Moments Privacy Policy

Effective Date: October 6, 2026
Version: 1.0.7

Moments Memory Books, LLC ("Moments," "we," "us," or "our") operates Moments Memory Books, including our website, owner accounts, contributor flows, checkout, online-book sharing, printing, and support channels (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the Service.

Scope

This Policy applies to project owners, contributors, recipients, visitors, and other individuals whose personal information we process through the Service. It does not apply to a third party's services, even when they are linked from the Service.

Information We Collect

We collect information you provide directly to us, including:

Account information, such as your name, email address, and authentication identifiers.
Project and recipient information, such as project name, recipient name, instructions, and book preferences.
Contributor information, such as name, email address, relationship to a recipient, signatures, messages, and photo captions.
Photos, crop information, and image files that you upload.
Order and fulfillment information, such as shipping recipient name, phone number, address, selected shipping option, and order details.
Support and privacy-request correspondence, including information you enter into our Tawk.to live-support chat.

We also collect or create information automatically or through our providers, including technical logs, security and error information, Google Analytics 4 page-view data, Tawk.to support-chat technical and usage data (such as your IP address, browser or device information, and the URL of the page where the widget is used), generated book PDFs and previews, online-book sharing links, transactional-email delivery records, shipment/tracking information, transaction identifiers, and AI-observability traces. AI-observability traces include the full AI-request inputs and generated outputs, which may contain personal information when an AI-assisted feature uses project, recipient, or contributor text. We do not receive your payment-card number; payment-card information is collected by Stripe through Stripe-hosted Checkout.

How We Use Information

We use personal information to operate and improve the Service, including to:

Create and manage projects and owner accounts.
Receive, organize, render, print, and present contributor content online when a project owner enables sharing.
Process payments, calculate tax, arrange shipping, and provide fulfillment updates.
Send transactional emails, including project and contributor confirmations and, when an owner approves at checkout, an online-book capability link to contributors who were print-included when the order was paid.
Provide and respond to live-support chats and other support requests.
Protect the Service, investigate errors, prevent misuse, and comply with legal obligations.
Measure site use through Google Analytics 4.
Monitor, debug, and evaluate the reliability and quality of AI-assisted features.

AI-Assisted Features

We use Vercel AI Gateway with models provided by Google and OpenAI for certain text-generation features. Names, messages, and project text may be automatically sent through Vercel AI Gateway to Google's Gemini 2.5 Flash Lite and OpenAI's GPT-5 to generate a project description, invitation message, book title, and subtitle.

We send the inputs and generated outputs of those AI requests to Langfuse, our AI-observability processor, so we can monitor, debug, and evaluate the AI-assisted features. Those records may include the personal information contained in the relevant names, messages, and project text. We do not add separate account, email, address, project, or session identifiers to these records.

We send contribution content to those text-AI providers only when a user chooses an AI feature that sends that contribution, such as message refinement. We use Pruna AI P-Image Upscale through WaveSpeed to enhance photo resolution when needed. For that purpose, WaveSpeed receives a public URL for the image.

These providers process information to provide the requested functionality. Their privacy practices are governed by their own policies, including Vercel's Privacy Policy, Google's Privacy Policy, OpenAI's Privacy Policy, and Langfuse's Privacy Policy.

How We Share Information

We share personal information only as needed to operate the Service, including with:

The project owner and intended recipient. Contributors should not submit information they do not want the project owner or intended recipient to receive.
People with whom a project owner shares an enabled online-book link. Owners control whether the online-book page is available and contributors excluded from either the print or online edition are not included in that page.
Resend, our transactional-email provider, when the owner has approved the checkout notification and a contributor's print-included contribution made that contributor eligible when the order was paid. The transactional message contains the online-book capability link.
Lulu, our print and fulfillment provider, to print and ship books. This may include shipping information and the book files needed to fulfill an order.
Clerk for authentication; Supabase for database and file storage; Stripe for payments and tax-related checkout functions; Tawk.to for live-support chat; Vercel and Workflow for application hosting and workflow processing; Sentry for error monitoring; Langfuse for AI observability; Google Analytics for site measurement; and the AI and photo-enhancement providers described above.
Government authorities, professional advisers, or other parties when required by law, needed to protect rights and safety, or in connection with a merger, acquisition, financing, or sale of business assets.

We do not sell personal information for money and do not use personal information for targeted advertising, retargeting, or custom or lookalike audiences.

