Privacy Policy
Effective: October 7, 2026
Families trust us with very personal photos, often at one of the hardest times of their lives. This policy explains what information we collect, why we need it, who helps us process it, how long we keep it, and the choices and rights you have.
The short version
- We collect the photos and text you add, your email when you give it to us, and basic technical data.
- We use them only to make and deliver your video, help you, and handle payments and refunds.
- We don't sell your information, don't use your photos for advertising, and don't train AI on them.
- Paid projects are deleted 12 months after payment, unpaid ones 90 days after the last change, or sooner if you ask.
- You can ask to see, correct or delete your information at any time.
1. Who we are
InMemoryVideo is operated by Dmitrii Korpachev, an individual based in Ubud, Bali, Indonesia ("we", "us", "our"). We decide how and why your information is used, which makes us the "controller" under data protection laws such as the GDPR. For any privacy question or request, write to support@inmemoryvideo.com.
2. What this policy covers
This policy covers inmemoryvideo.com, projects and memorial pages created with InMemoryVideo, our early access list, and the emails we send. It doesn't cover other websites you reach through links from us. Payments are handled by Dodo Payments on its own checkout pages, under its own privacy policy, as explained in section 8.
3. What we collect
| Type of information | Examples | Where it comes from |
|---|---|---|
| Project content | Photos; the name and dates of the person you are remembering; captions and other text; your choices of order, style and music | You, and people you invite through a family link |
| Contact details | Email address; first name if you give it | You, when you join early access, pay or write to us |
| Early access details | Roughly when the service is, if you tell us | You |
| Purchase information | What you bought, amount, currency, date, country, payment status; never your full card number | Dodo Payments |
| Messages | Emails you send us and our replies | You |
| Technical data | IP address, approximate location from it, browser and device type, pages requested, dates and times, error reports | Your browser, automatically |
| Derived data | Estimated age range for each photo, used only to suggest an order; video settings | Created by the service from your project |
We don't ask for, and don't want, sensitive information such as health details, religious beliefs or government ID numbers. Photos and captions can sometimes reveal such things, for example a church service or a hospital room. We don't analyze photos for that and don't use it for anything other than making your video.
4. How we use it and why
The GDPR and some other laws require us to name a legal basis for each use. Here they are.
| What we do | Information used | Legal basis |
|---|---|---|
| Make your preview and video, run the memorial page, keep your project at its link | Project content, derived data | Performing our contract with you |
| Deliver your purchase, send the receipt and download link | Contact details, purchase information | Performing our contract with you |
| Process refunds, keep accounting and tax records | Purchase information, contact details | Legal obligation; performing our contract |
| Answer your messages and help with your project | Messages, contact details, project content when you ask for help | Performing our contract; our legitimate interest in helping you |
| Tell you when you can start (early access) | Contact and early access details | Your consent, which you can withdraw at any time |
| Keep the service secure, prevent fraud and abuse, fix errors | Technical data, purchase information | Our legitimate interest in a safe and working service |
| Handle copyright complaints, removal requests and legal claims | Project content, messages | Legal obligation; our legitimate interest in protecting rights |
We don't sell your information. We don't use your photos or project content for advertising, for profiling, or to train AI models, and we don't let our providers do so.
5. Putting photos in order
To suggest an order from childhood onward, the service looks at each photo and estimates roughly how old the people in it appear. This works much like a person guessing an age at a glance.
- It doesn't identify who anyone is and doesn't compare faces across photos to recognize people.
- It doesn't create or keep face templates or any other data that could identify a person from their face.
- The only thing kept is an estimated age range for each photo, stored with your project and deleted with it.
- The result is a suggestion. You can move any photo, or arrange the photos yourself.
No decision with legal or similarly significant effects on anyone is made by automated means.
6. Photos of other people
Memorial videos include the person who has died and often their relatives and friends, some of them children. Privacy laws generally protect living people, so we treat everyone in your photos with the same care. Before adding a photo, please consider whether the people in it would be comfortable with it being shown.
If you appear in photos in someone else's project, or you are the parent of a child who does, and you want a photo removed, write to us with the link and we'll help. We may need to contact the person who created the project.
7. Who can see your project
Projects and memorial pages aren't listed publicly and are set up so that search engines don't index them. Anyone who has a link can open what it points to: a project link opens the project, a family link lets people add photos, and a memorial page link shows the video. Share links only with people you trust. You can turn off the family link and ask us to take down a memorial page at any time.
8. Who we share information with
Dodo Payments
Dodo Payments is the merchant of record for purchases. When you pay, you give your payment details directly to Dodo Payments, which uses them to process the payment, handle tax and invoicing, and prevent fraud, under its own privacy policy. Dodo Payments shares with us the purchase information listed in section 3.
Service providers
We use a small number of providers that process information on our behalf and only on our instructions:
- hosting and serverless computing (Vercel Inc., United States);
- domain, network security and file storage (Cloudflare Inc., United States);
- email delivery (Resend, United States);
- web fonts (Google Fonts, Google LLC, United States), which receives your IP address when the page loads fonts;
- cloud computing for image analysis and video rendering;
- email hosting for our support inbox.
