your data is stored using industry-standard encryption. Video files live on secure servers, accessible only to authorized personnel and systems necessary for delivery. No transmission over the Internet is 100% secure, and while we strive to protect your data, we cannot guarantee absolute security.
Data retention
We retain your personal information and video files for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
You can request deletion of your account and associated data at any time.
Your rights
Depending on where you live, you may have the following rights:
- Access: request a copy of your data
- Correction: request correction of inaccurate data
- Deletion: request removal of your data
- Portability: request transfer of your data to another service
- Objection: object to certain processing activities
- Restriction: request restriction of processing
- Withdraw consent: withdraw consent for data processing
To exercise these rights, please write to privacy@memoryboxd.com.
GDPR (EU users)
If you're in the European Economic Area, we process your data based on:
- Performance of a contract (providing our services)
- Legitimate interests (improving our service, fraud prevention)
- Legal obligations (compliance with laws)
- Your consent (marketing communications)
CCPA (California users)
California residents have additional rights:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information
- Right to deletion of personal information
- Right to non-discrimination for exercising CCPA rights
We do not sell your personal information to third parties.
International transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place.
Changes to this policy
We may update this privacy policy from time to time. We'll note significant changes on this page and update the “last revised” date above.
Contact
Questions or concerns? Write us at privacy@memoryboxd.com.