Policy

Privacy policy

How Team Memory Book uses account details, messages, photos and payment records, who can access them and how to request deletion.

Contact for privacy questions

Team Memory Book provides the service at teammemorybook.com. For privacy questions or requests, email [email protected].

Information we process

How we use your information

We use information to authenticate organizers, collect and edit contributions, produce and deliver books, process payments and refunds, answer support requests, handle deletion, and prevent abuse. Optional project reminders are sent only to the organizer when enabled. We do not use your memories to create AI-generated content.

Who can see a book

Contributors cannot see other submissions through the contribution form. The organizer can review and arrange submissions. Anyone with a valid edit or reading link can use the permissions attached to it. Service providers process the information needed to run the service. Operators may access limited information when necessary for support, security or legal obligations.

Service providers

We use Hostinger for application hosting and private storage, Cloudflare for DNS and website protection, Google for optional sign-in, Resend for transactional email, Stripe for payments, and Spaceship to forward support email to our support inbox. Resend sends transactional email from its Tokyo region. Providers may process information in countries outside your own under their applicable terms and safeguards.

Cookies and device drafts

Essential authentication cookies keep organizers signed in. Theme preferences, unfinished form text and temporary photo drafts can be stored in the browser. Temporary photo drafts are available on that device for up to 24 hours; they are not a substitute for successfully submitting a contribution. Clearing browser data can remove local drafts.

Storage and deletion

A book follows the access terms accepted for that project. Free drafts last 30 days from creation. Paid editing lasts 90 days from the first confirmed payment, followed by seven download-only days. Paid book content is queued for deletion seven days after that window ends; unpaid drafts are queued seven days after draft expiry. Deleting a project immediately revokes online links and queues messages, photos and exports for removal. The Storage & access policy explains the full sequence.

Account requests and records

Organizers can export account information and request account deletion from Account. A recent sign-in may be required. Account deletion removes sign-in credentials and personal profile details after project removal completes. We retain limited transaction references, amounts, currencies, payment status and necessary deletion records separately from book content. Financial records are kept for at least seven years from the transaction and longer where a specific legal obligation or unresolved dispute requires it, with an annual retention review.

Recovery backups are made daily, encrypted and kept for up to 30 days. Deleted content can remain in a protected backup until it expires; it is not available through the service. A recovery must apply the latest deletion records before access is restored. Application logs are rotated daily and kept for up to 30 days; administrative audit records are kept for 365 days. Website access logging is disabled to avoid recording private-link credentials. Expired authentication records are removed within one day; recovery deletion identifiers are retained for 90 days.

Your choices

Use email sign-in if you do not want to use Google. Turn optional organizer reminders off in project settings. Ask your organizer about a contribution or contact [email protected] about access, correction or deletion. We may need to verify that a request relates to you. Depending on where you live, you may have additional privacy rights and a right to complain to a relevant authority.

Security and your own copies

We use access controls, private file storage and restricted online links. No service can guarantee absolute security. Keep sign-in codes and private links confidential. Files already downloaded by an organizer or recipient are outside the service’s control and cannot be recalled by deleting the online project.