These providers are bound by contracts that limit how they may use the information and require them to protect it.
When the law requires it
We may disclose information if a valid legal request requires it, or if it's needed to protect someone's safety, to investigate fraud or abuse, or to establish or defend legal claims. Where the law allows, we'll tell you first.
If the service changes hands
If InMemoryVideo is transferred to another business, your information may be transferred with it. The new owner will have to respect this policy, and we'll tell you before it happens.
9. Cookies
We use only the cookies and browser storage needed for the site to work, such as keeping your project open. We don't use advertising cookies. If we add analytics, we'll ask for your consent where the law requires it and update this policy and our Cookie Policy first.
10. How long we keep it
| Information | How long |
|---|---|
| Paid projects: photos, video, memorial page | 12 months after payment, then deleted |
| Unpaid projects | 90 days after the last change, then deleted |
| Early access requests | Until you can start, or 12 months, whichever comes first |
| Purchase and refund records | As long as tax and accounting laws require, usually up to 10 years |
| Emails with us | 2 years after your last message |
| Server and error logs | Up to 30 days |
| Backups | Deleted data is removed from backups within 30 days |
You can ask us to delete a project sooner at any time. A deleted project can't be restored, and its memorial page stops working.
11. How we protect it
Files are stored in private storage, not on public web addresses, and are opened only through links that are hard to guess. Data is encrypted when it travels between your device and us. Access to project content is limited to what's needed to run the service and to help you when you ask. No system is perfectly secure; if a breach affects your information, we'll tell you and the authorities as the law requires.
12. International transfers
We are based in Indonesia, and our providers operate mainly in the United States and the European Union. Your information may therefore be processed outside the country where you live. When we transfer information from the European Economic Area, the United Kingdom or Switzerland, we rely on safeguards the law recognizes, such as the European Commission's Standard Contractual Clauses or the provider's certification under the EU-US Data Privacy Framework.
13. Your rights
Wherever you live, you can ask us to:
- tell you what information we hold about you and give you a copy;
- correct information that is wrong;
- delete your information or your project;
- stop using your information for a particular purpose;
- withdraw consent you gave us, for example for early access emails.
If you live in the European Economic Area, the United Kingdom or Switzerland, you also have the right to restrict processing, to object to processing based on our legitimate interests, to receive your data in a portable format, and to complain to your local data protection authority. We'd appreciate the chance to help first.
To make a request, write to support@inmemoryvideo.com. To protect your information, we may ask you to write from the email address connected to your project or purchase, or to confirm the project link. We answer within 30 days, or within the period your local law sets if it's different. Making a request is free.
14. Notice for US residents
Several US states, including California, Colorado, Connecticut, Virginia, Utah, Texas and Oregon, give residents specific privacy rights. Whether or not a particular law applies to a business of our size, we give these rights to all US residents.
What we collect and why
In the last 12 months we have collected these categories of personal information, for the purposes described in section 4: identifiers (email, name, IP address); commercial information (purchase records); internet activity (pages requested and technical data); approximate geolocation from your IP address; audio-visual information (photos you upload); and inferences limited to estimated age ranges for photos. Retention periods are in section 10.
No sale, no sharing for advertising
We don't sell personal information, don't share it for cross-context behavioral advertising, and don't use it for targeted advertising or profiling. We don't use sensitive personal information to infer characteristics about anyone. We treat a Global Privacy Control signal from your browser as a request to opt out of sale and sharing, which we already honor for everyone.
Your rights
You can ask to know, access, correct and delete your personal information, and to receive a copy in a portable format. You can use an authorized agent; we'll ask for proof of their authorization. We won't treat you differently for using your rights.
Appeals
If we decline your request, you can appeal by replying to our answer with the word "Appeal". We'll respond within 45 days. If you disagree with the outcome, you can contact your state attorney general.
California "Shine the Light"
We don't share personal information with third parties for their own direct marketing.
15. Emails we send
We send emails you need: receipts, download links, replies to your messages, and important notices about your project or purchase. If you join early access, we'll email you when you can start. We don't send newsletters or marketing emails unless you ask for them, and every non-essential email will have a way to unsubscribe.
16. Children
The service is meant for adults. We don't knowingly collect personal information directly from children under 13, or under 16 in the European Economic Area. Children's photos may appear in memorial videos when a family member adds them, and we protect them as described in this policy. If you believe a child has given us their information directly, write to us and we'll delete it.
17. Changes to this policy
We'll update this policy when our service or the law changes, and show the new date at the top. If a change is important, for example a new use of your photos, we'll say so on the site and, where we have your email, tell you before it takes effect.
18. Contact
Privacy questions and requests: support@inmemoryvideo.com.
InMemoryVideo, operated by Dmitrii Korpachev, Ubud, Bali, Indonesia.