Privacy Policy

1. Who we are

Pamtiva is operated by Pamtiva Studio Pty Ltd (ACN 701 225 201) ("Pamtiva", "we", "us", or "our"). This Privacy Policy applies to the Pamtiva website, memory creator, account area, AI features, payment flow, and private gift links (together, the "Service").

Privacy contact: [email protected]

2. Information we collect

Account information

When you create or use an account, we may collect your name, email address, profile image, sign-in provider identifiers, email verification status, and account security information. Passwords are stored as cryptographic hashes, not as readable passwords.

Memory content

We collect the content you add to Pamtiva, including uploaded photos, prompts, generated and edited notes, titles, dates, places, occasions, tones, intended recipients or subjects, layout choices, crops, exports, and draft information. For a Moving Memory, this also includes the selected photo sequence, playback timing and transitions, preview image, and rendered GIF or MP4 file. Photos and moving outputs may include personal information about you or other people.

Personalisation and learning context

To make future suggestions feel more personal, Pamtiva may record choices such as preferred tones and note length, titles you select, phrases you remove, how you edit generated notes, and which photo recommendations you keep, replace, or remove. We may store limited note snippets and derived preference signals. User identifiers in aggregate learning records are pseudonymised, but the underlying content may still be personal information.

Gift and sharing information

If you create a private gift link, we collect the recipient name you enter, your sender name and message, the linked memory, sharing timestamps, and basic counters such as sender previews, recipient opens, and the number of times you use Pamtiva's share action. A Moving Memory gift also makes its selected photo sequence and playback settings available through the private link. We do not use these counters to identify the recipient.

Friend invitations and rewards

If you invite a friend, we collect the email address you enter, the invitation link and delivery status, whether the invitation is accepted, the profiles connected to the referral, and the discount rewards issued or redeemed. We use this information to deliver the invitation, prevent duplicate invitations and misuse, connect acceptance to the invited email, and administer single-use rewards.

Payments and credits

We collect purchase amounts, currency, credit balance and ledger information, checkout status, transaction identifiers, and limited billing references. Payment card details are entered into Stripe's checkout service and are not stored by Pamtiva.

Print and delivery information

If you order a printed memory, we collect the recipient name, delivery address, optional email and mobile number, print size and finish, optional branding details such as sender name, recipient name, and message, delivery method, fulfilment status, tracking details, and cancellation or refund records. We send the finished print file, any generated branding artwork, order specifications, and the recipient and delivery details needed to produce and deliver the order to Prodigi, our print-on-demand fulfilment provider. If you choose Google address suggestions, the address search text and selected place details are processed by Google; you can instead enter the address manually.

Technical and local information

Our hosting and security providers may process basic request information such as IP address, browser or device information, timestamps, and error or security logs. Pamtiva also uses necessary cookies, local browser storage, and IndexedDB to keep you signed in, preserve guest credits, and temporarily protect an in-progress draft during sign-in.

3. How we use information

We use personal information to:

• provide, save, render, export, and privately share your memories;
• authenticate accounts and keep the Service secure;
• generate notes, suggest titles, and recommend suitable photos when you use AI features;
• personalise future writing and photo recommendations from your choices;
• process payments, credits, discounts, referral rewards, refunds, and transaction records;
• send verification, password reset, friend invitation, print status and dispatch updates, other service messages, and support responses;
• diagnose errors, prevent misuse, and improve reliability and design; and
• comply with legal obligations and protect users, Pamtiva, and others.

We do not sell your memories or personal context, and we do not use them for third-party behavioural advertising.

5. How personalisation works

Pamtiva uses your own editing and selection patterns to build a lightweight personalisation profile. For example, it may remember that you prefer shorter notes, a particular tone, concrete visual details, or candid photos. These signals help shape future suggestions; they are not used to make decisions that have legal or similarly significant effects on you.

We may also use pseudonymised or aggregated interaction patterns to improve Pamtiva's general writing and recommendation rules. Proposed global rules are reviewed before being applied. We do not allow other users to view your personalisation profile.

