Summary: We collect only what we need to provide the service. We do not sell your personal data. We do not use your photos or videos for any purpose other than creating your film. You can request deletion of your data at any time by emailing hello@savethatmoment.com.
1. Who we are
Save That Moment ("we", "us", "our") is an online service that allows users to upload photos and videos and receive a finished, edited video film. For the purposes of applicable data protection law, Save That Moment is the data controller of the personal data we process in connection with the service.
Our contact email for all privacy matters is hello@savethatmoment.com.
2. What information we collect
Information you provide directly
- Email address. We collect your email address if you sign up to be notified when paid plans become available, or if you contact us directly. An email address is not required to use the free demo.
- Payment information. When payments are enabled, all payment processing is handled by Stripe, Inc. We do not receive, store, or process your card number or full payment details. Stripe processes payments as an independent data controller under their own privacy policy: stripe.com/privacy.
- Uploaded files. The photos and videos you upload to create your film. These files are stored temporarily and used solely to generate your video output. We do not use them for any other purpose.
- Communications. If you contact us by email, we retain that correspondence to respond to you and resolve any issues.
Information collected automatically
- Log data. Our web servers automatically record standard technical information when you access the service, including your IP address (truncated to remove the final octet), browser type and version, operating system, referring URL, pages visited, and timestamps. This data is used solely to maintain the security and performance of the service and is not used to identify you individually.
- Session cookies. We use a single essential session cookie to maintain your upload session while you are using the service. This cookie expires when you close your browser. We do not use advertising cookies, third-party analytics cookies, or any cookies that track you across other websites.
3. How we use your information
We use the personal data we collect only for the following purposes:
- To process your uploaded files and generate and deliver your finished video
- To store your files during and after processing, in accordance with the retention periods set out below
- To send you a one-time email notification when paid plans go live, if you opted in to that notification
- To respond to support queries and other communications you send us
- To detect, investigate, and prevent fraud, abuse, or other violations of our Terms of Service
- To comply with applicable legal obligations
We do not use your uploaded content to train machine learning or artificial intelligence models. We do not use your content for advertising or marketing purposes. We do not build profiles about you beyond what is necessary to provide the service.
4. Legal bases for processing (EEA and UK users)
If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR) and UK GDPR:
- Contract performance (Article 6(1)(b) GDPR). Processing your uploaded files and delivering your finished video is necessary to perform the service you have requested.
- Consent (Article 6(1)(a) GDPR). Sending you payment notification emails is based on your consent, which you may withdraw at any time by emailing us.
- Legitimate interests (Article 6(1)(f) GDPR). We process log data to maintain the security and integrity of the service. We have assessed that this processing does not override your fundamental rights and freedoms.
- Legal obligation (Article 6(1)(c) GDPR). We retain payment records for seven years to meet our financial and tax obligations.
5. How long we keep your data
- Demo uploads. Files uploaded during a free demo session are stored only for the duration of your active session and are permanently deleted when your session ends or expires, whichever is sooner.
- Memoir plan uploads. Stored for 12 months from the date your order is completed, then permanently deleted.
- Chronicle plan uploads. Stored for 36 months from the date your order is completed, then permanently deleted.
- Legacy plan uploads. Stored for the duration of your account. Files are permanently deleted within 30 days of an account deletion request.
- Email addresses. Retained until you request deletion or unsubscribe. Unsubscribe links are included in all notification emails.
- Payment records. Retained for seven years as required by applicable financial and tax regulations.
- Log data. Retained for a maximum of 90 days for security and diagnostic purposes, then deleted.
- Support correspondence. Retained for two years after the matter is resolved, then deleted.
6. Who we share your data with
We do not sell, rent, or trade your personal data to any third party. We share data only as follows:
- Cloud infrastructure and storage providers. We use third-party cloud services to host the service and store uploaded files. These providers act as data processors under our instruction and are contractually bound by data processing agreements that require them to process data only as directed by us and to maintain appropriate security measures. Examples include Cloudflare for content delivery and DNS.
- Payment processors. Stripe processes payments when the paid service is enabled. Stripe is an independent data controller for payment data. Please review Stripe's privacy policy for full details.
- Law enforcement and regulators. We will disclose personal data to law enforcement agencies, regulators, courts, or other public authorities if we are required to do so by applicable law or a valid legal order. Where permitted by law, we will notify you of any such disclosure.
- Business transfers. If Save That Moment is involved in a merger, acquisition, or sale of all or substantially all of its assets, personal data may be transferred as part of that transaction. We will give reasonable notice before any such transfer and will ensure that the recipient maintains equivalent privacy protections.
7. International data transfers
We are based in the United Kingdom. If you access the service from outside the UK, your data will be transferred to and processed in the UK. If we use service providers located in countries outside the UK or EEA that are not recognised as having adequate data protection standards, we rely on appropriate safeguards such as the International Data Transfer Agreements (UK) or Standard Contractual Clauses approved by the European Commission, as applicable.
8. Your rights
Depending on where you are located, you may have the following rights in relation to your personal data:
- Right of access. You may request a copy of the personal data we hold about you.
- Right to rectification. You may ask us to correct personal data that is inaccurate or incomplete.
- Right to erasure. You may ask us to delete your personal data. We will action confirmed requests within 30 days, except where we are legally required to retain the data (for example, financial records).
- Right to restriction of processing. You may ask us to restrict how we use your data while a request for rectification or erasure is pending.
- Right to data portability. You may request that we provide your personal data to you in a structured, commonly used, machine-readable format.
- Right to object. You may object to processing based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to withdraw consent. Where processing is based on consent (such as notification emails), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please email hello@savethatmoment.com with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and respond fully within 30 days (or within the timeframe required by applicable law). We may ask you to verify your identity before processing your request.
9. Cookies and tracking
We use only the following cookie on the service:
- Session cookie (essential). A temporary cookie used to maintain the state of your upload session. It is stored only in your browser's memory and is deleted when you close your browser tab. This cookie does not track you across websites and does not contain any personal identifiers.
We do not use Google Analytics, Meta Pixel, or any other third-party tracking or advertising technologies. We do not serve advertising and we do not participate in advertising networks. You do not need to accept any cookies beyond the essential session cookie described above to use the service.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These measures include:
- All data in transit is encrypted using TLS 1.2 or higher
- Uploaded files are stored in encrypted cloud storage with access controls limiting which systems can access the files during processing
- Access to production systems is restricted to authorised personnel and requires multi-factor authentication
- We conduct periodic reviews of our security practices
No system connected to the internet can be guaranteed to be completely secure. We will notify you and, where required, the relevant supervisory authority promptly in the event of a personal data breach that is likely to result in a high risk to your rights and freedoms.
11. Children
The service is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe that your child has submitted personal data to us, please contact us at hello@savethatmoment.com and we will delete that data promptly.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will update the "last updated" date at the top of this page. If we make material changes that affect how we use your personal data, and we hold your email address, we will notify you by email at least 14 days before the changes take effect. Your continued use of the service after the effective date of any update constitutes acceptance of the updated policy.
13. Contact and complaints
For any questions about this Privacy Policy or about how we handle your personal data, please contact us at hello@savethatmoment.com.
If you are located in the EEA or UK and you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your local supervisory authority. In the UK, the supervisory authority is the Information Commissioner's Office (ICO): ico.org.uk. For a list of EEA supervisory authorities, visit edpb.europa.eu. We would, however, appreciate the opportunity to address your concerns directly before you contact a regulator.