Privacy Policy
Last updated: September 18, 2026
Data Controller
Memoirbox is a digital event photo/video sharing platform operated at memoirbox.app. Data processing described in this policy is carried out by Efecan Bozdemir, who operates Memoirbox. You can reach us at support@memoirbox.app.
What We Collect
When you create an account: your name and email address.
When you create an event: the event name, date, and guest list if provided (name, email, phone).
When guests upload photos/videos to an event: the uploaded media files, an optional name and message, and a one-way (non-reversible) hash of the uploading device's IP address.
During payment: payment is processed entirely by Paddle.com Market Limited — your card details never reach us.
Why We Process Your Data
To provide the service (building the event gallery, storing media, moderation, notification emails), to prevent abuse (rate limiting via the IP hash), to meet legal obligations, and to improve the service.
Who We Share Your Data With
To operate the service, data is shared only with the following sub-processors, limited to what each needs: Supabase Inc. (database and authentication), Cloudflare Inc. (photo/video storage and video delivery), Resend Inc. (transactional email), Google LLC and Anthropic PBC (AI-powered moderation and background-image generation, only while the relevant media is being processed), Upstash Inc. (abuse-prevention rate limiting), and Paddle.com Market Limited (payment processing, acting as our Merchant of Record).
We never sell your data or share it with third parties for advertising purposes.
How Long We Keep Your Data
Event media is kept on our servers for the retention period of the plan you purchased (shown on the plan page) and is permanently deleted once that period ends. Your account information is kept until you delete your account.
Cookies
Our site uses only essential cookies — to keep you signed in and to remember a guest's language preference. We do not use third-party advertising or tracking cookies.
Your Rights
Under applicable data protection law (including Turkey's Law No. 6698 and, where applicable, the GDPR), you have the right to access your data, request its correction or deletion, and object to its processing. Send requests to support@memoirbox.app.
Data Security
Your data is transmitted over encrypted connections (HTTPS/TLS), and access is restricted to authorized systems only.
Changes
We may update this policy from time to time; we will notify you by email or on the site for material changes.
