Privacy Policy

Information We Collect

When you create an account, we collect your email address and, optionally, your name. Passwords are stored using bcrypt hashing — we never store your password in plain text. If you sign in with Google, we receive your Google account ID, email, name, and profile picture.

When you use our products, we store the content you generate — time capsules, birthday books, and video reels — along with any photos you upload (JPEG, PNG, or WebP, up to 10 MB each). If you order a printed poster, we collect the shipping address you provide. If you schedule a letter delivery, we store the recipient's email address and any personal message you write.

We also store your payment history and account balance, along with standard usage data such as session tokens (stored in httpOnly cookies) and purchase records.

How We Use Your Information

We use your information to operate the service: generating your time capsules and other products, processing payments, delivering scheduled letters, and fulfilling poster orders. We send transactional emails — order confirmations, scheduled letter deliveries, and email verification — through our email provider.

We do not sell your personal information. We do not use your content to train AI models.

Third-Party Services

We rely on the following third-party services to operate:

• Stripe — payment processing. We store your Stripe customer ID; your full card details are held by Stripe, not us.
• Resend — transactional email delivery (order confirmations, scheduled letters, email verification).
• Anthropic — AI text generation for time capsules, birthday books, and letter copy.
• OpenAI — text-to-speech narration for video reels.
• fal.ai — AI image generation for video reels.
• Cloudflare R2 — object storage for uploaded photos and generated video files.
• Printful — print-on-demand fulfillment for poster orders. Your shipping address is shared with Printful to complete your order.
• Google — OAuth sign-in (if you choose to sign in with Google).

Each of these providers has their own privacy policy governing how they handle data. We share only the data necessary to provide the specific service.

Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data is permanently deleted — including your generated content, uploaded photos, scheduled letters, and purchase history. Deletion is immediate and irreversible. Note that Stripe may retain payment records independently as required by law.

Cookies and Sessions

We use a single httpOnly session cookie to keep you signed in. This cookie does not track you across other websites. We do not use advertising cookies or third-party tracking scripts.

Your Rights

You can access and update your account information at any time from your account page. You can delete your account — and all associated data — from the same page.

If you are located in the European Union, you have additional rights under the GDPR, including the right to data portability and the right to object to processing. To exercise these rights, contact us at the address below.

Contact

For privacy inquiries, contact us at avenkatesan@juumeai.com.