Privacy Notice

Cynthiab holding AB is the data controller for personal data processed in Memorza. This notice explains what we collect, why, and your rights under the GDPR.

Data we collect and why

• Host account data (name, email, login details) — to create and run your account (contract performance).
• Event data (event name, type, date) — to provide the album (contract performance).
• Guest content (photos, videos, optional name and memory texts) — to show them in the event's album and live screen (contract performance for the host; legitimate interest).
• Technical data (IP address, device and browser information, usage logs) — for security, fraud prevention and improving the Service (legitimate interest).
• Support messages — to help you (legitimate interest).

Who we share data with

• Service providers that host and run the Service (hosting, storage, authentication).
• Paddle.com, our Merchant of Record, for the sale of the product, payments, tax compliance and invoicing.
• Professional advisers such as lawyers and accountants.
• Authorities, where required by law.

International transfers

Some providers may process data outside the EU/EEA. In those cases we rely on adequacy decisions or Standard Contractual Clauses.

Retention

We keep account and event data while your account is active. Deleted events and their media are removed, and data is deleted or anonymised when no longer needed, unless we must keep it by law.

Your rights

You have the right to access, rectify, erase, restrict, port and object to processing of your data, and to withdraw consent. We respond within one month. You may also complain to the Swedish Authority for Privacy Protection (IMY).

Security

We use appropriate technical and organisational measures, including encryption in transit, private storage with time-limited links, and access controls.

Cookies

We only use essential browser storage to keep you signed in and remember your language. We do not use marketing cookies.