Photos, PDFs, Contributor Links, and Online-Book Links

Contributor links and online-book links use opaque codes intended to make them difficult to guess. File paths use UUIDs. Photos and generated PDFs are stored at public URLs that are not protected by individual sign-in access controls. Anyone who obtains a public URL may be able to access that asset. Do not share contributor links, online-book links, or public asset URLs with people you do not intend to have access.

An owner may disable the online-book page, which prevents that page from presenting the book to new visitors and pauses unsent approved contributor notifications. Disabling an online-book page cannot recall an email already sent, an in-flight provider request, or copies of public PDF URLs that were previously obtained, shared, or downloaded. Printed books and files already downloaded, shared, or delivered cannot be recalled or deleted from another person's possession.

Cookies, Local Storage, and Analytics

We use essential technologies to operate authentication and checkout. Contributor draft text may be stored in browser local storage so it can persist during the contributor flow. Stripe may use its own technologies on Stripe-hosted Checkout.

We load the Tawk.to support-chat widget on public and owner project-management pages, but not on our platform-administration pages. The widget is configured without Tawk.to's consent form and may immediately set cookies and local or session storage to support chat sessions and recognize returning visitors. We do not use the analytics preference control to manage the independent Tawk.to widget. Learn more about Tawk.to's privacy practices and its cookie and storage use.

When configured, Google Analytics 4 records page views across our website, including this page. We do not send user IDs, email addresses, book or project content, or other personally identifiable information to Google Analytics. You can disable Moments' Google Analytics integration using the analytics preference control available in the Service. You can also learn about Google's controls at Google's privacy controls.

Sentry may collect technical diagnostic information and, following an error, a masked session replay. We configure Sentry to mask text and block media in replays.

Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information from unauthorized access, loss, misuse, alteration, and disclosure. These measures include access controls that limit personal information to authorized users and services, authentication for owner accounts, and monitoring for errors and security-related events.

Payments are handled through Stripe-hosted Checkout. We do not receive or store payment-card numbers. We verify signed payment and print-provider webhook deliveries before processing them. Certain retained webhook payloads are encrypted and are scrubbed after 30 days.

No method of transmitting information over the internet or storing information is completely secure. We therefore cannot guarantee absolute security. You are responsible for protecting your account credentials and for sharing contributor links, online-book links, and downloaded files only with people you intend to access them.

Some photos and generated PDFs are available at public URLs that are difficult to guess but are not protected by individual sign-in access controls. Anyone who obtains one of these URLs may be able to access the associated asset. Please see "Photos, PDFs, Contributor Links, and Online-Book Links" above for more information.

Retention

We retain personal information for as long as reasonably necessary to provide the Service and for legitimate business, security, legal, tax, accounting, dispute-resolution, and recordkeeping purposes. Retention periods vary by information type and operational need.

For example, we retain order records and transactional-email delivery records as needed for operational and commercial recordkeeping. Encrypted webhook payloads are scrubbed after 30 days, although related delivery records may remain. AI-observability traces are retained according to the retention settings applicable to our Langfuse project. Tawk.to support-chat information is retained according to our Tawk.to account settings and its applicable privacy practices. We may retain limited information needed to maintain security, prevent fraud, satisfy legal obligations, or document the handling of a privacy request. Backups may retain information until their normal expiration.

Requesting Deletion

To request deletion of personal information, email privacy@momentsmemorybooks.com with the subject line "Data Deletion Request." Include the email address you used with Moments and enough information for us to identify the relevant account, contribution, project, or support conversation. Do not send passwords, payment-card information, or other unnecessary sensitive information.

We may request information to verify your identity and authority to make a request. We evaluate each request individually. A deletion request does not guarantee complete or immediate deletion because we may need to retain some information for active orders, printing and fulfillment, tax and payment records, security, legal claims, backups, or other lawful purposes. We also cannot delete printed books, files already downloaded or shared, or information held independently by another person.

Utah Residents

The Utah Consumer Privacy Act provides certain rights to consumers when it applies to a business. If the Act applies to Moments and you are a Utah resident, you may have rights regarding personal data we process. You may contact us at privacy@momentsmemorybooks.com to make a request. This section does not limit any rights available to you under applicable law.

Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. If you believe a child has provided us personal information without appropriate authorization, contact us at privacy@momentsmemorybooks.com.

Changes to This Policy

We may update this Policy to reflect changes to the Service, our data practices, or applicable law. We will publish each new version at /privacy with a new version number and effective date. Earlier versions are retained in our policy history.

Contact Us

For privacy questions or requests, contact:

Moments Memory Books, LLC
privacy@momentsmemorybooks.com