Moments

Moments Privacy Policy

Effective Date: July 31, 2026
Version: 1.0.0

Moments Memory Books, LLC ("Moments," "we," "us," or "our") operates Moments Memory Books, including our website, owner accounts, contributor flows, checkout, printing, and support channels (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the Service.

Scope

This Policy applies to project owners, contributors, recipients, visitors, and other individuals whose personal information we process through the Service. It does not apply to a third party's services, even when they are linked from the Service.

Information We Collect

We collect information you provide directly to us, including:

  • Account information, such as your name, email address, and authentication identifiers.
  • Project and recipient information, such as project name, recipient name, instructions, and book preferences.
  • Contributor information, such as name, email address, relationship to a recipient, signatures, messages, and photo captions.
  • Photos, crop information, and image files that you upload.
  • Order and fulfillment information, such as shipping recipient name, phone number, address, selected shipping option, and order details.
  • Support and privacy-request correspondence.

We also collect or create information automatically or through our providers, including technical logs, security and error information, Google Analytics 4 page-view data, generated book PDFs and previews, shipment/tracking information, and transaction identifiers. We do not receive your payment-card number; payment-card information is collected by Stripe through Stripe-hosted Checkout.

How We Use Information

We use personal information to operate and improve the Service, including to:

  • Create and manage projects and owner accounts.
  • Receive, organize, render, and print contributor content.
  • Process payments, calculate tax, arrange shipping, and provide fulfillment updates.
  • Send transactional emails, such as project and contributor confirmations.
  • Protect the Service, investigate errors, prevent misuse, and comply with legal obligations.
  • Measure site use through Google Analytics 4.

AI-Assisted Features

We use Vercel AI Gateway with models provided by Google and OpenAI for certain text-generation features. Names, messages, and project text may be automatically sent through Vercel AI Gateway to Google's Gemini 2.5 Flash Lite and OpenAI's GPT-5 to generate a project description, book title, and subtitle.

We send contribution content to those text-AI providers only when a user chooses an AI feature that sends that contribution, such as message refinement. We use WaveSpeed's Real-ESRGAN service to enhance photo resolution when needed. For that purpose, WaveSpeed receives a public URL for the image.

These providers process information to provide the requested functionality. Their privacy practices are governed by their own policies, including Vercel's Privacy Policy, Google's Privacy Policy, and OpenAI's Privacy Policy.

How We Share Information

We share personal information only as needed to operate the Service, including with:

  • The project owner and intended recipient. Contributors should not submit information they do not want the project owner or intended recipient to receive.
  • Lulu, our print and fulfillment provider, to print and ship books. This may include shipping information and the book files needed to fulfill an order.
  • Clerk for authentication; Supabase for database and file storage; Stripe for payments and tax-related checkout functions; Resend for transactional email; Vercel and Workflow for application hosting and workflow processing; Sentry for error monitoring; Google Analytics for site measurement; and the AI and photo-enhancement providers described above.
  • Government authorities, professional advisers, or other parties when required by law, needed to protect rights and safety, or in connection with a merger, acquisition, financing, or sale of business assets.

We do not sell personal information for money and do not use personal information for targeted advertising, retargeting, or custom or lookalike audiences.

Photos, PDFs, and Contributor Links

Contributor links and file paths use UUIDs intended to make them difficult to guess. Photos and generated PDFs are stored at public URLs that are not protected by individual sign-in access controls. Anyone who obtains a public URL may be able to access that asset. Do not share contributor links or public asset URLs with people you do not intend to have access.

Printed books and files already downloaded, shared, or delivered cannot be recalled or deleted from another person's possession.

Cookies, Local Storage, and Analytics

We use essential technologies to operate authentication and checkout. Contributor draft text may be stored in browser local storage so it can persist during the contributor flow. Stripe may use its own technologies on Stripe-hosted Checkout.

When configured, Google Analytics 4 records page views across our website, including this page. We do not send user IDs, email addresses, book or project content, or other personally identifiable information to Google Analytics. You can disable Moments' Google Analytics integration using the analytics preference control available in the Service. You can also learn about Google's controls at Google's privacy controls.

Sentry may collect technical diagnostic information and, following an error, a masked session replay. We configure Sentry to mask text and block media in replays.

Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information from unauthorized access, loss, misuse, alteration, and disclosure. These measures include access controls that limit personal information to authorized users and services, authentication for owner accounts, and monitoring for errors and security-related events.

Payments are handled through Stripe-hosted Checkout. We do not receive or store payment-card numbers. We verify signed payment and print-provider webhook deliveries before processing them. Certain retained webhook payloads are encrypted and are scrubbed after 30 days.

No method of transmitting information over the internet or storing information is completely secure. We therefore cannot guarantee absolute security. You are responsible for protecting your account credentials and for sharing contributor links and downloaded files only with people you intend to access them.

Some photos and generated PDFs are available at public URLs that are difficult to guess but are not protected by individual sign-in access controls. Anyone who obtains one of these URLs may be able to access the associated asset. Please see "Photos, PDFs, and Contributor Links" above for more information.

Retention

We retain personal information for as long as reasonably necessary to provide the Service and for legitimate business, security, legal, tax, accounting, dispute-resolution, and recordkeeping purposes. Retention periods vary by information type and operational need.

For example, we retain order and fulfillment records as needed for commercial and legal obligations. Encrypted webhook payloads are scrubbed after 30 days, although related delivery records may remain. We may retain limited information needed to maintain security, prevent fraud, satisfy legal obligations, or document the handling of a privacy request. Backups may retain information until their normal expiration.

Requesting Deletion

To request deletion of personal information, email privacy@momentsmemorybooks.com with the subject line "Data Deletion Request." Include the email address you used with Moments and enough information for us to identify the relevant account, contribution, or project. Do not send passwords, payment-card information, or other unnecessary sensitive information.

We may request information to verify your identity and authority to make a request. We evaluate each request individually. A deletion request does not guarantee complete or immediate deletion because we may need to retain some information for active orders, printing and fulfillment, tax and payment records, security, legal claims, backups, or other lawful purposes. We also cannot delete printed books, files already downloaded or shared, or information held independently by another person.

Utah Residents

The Utah Consumer Privacy Act provides certain rights to consumers when it applies to a business. If the Act applies to Moments and you are a Utah resident, you may have rights regarding personal data we process. You may contact us at privacy@momentsmemorybooks.com to make a request. This section does not limit any rights available to you under applicable law.

Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. If you believe a child has provided us personal information without appropriate authorization, contact us at privacy@momentsmemorybooks.com.

Changes to This Policy

We may update this Policy to reflect changes to the Service, our data practices, or applicable law. We will publish each new version at /privacy with a new version number and effective date. Earlier versions are retained in our policy history.

Contact Us

For privacy questions or requests, contact:

Moments Memory Books, LLC
privacy@momentsmemorybooks.com