Privacy Policy
Last updated: March 17, 2026
Our Memory Book is a service of Mostest Ventures, LLC ("we," "us," or "our"). We operate the website at ourmemorybook.com. This policy explains what information we collect, how we use it, and your rights regarding your data.
What we never do
- We never sell your data. Not aggregated, not anonymised, not to any third party.
- We never train AI models on your content. If we use AI features (e.g. story enhancement, transcription), the providers we use have contractual terms forbidding training on customer data, and we disclose them below.
- We never share contributor contact details (phone numbers, email addresses) with third parties for any purpose other than message delivery by the communication providers we use.
Your control
You have direct, self-serve control over your data:
- Export: request a full PDF, ZIP of original media, or JSON at any time from Exports. JSON export is included on every plan. See The Memory Promise, right #2.
- Delete: one click deletes a book; one form deletes your account. Personal info is purged synchronously. See right #3 for details.
- Restrict: mark any submission as private so only you and the contributor can see it. See right #5.
Verification
You can audit what we hold at any time by requesting a JSON export. It contains the full database row for every submission in your book, with nothing hidden. Refund, export, and deletion actions are recorded in an audit log that is itself surfaced in your account activity. See The Memory Promise, right #6.
1. Information We Collect
Account Information
When you create an account, we collect your email address and password (stored in hashed form). You may optionally provide a display name, phone number, and profile photo.
Submissions (Memories)
When you or your contributors submit memories, we collect:
- Text content of the submitted memory
- Contributor name and email (if provided)
- Photos, images, or other media attached to submissions
- Submission channel (web form, email, SMS, WhatsApp, or Telegram)
- Privacy preference (public or private)
Channel Data
If contributors submit memories via messaging channels, we collect:
- SMS and WhatsApp: Phone number (used for routing and confirmation replies)
- Email: Email address and sender name
- Telegram: Chat ID and display name (no phone number)
We store channel sessions that link a contributor's channel identifier (phone number, chat ID, or email) to a specific book so that returning contributors don't need to re-enter a book code. These sessions are tied to a single book and can be cleared.
For full details on SMS and WhatsApp messaging, including opt-in, opt-out, and message frequency, see our Messaging Terms.
Payment Information
Payments are processed by Stripe. We store only your Stripe customer ID and subscription status. We never store credit card numbers, CVVs, or full payment card details on our servers.
Automatically Collected Data
- Session cookies: Required for login and security (CSRF protection). These are functional cookies, not tracking cookies.
- Server logs: IP address, request timestamps, and user agent. These are retained for security and debugging purposes and are not used for tracking or advertising.
2. How We Use Your Information
- Provide the service: Store and display memories, manage books, handle submissions
- Send confirmations: Reply to channel submissions (SMS, email, WhatsApp, Telegram) confirming receipt
- Moderate content: Enable book owners to review and approve or reject submissions
- Process payments: Manage subscriptions and plan features via Stripe
- Maintain security: Rate limiting, spam prevention (Cloudflare Turnstile), webhook signature verification
- Send service emails: Account verification, password resets, and critical service notifications
We do not sell your data, use it for advertising, or share it with data brokers.
3. Third-Party Services
We use the following third-party services to operate Our Memory Book:
| Service | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Email, payment details (handled directly by Stripe) |
| Resend | Inbound email processing, outbound email delivery | Email addresses, email content |
| Twilio | SMS and WhatsApp message handling | Phone numbers, message content |
| Telegram Bot API | Telegram message handling | Chat IDs, message content |
| Cloudflare | CDN, DDoS protection, Turnstile captcha, and Browser Insights (page speed measured in your browser, so we can find slow pages) | IP addresses, request metadata, and for Browser Insights the page address plus your browser and device type |
| Google Fonts | Typography | IP address (via font loading) |
| Plausible | Privacy-friendly site analytics (page views, referrers) | No cookies, no fingerprinting, no cross-site tracking. IP is hashed-and-discarded same-day. |
Each service has its own privacy policy. We encourage you to review them.
4. Data Retention
- Account data: Retained until you delete your account
- Submissions: Retained until deleted by the contributor, the book owner, or when the associated account is deleted
- Media files: Retained alongside their submission; deleted when the submission is deleted
- Channel sessions: Retained while active; cleared when the associated book is deleted
- Server logs: Retained for up to 90 days for security purposes
5. Your Rights
You have the following rights regarding your data:
- Access and export: Download all your data in JSON format from your account settings
- Deletion: Delete your account and all associated data from your account settings. This action is permanent and cannot be undone.
- Correction: Update your profile information at any time through your account settings
- Private submissions: Mark any submission as private so that only you and the book owner can see it
For contributors who submitted memories without an account: contact the book owner to request modification or deletion of your submissions, or email us at the address below.
6. Channel-Specific Privacy
SMS and WhatsApp (via Twilio)
When you text a memory to our phone number, your phone number is stored to route future messages and send confirmation replies. Message content is processed by Twilio's servers before reaching ours. Twilio may retain metadata in accordance with their privacy policy. Standard carrier messaging rates apply.
Email (via Resend)
When you email a memory, your email address and message content pass through Resend's inbound parsing service. We store the sender address and message body. Resend may retain email metadata per their privacy policy.
Telegram
When you message our Telegram bot, your Telegram chat ID and display name are stored. We do not receive or store your phone number through Telegram. Messages are delivered via Telegram's Bot API.
Web Submissions
Web form submissions are protected by Cloudflare Turnstile (captcha) for anonymous users. Authenticated users skip the captcha. Turnstile may collect browser metadata for bot detection.
7. Security
We protect your data with:
- HTTPS encryption for all connections (HSTS enforced)
- Hashed passwords (never stored in plaintext)
- Webhook signature verification for all channel providers
- Rate limiting on submissions and authentication endpoints
- Media file scanning for malicious content
- CSRF protection on all forms
8. Children's Privacy
Our Memory Book is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify registered users of material changes via email. The "last updated" date at the top reflects the most recent revision.
10. Contact Us
For privacy-related questions, data requests, or concerns:
Email: [email protected]
Last updated 2026-04-19.