6. When we share information

We disclose information only as reasonably needed for the Service, including to:

• cloud hosting and storage providers, including Render and Cloudflare, for databases, application hosting, and private object storage;
• OpenAI, when you use AI note generation, refinement, or photo analysis;
• Stripe, for checkout, payment processing, fraud prevention, and refunds;
• Prodigi and its fulfilment network, for print production, fulfilment, delivery, order tracking, reprints, support, and cancellation; this includes the finished print file, any generated branding artwork, order specifications, and the recipient and delivery details needed by the selected lab and courier. Pamtiva acts as controller of this information and Prodigi generally acts as our processor when fulfilling an order. Prodigi may use group companies, production partners, fulfilment partners, and logistics providers in different countries. See Prodigi's Privacy & Cookie Policy and Subprocessor & Fulfilment Network Notice;
• Google Maps Platform, when you choose address suggestions during print checkout;
• Resend, for account verification, password reset, friend invitations, print dispatch, and other service emails;
• Google, when you choose Google sign-in;
• WhatsApp, when you choose to open its sharing flow; the message and private link you choose to send are then handled under WhatsApp's terms and privacy policy;
• professional advisers, insurers, regulators, courts, or law enforcement where reasonably necessary or legally required; and
• a buyer or successor in connection with a genuine merger, financing, reorganisation, or sale, subject to appropriate confidentiality and privacy safeguards.

Service providers may use information only for their contracted services and their own legal and security obligations.

7. Private gift links

Gift links are designed to be unlisted and difficult to guess, but they are bearer links: anyone who receives or forwards the link may be able to open the memory, including the selected photos used in an interactive Moving Memory. Choose recipients carefully. You can delete the gift from your account to disable its Pamtiva gift link. Deleting the underlying memory will also make its stored export unavailable.

8. Storage, security, and overseas processing

We use reasonable technical and organisational safeguards, including encrypted network connections, access-controlled cloud infrastructure, password hashing, secure session cookies in production, private object storage, and short-lived signed file links. No online service can guarantee absolute security, so please use a strong password and protect private gift links.

Our providers may process information in Australia, the United States, and other countries where they or their subprocessors operate. Privacy laws in those countries may differ from Australian law. We take reasonable steps to use reputable providers and protect information in accordance with this policy and applicable law.

9. Retention and deletion

We keep account information and saved content for as long as your account is active or as reasonably needed to provide the Service. Temporary render jobs and verification codes expire after short operational periods. Transaction, security, and dispute records may be kept for longer where required for legal, accounting, fraud prevention, or enforcement purposes.

When you successfully delete a memory, Pamtiva removes its database record and associated saved photos, exports, and thumbnails from active storage. Deleting a gift disables that gift record and link. Provider backups or security logs may retain limited copies for a reasonable period before they are overwritten.

Print order, payment, fulfilment, tracking, cancellation, and refund records may be retained for legal, accounting, customer support, and dispute purposes after the related memory is deleted. Prodigi retains supplied print imagery for a limited operational period to fulfil orders and support reprints. Prodigi currently states that images are typically deleted from its systems after around 45 days, subject to its data-protection policies and any longer retention required by law or needed to resolve an order or dispute.

Personalisation and service-improvement records may be retained in pseudonymised or aggregated form where they are no longer reasonably linked to you. Because some learning records contain limited snippets, you may contact us to request access to or deletion of learning context associated with your account.

10. Your choices and rights

Depending on applicable law, you may ask us to access, correct, export, or delete personal information we hold about you, object to or restrict certain processing, or withdraw consent where processing relies on consent. You can edit or delete individual memories and gifts from your account. For account deletion or personalisation requests, contact us using the details below.

We may need to verify your identity before completing a request. Some information may be retained where required by law or reasonably necessary to establish, exercise, or defend legal claims.

11. Children and other people in photos

Pamtiva accounts are not intended for children under 18. Adults may create memories that include children or other people only where they have an appropriate right, authority, or consent to upload and use that content. Please avoid including unnecessary sensitive information in prompts, notes, or gift messages.

12. Complaints and contact

Questions, access or correction requests, deletion requests, and privacy complaints can be sent to:

Privacy Officer, Pamtiva Studio Pty Ltd
ACN: 701 225 201
Email: [email protected]

We will acknowledge and investigate privacy complaints within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner or another regulator available to you.

13. Changes to this policy

We may update this policy when the Service, our providers, or legal requirements change. We will publish the updated date and provide additional notice where a change materially affects how we use personal information.