Privacy Policy

This notice explains what MemoraBooks collects, why, and what you can ask us to do about it. It sits alongside our Privacy Panel, which answers the same questions in plainer language.

Who we are. MemoraBooks operates the album builder at memorabooks.in and is based in India. For anything in this notice, including our full registered business details, write to memorabooks1@gmail.com and we will send them to you.

What we collect. Your email address and password when you create an account (the password is stored only as a hash, by our authentication provider, and we never see it). The photographs you upload, together with whatever is already inside them — most often the date taken, and sometimes the GPS location, which we use to place your trip map. Anything you type into an album: its title, captions, journal notes, a baby’s name and date of birth if you are making a first-year album. For a printed book, the delivery name, phone number and postal address you give us. Basic usage data about which pages were visited, described below.

Why we collect it. To build and store your album, to show it back to you, to make the PDF and the videos you download, to print and deliver a book if you order one, and to contact you about your own order. Nothing else.

Where it lives. Photographs and the files we generate from them are stored in a private Cloudflare R2 bucket; they have no public address and are shown to you through short-lived signed links. Everything else — accounts, album settings, captions, orders — is in a Supabase (PostgreSQL) database. The site runs on Vercel. Email is sent through Gmail or Resend. Analytics are handled by PostHog. These are our processors; none of them is permitted to use your data for their own purposes.

Analytics and cookies. We use PostHog to count page views and see which parts of the builder people get stuck on. It is loaded only after you agree, and if you decline, it is never loaded at all. Session recording is switched off. We do not use advertising cookies and we do not share anything with advertisers or data brokers. The strictly necessary cookies that keep you signed in are not optional, because without them the site cannot tell it is you.

How long we keep it. Your album and its photographs stay for as long as your account does; delete an album and its photographs are deleted with it. An album that is finished but never paid for has its photographs cleared from our storage three days later, which the download page tells you at the time. Records of orders, payments and deliveries are kept for as long as Indian tax law requires us to keep them, which is up to eight years from the end of the financial year they fall in. Ask us to close your account and everything not covered by that requirement is removed.

Sharing. We do not sell your data and we do not share your photographs with anyone. A printed order means giving your name, address and phone number to the printer and the courier, because that is how a parcel reaches you. We disclose nothing else unless the law compels us to.

Share links. If you turn on sharing for an album, anyone holding that link can view that one album and add photographs to it. The link does not give access to your account or to any other album, and you can see and remove anything that was contributed. Treat the link as you would a key.

Children. MemoraBooks is for adults. Baby albums are made BY parents ABOUT their children; we do not knowingly let anyone under 18 create an account, and a child’s photographs and date of birth are treated exactly like any other content in your album — private to you.

Your rights. You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or withdraw a consent you have given. Most of this you can do yourself from your account; for the rest, write to memorabooks1@gmail.com and we will respond within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

Grievance Officer. Under the Digital Personal Data Protection Act 2023, complaints about how your data is handled go to our Grievance Officer, reachable at memorabooks1@gmail.com. We aim to acknowledge within 48 hours and resolve within 30 days.

Security. Every account can reach only its own rows, enforced in the database itself rather than only in the app. Photographs sit behind signed links that expire. Nothing is perfect, and we will tell you promptly if something goes wrong that affects you.

Changes. If this notice changes materially we will say so on the site rather than quietly replacing it.