Privacy Policy

MemoryChain is a service built around the most private things in people's lives. The photos you upload may be of a parent in their final months. The voice you record may be the only recording of someone your recipient will ever have. The answers you write may be things you have never said out loud before.

We understand that. And we handle everything you give us with the care it deserves.

This Privacy Policy is governed by the Digital Personal Data Protection Act, 2023 (DPDPA) of India. It explains what personal data we collect, why we collect it, how we store and protect it, and when we delete it. If you have any questions that this page does not answer, please write to us at support@memorychain.in.

We collect only the data that is strictly necessary to process and deliver your order. Here is the complete list — nothing is collected beyond this.

Every piece of data we collect has a single, specific purpose. We do not collect anything speculatively or "just in case."

• Your name and recipient's name — To personalise your diary, album, and all output files with the correct "To" and "From" details.
• WhatsApp number and email — To send your delivery notification, your OTP for download access, and any order-related communications. We do not use these for marketing without your explicit consent.
• Question answers — To generate your personalised Memory Diary using our AI pipeline. Your answers are the raw material for your diary pages.
• Photographs — To build your Memory Album. Photos are placed into album page layouts and rendered into your PDF and (where applicable) video output.
• Voice recording — To produce your personalised voice message audio file, and (Classic/Legacy) to clone your voice for diary narration using Minimax Audio.
• Portrait photos and AI audio clips (Legacy) — To generate your 3 AI video messages using HeyGen, where your portrait photo is animated to speak in your voice.
• Order metadata — To track your order through our pipeline, generate your unique Memory ID, manage your download counter, and maintain our delivery records.
• Payment reference — To confirm payment and match it to your order. We never store card or banking data.

All your data is stored on Amazon Web Services (AWS) infrastructure located in the ap-south-1 (Mumbai, India) region. Your data does not leave India's AWS infrastructure under normal processing conditions.

• Amazon S3 — Your uploaded files (photos, voice recording, portrait photos) and your final output files (diary PDF, album PDF, video, audio) are stored in a private S3 bucket under your unique Memory ID folder. No file is publicly accessible. All access is via pre-signed URLs with 15-minute expiry.
• Amazon DynamoDB — Your order metadata — Memory ID, contact details, tier, pipeline status, download counter, and expiry date — is stored in DynamoDB. This is used to manage your order status and delivery access.
• Amazon CloudWatch — System logs are maintained for pipeline monitoring and error tracking. Logs do not contain your photos, voice, or question answers.

We do not keep your data longer than necessary. Here is exactly what happens to your files at each stage of your order lifecycle.

Access to your data is controlled, restricted, and governed by the principle of minimum necessary access.

• Our automated pipeline: The MemoryChain processing pipeline — Lambda functions, EC2 workers — accesses your files only to process your order. Each function has access only to the specific files it needs for its specific task.
• MemoryChain operators: In the event of a technical failure requiring manual intervention, an authorised MemoryChain operator may access your order records and pipeline logs — but not your submitted content (photos, voice, answers) unless absolutely necessary to diagnose a specific failure.
• Third-party processors: Certain data is processed by third-party services as described in Section 07 below. These processors access only the minimum data needed for their specific function and are bound by their own privacy commitments.
• Nobody else: No other person, company, or entity has access to your data. We do not share, sell, rent, or disclose your personal data to any third party beyond what is described in this policy.

To deliver your order, MemoryChain uses the following third-party services as data processors. Each receives only the minimum data required for their specific function.

Each of these services operates under its own privacy policy and data processing terms. By placing an order with MemoryChain, you acknowledge that your data may be processed by these third-party services for the specific purposes described above.

We believe that being explicit about what we will not do is just as important as explaining what we do. These are absolute commitments — not caveated, not conditional.

• We will never sell your personal data, your photos, your voice recording, or your answers to any third party.
• We will never use your submitted content — photos, voice, answers — for advertising, model training, or any purpose other than creating your order.
• We will never show your identifiable content (your face, your voice, your name, your memories) to any other customer or the public without your explicit written consent.
• We will never store your card or banking details — payment is handled entirely by our payment gateway.
• We will never contact you for marketing purposes using your WhatsApp number or email without your explicit consent.
• We will never keep your data beyond the defined retention periods described in Section 05.

Under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data held by MemoryChain.

To exercise any of these rights, write to us at support@memorychain.in with your Memory ID and the specific right you wish to exercise. We will respond within 30 days.

MemoryChain is intended for users who are 18 years of age or older. We do not knowingly collect personal data from individuals under the age of 18 without verifiable parental or guardian consent.

If you are placing an order on behalf of a minor — for example, creating a memory package that includes a child's photos or voice — you confirm that you are the parent or legal guardian of that child and that you have the right to submit their data on their behalf.

If you believe that a minor's personal data has been submitted to MemoryChain without appropriate consent, please contact us immediately at support@memorychain.in and we will take immediate action to review and, where appropriate, delete that data.

MemoryChain may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make changes, the updated version will be published on this page with a revised effective date.

For significant changes that affect how we handle data for active orders, we will make reasonable efforts to notify affected customers via their registered WhatsApp number or email address.

Your continued use of MemoryChain after a policy update constitutes acceptance of the revised Privacy Policy. We recommend reviewing this page periodically.

Under the Digital Personal Data Protection Act, 2023, MemoryChain designates its support team as the point of contact for all privacy-related queries, requests, and grievances.

• Email: support@memorychain.in
• Response time: We will acknowledge your request within 72 hours and resolve it within 30 days.
• Escalation: If you are not satisfied with our response to your privacy grievance, you may escalate to the Data Protection Board of India once it is constituted under DPDPA 2023.

When contacting us about a privacy matter, please include your Memory ID (if applicable) and a clear description of your request or concern. This will help us respond accurately and quickly.