Privacy Policy

This Privacy Policy explains how The Memory Booth ("we", "us", "our") handles personal information when you use our website and services at thememorybooth.in.

The Memory Booth is a video guestbook for weddings. Couples create an event, guests leave spoken video messages with an AI host, and the couple watches those messages in a private gallery. We operate from India.

By using the service, you agree to this policy. If you do not agree, do not use the service.

1. Who this covers

• Couples / hosts — people who sign in, create a wedding guestbook, and manage the gallery.
• Guests — people who open a guestbook link or use a venue kiosk and leave a video message.
• Enquirers — people who send us a contact or booking request from the site.

2. Google user data (Sign in with Google)

Couples can sign in with Google. When you do, Google shares with us only the information needed to create and run your account. We request these Google OAuth scopes:

• openid, email, profile — your Google account ID, email address, name, and profile photo (if available).

We use that Google user data only to:

• authenticate you and keep you signed in;
• create and identify your The Memory Booth account;
• show your name or email in the product (for example on your dashboard);
• contact you about your account, payments, or service issues when needed.

We do not use Google user data for advertising. We do not sell Google user data. We do not share Google user data with third parties except as processors needed to run sign-in (see Supabase below), or when required by law. We do not access Gmail, Drive, Contacts, Calendar, or any other Google product data.

Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

3. Other information we collect

Account and event data

If you sign in with an email magic link instead of Google, we store the email you provide. When you set up a guestbook we store details you enter: couple names, hashtag, function dates, theme, questions, guest link slug, and whether the event is closed or paid.

Guest messages

When a guest records a message we collect: the video/audio recording, a transcript of the conversation when available, a guest name the AI host captured, language preference, timestamps, and which event/prompt the clip belongs to. Guests should only record if they are comfortable sharing that message with the couple who created the event.

AI host conversations

The live host is powered by Google's Gemini. Guest microphone audio is streamed to Google so the host can listen and reply in real time. The mixed recording of the guest and host is stored in our private video storage for the couple.

While we use Google's free tier for the host, Google may use that audio to improve its products under Google's terms. When we turn on paid/billing for the host API for a wedding, that training use stops for those sessions under Google's then-current terms. Either way, guest videos in the couple's gallery remain private to that couple's account.

Payments

Gallery upgrades (for example Shagun) are processed by Razorpay. We receive payment status, amount, and identifiers needed to unlock downloads. Card or UPI details are handled by Razorpay; we do not store full card numbers.

Leads and support

If you submit the contact or booking form, we store the email or phone number you enter and which plan you asked about, so we can reply.

Technical logs

Our hosting and database providers may process standard technical data such as IP address, device/browser type, approximate location derived from IP, and request timestamps, for security, reliability, and abuse prevention.

4. How we use information

• to provide, secure, and improve the guestbook product;
• to show couples their guest messages and let them download unlocked galleries;
• to process payments and prevent fraud;
• to answer enquiries and provide support;
• to comply with law and enforce our Terms.

5. How we share information

We share personal data only with:

• Supabase — authentication, database, and private video storage;
• Google — Sign in with Google (account data you authorize) and Gemini Live (guest audio for the AI host);
• Razorpay — payment processing when you buy an upgrade;
• Vercel — website hosting and application logs;
• professional advisers or authorities when required by law or to protect rights and safety.

We do not sell personal information. Couples control who sees their guest videos inside the product (their signed-in gallery). Guests' messages are shared with the couple who owns that event by design.

6. Storage, retention, and security

Account and event data, and guest videos, are stored with our providers (currently Supabase, typically in a region we select such as India). We keep wedding videos for as long as the couple's account and event remain active, which we describe as indefinite storage unless the couple deletes the event or asks us to delete data. We use private storage buckets, signed URLs, and account sign-in so galleries are not public links.

No method of transmission or storage is perfectly secure. We take reasonable technical and organisational steps, but we cannot guarantee absolute security.

7. Your choices and rights

• Couples can close a guestbook link, and may request deletion of their account or event data by contacting us.
• Google Sign-In users can revoke The Memory Booth's access in their Google Account permissions.
• Guests who want a specific message removed should contact the couple first; the couple (or we, on verified request) can remove clips from the gallery.

Depending on where you live (including under India's digital personal data protection laws), you may have rights to access, correct, or erase personal data we hold about you. Contact us to exercise those rights. We may need to verify your identity before acting.

8. Children

The product is aimed at adults planning weddings. We do not knowingly create accounts for children under 13. A guest of any age may appear in a message if a family chooses to record one; the couple is responsible for that use.

9. International processing

Some providers may process data outside India. By using the service you understand that your information may be transferred to and processed in other countries where those providers operate, under their safeguards and applicable law.

10. Changes

We may update this policy. We will change the "Last updated" date above and, for material changes, provide a more prominent notice on the site when practical. Continued use after an update means you accept the revised policy.

11. Contact

Privacy questions, deletion requests, and Google user-data questions: use Contact us on the homepage, or email the support address we publish on that page once a custom domain mailbox is live. Operator: Shevil Panchal, India.

This page is written for transparency and for Google OAuth / product compliance. It is not formal legal advice. If you need a lawyer-reviewed policy for your business entity, have counsel edit this text.