Privacy Policy

01Information We Collect

We collect the following information:

• ●
  Organizer's email address
  Provided when creating a voice card. Used to send the recording link, management URL, and video-ready notification. Never used for marketing.
• ●
  Recipient's name
  Used as the addressee of the voice card.
• ●
  Recorder's name
  Displayed alongside the voice message.
• ●
  Voice recordings (audio data)
  Your recorded voice messages are stored to deliver the voice card. Voice recordings may constitute biometric data under certain laws (see Section 09 below).
• ●
  Photos
  Optionally attached to voice messages.
• ●
  Thank-you messages
  Audio replies from the recipient to the organizer.
• ●
  Feedback
  Optional comments or suggestions you submit for service improvement.
• ●
  Payment information
  Processed through Stripe. We never store credit card numbers or payment credentials on our servers.
• ●
  Access logs
  IP addresses and basic access data collected for security and abuse prevention.

The Service does not require account registration. We do not collect passwords.

02How We Use Your Information

We use the collected information only for the following purposes:

• ●Creating, managing, sharing, and generating voice card videos (including audio and photos)
• ●Facilitating thank-you messages from the recipient to the organizer
• ●Sending notification emails to the organizer (e.g., recording completion)
• ●Operating, maintaining, and improving the Service
• ●Preventing fraud and unauthorized use
• ●Responding to inquiries and support requests

03Third-Party Sharing

We do not sell, rent, or trade your personal information. We share personal information only in the following circumstances:

• ●When required by law, regulation, or legal process
• ●To protect the life, safety, or property of any person
• ●With your explicit consent

We use the following third-party service providers to operate the Service. These providers process data on our behalf under contractual obligations:

• ●Google Firebase (data storage, audio & photo file hosting)
• ●Google Cloud — Cloud Run / Cloud Storage (video generation & storage)
• ●Stripe (payment processing)
• ●Resend (email delivery)
• ●Vercel (web hosting)
• ●Sentry (error monitoring & performance tracking)
• ●ElevenLabs (text-to-speech for video narration)

04Data Retention & Deletion

Completed voice card data (audio, photos, and associated information) is retained indefinitely until the organizer requests deletion.

Incomplete voice cards are automatically deleted approximately 30 days after creation.

Video download links have an expiration period. Please download your video promptly. After download, file management is your responsibility.

To request deletion of your data, please contact us at yosegoe@ackcraft.com. We will process deletion requests within 30 days.

05Security

We implement the following measures to protect your data:

• ●All communications are encrypted via HTTPS (SSL/TLS)
• ●Access tokens are hashed to prevent unauthorized URL-based access
• ●Direct access to audio and photo files is restricted; files are served only through our servers
• ●Database and storage access is limited to server-side processes only

06Analytics & Advertising

We use the following tools for service improvement and advertising measurement. These tools may use cookies to collect access data. Data is processed statistically and does not personally identify you.

• ●
  Google Analytics (Google LLC)
  Used to analyze website usage. See Google's Privacy Policy for details.
• ●
  Meta Pixel (Meta Platforms, Inc.)
  Used for advertising measurement and optimization. See Meta's Data Policy for details.
• ●
  Vercel Analytics / Speed Insights (Vercel Inc.)
  Used to measure page performance. See Vercel's Privacy Policy for details.

You can disable data collection by adjusting your browser's cookie settings. Some features may not function properly with cookies disabled.

07Cookies

The Service uses cookies through the analytics and advertising tools described above. Our hosting provider (Vercel) may also use cookies for technical purposes.

08Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete it.

Users between the ages of 13 and 16 may use the Service only with parental or guardian consent.

If you believe a child under 13 has provided us with personal information, please contact us at yosegoe@ackcraft.com.

09Biometric Data Notice

Voice recordings collected through the Service may constitute biometric identifiers or biometric information under applicable state laws, including the Illinois Biometric Information Privacy Act (BIPA).

• ●
  Purpose of collection
  Voice recordings are collected solely for the purpose of creating, storing, and delivering voice cards as requested by the user.
• ●
  Storage & retention
  Voice recordings are stored until the organizer requests deletion, or until the purpose for which they were collected has been fulfilled. Incomplete recordings are deleted after 30 days.
• ●
  No sale or profit
  We do not sell, lease, trade, or otherwise profit from your biometric data.
• ●
  Destruction schedule
  When the purpose for collecting biometric data has been satisfied, or within 3 years of the individual's last interaction with the Service (whichever comes first), we will permanently destroy the biometric data.

By using the Service and submitting a voice recording, you acknowledge and consent to the collection, storage, and use of your voice data as described in this policy. You may withdraw consent at any time by contacting us to request deletion.

10Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• ●
  Right to know
  You can request details about what personal information we have collected, the sources, purposes, and third parties with whom it is shared.
• ●
  Right to delete
  You can request deletion of your personal information. We will process your request within 30 days.
• ●
  Right to opt-out of sale
  We do not sell your personal information. There is nothing to opt out of.
• ●
  Right to non-discrimination
  We will not discriminate against you for exercising any of your privacy rights.
• ●
  Right to data portability
  You can request a copy of your personal information in a commonly used, machine-readable format.

California residents (CCPA/CPRA): Under the California Consumer Privacy Act, you have the rights listed above. We have not sold personal information of any consumer in the preceding 12 months. To exercise your rights, contact us at yosegoe@ackcraft.com.

We will verify your identity before processing requests. You may designate an authorized agent to make requests on your behalf.

11Do Not Track Signals

Some browsers send "Do Not Track" (DNT) signals. There is currently no industry standard for responding to DNT signals. We do not currently respond to DNT signals, but we limit tracking to the analytics tools described in Section 06.

12International Data Transfers

Our company is based in Japan. Your data may be stored and processed in Japan, the United States, or other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these countries. We ensure appropriate safeguards are in place for international data transfers.

13Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

14Contact Us

For questions about this Privacy Policy, to exercise your privacy rights, or to request data deletion, please contact us: