Data Protection
How we handle and protect your personal data
🔐
What personal data we handle
👤Your name and email address
📧Recipient's name, email and date of birth
💌Capsule message content
❤️Your relationship to recipient
📅Capsule unlock dates
💳Payment info (via Lemon Squeezy, not stored by us)
🛡️
How we protect your data
- ✅ All data encrypted in transit using HTTPS/TLS
- ✅ All data encrypted at rest in Supabase (EU servers)
- ✅ Row Level Security (RLS) — you can only access your own capsules
- ✅ Email verification required before account activation
- ✅ Passwords hashed and never stored in plain text
- ✅ No advertising or tracking cookies used
- ✅ Payment data never stored — handled by Lemon Squeezy
- ✅ Access to personal data strictly limited to authorized personnel
📅
How long we keep your data
Text capsulesForever — even after cancellation
Audio/Video capsulesWhile subscribed + 6 months grace period
Account dataDeleted within 30 days of deletion request
Support ticketsRetained for 2 years
Payment recordsAs required by law (7 years)
⚖️
Your GDPR rights
Access
Get a copy of your data
Rectification
Correct inaccurate data
Erasure
Request deletion of your data
Portability
Export your data
Objection
Object to data processing
Restriction
Limit how we use your data
To exercise any right, email us at Contact SupportWe respond within 30 days.
🤝
Third party services we use
Supabase
Database & Authentication
Vercel
Hosting & Deployment
Resend
Email Delivery
Lemon Squeezy
Payment Processing
We never sell your data to third parties.
📬
Questions about your data?
We take data protection seriously. Our support team is here to help.
Contact Support