Privacy Notice

1. Who we are

Poetic Memory is operated by Trinity Johnson, a sole proprietor based in the United States of America. For the personal data described in this notice, Trinity Johnson is the data controller. You can reach us at hello@poeticmemory.com.

2. Information we collect

• Account data — email address, hashed password, display name.
• Content — prompts you submit and poems you generate, save, favorite, or organize into collections.
• Support communications — messages you send to us.
• Usage & device data — log data, IP address, browser and device identifiers, pages visited, and feature usage.
• Cookies & similar technologies — strictly necessary cookies for login/session, and limited analytics cookies (see Section 9).

Payment card details are collected and processed by Paddle and never touch our servers.

3. How we use your information

• Create and operate your account, deliver the Service, and provide generated poems — legal basis: performance of a contract.
• Provide customer support and respond to your inquiries — legitimate interests / contract.
• Maintain security, prevent fraud, and enforce our Terms — legitimate interests / legal obligation.
• Improve and develop the Service (in aggregated or de-identified form where possible) — legitimate interests.
• Send transactional emails (account, billing, security) — contract / legitimate interests. Marketing emails are only sent with your consent and you can opt out at any time.
• Comply with legal obligations — legal obligation.

4. Who we share it with

We share personal data only with:

• Service providers / sub-processors — cloud hosting, database, authentication, analytics, and AI model providers acting on our instructions to operate the Service.
• Paddle.com, Inc. — Merchant of Record. Paddle processes payments, manages subscriptions, calculates and remits taxes, and issues invoices. Paddle acts as an independent controller for payment data. See Paddle's privacy policy.
• Professional advisers — legal, accounting, and tax advisers under confidentiality obligations.
• Authorities — when required by law, court order, or to protect rights, safety, or property.

We do not sell your personal data.

5. Data retention

We keep personal data only as long as needed to provide the Service, comply with legal obligations (e.g., tax and accounting records), resolve disputes, and enforce our agreements. Account and content data are deleted or anonymized within a reasonable period after you close your account, except where we are legally required to retain them.

6. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and least-privilege practices. No system is perfectly secure; please report suspected vulnerabilities to hello@poeticmemory.com.

7. International transfers

We are based in the United States and our service providers may process data in the U.S. and other countries. Where data is transferred from outside the U.S., we rely on appropriate safeguards such as Standard Contractual Clauses where applicable.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. California residents have specific rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of "sharing" of personal information (we do not sell personal information). UK and EEA residents have rights under the UK GDPR / EU GDPR, including the right to lodge a complaint with a supervisory authority; we will respond to verified requests within one month.

To exercise any right, email hello@poeticmemory.com.

9. Cookies

We use strictly necessary cookies for authentication and session management, and a small number of analytics cookies to understand product usage. We do not use advertising cookies. You can manage cookies through your browser; disabling necessary cookies will prevent login.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

11. Changes to this notice

We will update this notice as the Service evolves. Material changes will be highlighted in the Service or by email.

12. Contact

Trinity Johnson — hello@poeticmemory.com. See also our Terms and Refund Policy.