This policy explains what we collect and how we use it. We aim to collect the minimum needed to run the service.
1. What we collect
Your email (for your account and magic-link sign-in), the content you create (names, dates, messages, photos/videos), and payment metadata from Paddle (we never see your full card details).
2. How we use it
To create and host your page, authenticate you, process payments and renewals, send transactional email, and generate optional AI text from the context you provide.
3. Sub-processors
Supabase, Cloudinary, Paddle, Resend, OpenAI, and Vercel process data on our behalf to provide the service.
4. Cookies
We use essential cookies for authentication. We ask for consent before any non-essential cookies.
5. Your rights (GDPR)
You can access, export, or delete your data at any time from your dashboard. Account deletion removes your pages and purges all uploaded media.
6. Retention
Page content is retained for your hosting term plus a short grace period. Expired pages are purged 30 days after expiry. Money records are retained as required for accounting.
7. Children
The service is not for children under 16. Identifiable images of children require guardian consent.
8. Contact
Privacy questions and data requests: hello@togethersince.app.