Privacy Policy
Last updated: April 2026
Your photo
Your photo is uploaded to our private, encrypted storage bucket. It is used only to generate your video postcard. Within 24 hours of your postcard being delivered, your original photo, the age-processed image, and the audio recording are permanently deleted from our servers. We do not use your photo for any other purpose, and we do not share it with any third party beyond the AI providers needed to create your video.
What we collect
- Your email address (to deliver your postcard)
- Payment information (processed by Stripe — we never see your card number)
- Your form inputs (name, age, lifestyle, career, dreams, etc.) — stored securely and used only to generate your script and video
- Your uploaded photo (deleted within 24 hours of delivery)
AI providers
To generate your video, we use the following services, each with their own privacy policies:
- OpenAI — script generation
- fal.ai — photo age processing and video lipsync (Hedra Character-3)
- ElevenLabs — voice synthesis
We share only the minimum data needed with each provider and do not permit them to retain your data for training purposes under our agreements.
Analytics
We use PostHog (EU region) for anonymous product analytics — page visits, conversion steps. No personally identifiable information is included. You can opt out by enabling Do Not Track in your browser.
Data retention
- Photo files: deleted within 24 hours of delivery
- Video postcard: available via signed link for 30 days, then deleted
- Order record: retained for financial/legal compliance (7 years)
- Email: retained to support your order and prevent fraud
Contact
Questions? Email us at hello@postcardfrom2036.com