Privacy policy

What we collect

• Account data: email, optional name, password hash.
• Order data: the brief you write (names, memories), your photos and captions, your choices.
• Payment status from Stripe. We never see or store card numbers.
• Security logs with hashed IP addresses.

Why

To produce and deliver your order (contract), to prevent fraud and secure the service (legitimate interest), and to meet accounting obligations (legal obligation).

AI processing and processors

To create your song and video, photo descriptions, lyrics and music may be produced by third-party AI providers acting as our processors under data-processing agreements. Photos are sent downscaled and without metadata. Providers are contractually prohibited from training on your data. Faces are detected, never identified.

Retention

Photos: deleted 30 days after delivery. Videos and audio: 90 days. Payment records: as required by law. You can delete everything sooner from your account. Encrypted backups are kept for 14 days, so deleted files disappear from them within 14 days.

Your rights

Access and export (download from your account), rectification, erasure (delete account), restriction, objection, and complaint to your supervisory authority (in Portugal, the CNPD).

Children

Photos of children may only be uploaded by a parent/guardian or with their consent. We ask you to confirm this at checkout.