Privacy Policy

Who We Are

Moment Savor Software LLC is the intended software provider and controller of personal data processed by MomentSavor. Privacy questions and rights requests can be sent to mgreten@gmail.com. Our Terms of Service and Refund Policy cover related service and billing terms.

Information We Collect

• Account and family data — name, email, settings, memberships, roles, invitations, and support messages.
• Your content — memories, text, audio, photos, people, dates, locations, tags, and AI-generated metadata you choose to save.
• Service and device data — API-token and connected-device metadata, notification preferences and delivery records, product events, IP address, browser information, and security logs. For browser or PWA push, we also store each subscribed device's push endpoint, public encryption key (p256dh), and authentication secret (auth), which are generated by your browser. Exported credential metadata never contains token values or digests.
• Attribution and journey data — an allowlisted campaign and message variant, a broad referrer category, and whether a visit reaches key steps from landing through first memory. We use this to understand which outreach works and where sign-up stalls. We do not use third-party analytics or advertising trackers, and we omit automated, internal, and test activity from customer totals.
• Billing data — subscription and transaction status and provider identifiers returned by Paddle. Paddle collects payment-card and billing details directly.

Purposes and Lawful Bases

• Contract — provide accounts, family sharing, storage, transcription, exports, support, and billing access.
• Legitimate interests — secure and improve the service, diagnose failures, prevent abuse, and understand bounded product usage, balanced against your rights.
• Legal obligations — tax, accounting, valid legal process, safety preservation, and incident response.
• Consent where required — optional communications or device permissions. You may withdraw consent without affecting earlier processing.

We do not use personal data for targeted advertising. We use no non-essential third-party analytics or advertising cookies. Essential session and security cookies are required to operate the service. Notification data is used only to administer and deliver the service notifications you choose to receive.

Providers and Other Controllers

We disclose only the data needed to operate the service:

• OpenAI, processor — receives selected audio and memory text for transcription and structured extraction. OpenAI states that API-submitted content is not used to train its models by default.
• Cloud and infrastructure providers, processors — host the application, database, encrypted object storage, monitoring, and backups.
• Email delivery, processor — We use Resend to deliver email notifications. Resend processes the recipient's email address and the notification's contents, which may include a memory title and a link to the memory. Opening the link still requires authorized account access.
• Browser and device push services — If you enable browser or PWA push, the push service selected by your browser or device processes the subscription endpoint, routing information, and an encrypted notification payload. Depending on your browser or device, this may include services operated by Apple, Google, Mozilla, Microsoft, or another platform provider. Our push payload contains a generic alert and a relative link to the memory; it does not contain the memory transcript, notes, private media, or your push subscription credentials.
• Paddle.com Market Limited, independent data controller — our payment provider and Merchant of Record. Paddle directly collects contact information, billing address, tax information, purchase and invoice details, and payment method, including full card details; MomentSavor does not store or process full payment card details on its own servers. Paddle may return your email/contact details, Paddle customer, subscription, and transaction identifiers, subscription status, purchased plan, and country/tax and transaction details so we can provision and administer your access, reconcile billing, support fraud prevention, and satisfy our accounting and legal obligations. See Paddle's Privacy Policy.
• Authorities or professional advisers — only when required by law or reasonably necessary to protect rights, safety, and the service.

We never sell your personal data, and share it only with the providers and controllers described in this policy to operate the service.

We do not share notification data with third parties for advertising or analytics.

Notification Choices

Email and browser or PWA push are separate choices and are off unless you enable them. You can change either channel in Settings. You can also remove the current device's push subscription in Settings or revoke notification permission through your browser or device. Disabling Web Push in Settings removes the push subscriptions stored for your account. If you revoke permission only in your browser or device, a stored subscription may remain until the push service reports it as expired or invalid, or until your account is closed.

International Transfers

MomentSavor and its providers may process data in the United States and other countries. Where European or UK transfer rules apply, safeguards may include an applicable adequacy decision, the European Commission's Standard Contractual Clauses, or a UK transfer addendum/IDTA. We are verifying the mechanism used for each provider before making a definitive transfer claim. Contact us for current information.

Retention, Deletion, and Holds

Account and memory data is kept while the account is active. Account deletion removes ordinary production data promptly and within 30 days; encrypted backups age out on a 31-day lifecycle. Product events are limited to 13 months. Anonymous acquisition journey events expire after 30 days. Generated ZIP exports expire after 48 hours. Early-access requests become inactive after 90 days and are deleted during the next request submission or admin queue review. Security, tax, billing, dispute, or safety records may be retained longer when law or a documented legal hold requires it. Notification preferences and delivery records are retained while your account is active so we can apply your choices and prevent duplicate delivery. Push subscription records are removed when you disable Web Push in Settings, remove a subscribed device through MomentSavor, when a push service reports the subscription as expired or invalid, or as part of account deletion. Opportunistic cleanup is defense in depth; monitored scheduled retention execution must be verified before launch.

Security

We use TLS in transit, access controls, credential hashing, encryption provided by our storage and database services, restricted safety workflows, and backups. No security measure can guarantee absolute protection.

Your Privacy Rights

Depending on where you live, you may request access, a portable copy, correction, erasure, restriction, or objection, and may withdraw consent where consent is the basis. Account settings provide a personal-data download and account deletion controls. The download is not necessarily a complete response to a formal access request; contact us for provider, billing, or legally restricted records.

Email mgreten@gmail.com from your account address. We may verify identity and authority before responding. We target a response within one month, subject to lawful extensions. You may complain to your local supervisory authority; EU residents can find authorities through the European Data Protection Board, and UK residents may contact the ICO.

California Notice

In the preceding 12 months we may have collected the identifiers, customer records, commercial information, internet or device activity, approximate location, audio/visual content, and inferences described above, from you, your family collaborators, devices, and service providers. We use and disclose these categories for the business purposes and recipient groups described above. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics. Where California law applies, you may request to know, correct, delete, or obtain a copy of personal information and may use an authorized agent. We will not discriminate for exercising a right.

Children

MomentSavor is not directed to children under 13, and we do not knowingly create accounts for them. Family members should not upload a child's information unless they have authority to do so. Contact us if you believe a child provided account information without appropriate authorization.

Contact

Questions, concerns, and privacy requests can be sent to mgreten@gmail.com.