MemoryIndex.io
Privacy Policy
Last updated: October 29, 2026
1. Information we handle
MemoryIndex.io handles account and subscription details, email addresses, newsletter preferences, support messages, and quote or advertising inquiries. Quote inquiries include the name, email, phone, location and requested components and quantities you provide. Hosting and measurement services may process IP addresses, browser/device details, pages visited, timestamps and usage logs. Affiliate-click reports record product category, page, language and placement.
2. Why we use it
We use information to provide accounts and paid access, process payments, respond to inquiries, send requested newsletters and service messages, measure site and ad performance, prevent abuse and meet legal obligations. Where applicable, our legal bases are contract performance, legitimate interests in operating and securing the service, consent for optional tracking or communications, and legal obligations. To stop newsletters, contact us below; use an unsubscribe link if included in the email.
3. Providers and disclosures
We use Lovable Cloud for hosting, accounts and storage, Stripe for checkout and billing, and email providers for delivery. Payment-card details are handled by Stripe; we do not store full card numbers. Inquiry details are sent to our operator for assessment and reply. Google may receive measurement data; Amazon may receive information when you follow an affiliate link. Providers process information under their own policies and applicable agreements. We may disclose data to comply with law, protect rights or in a business transfer subject to legal safeguards. We do not sell your contact details.
4. Cookies, analytics and advertising
Essential cookies and browser storage support sign-in, settings and checkout. Site analytics may measure visits. Google Ads measurement may send browser details, pages visited, ad interactions and a checkout reference; we do not send your name or email in the purchase event. Our Google Ads consent control asks visitors in the EEA, UK, Switzerland and Canada before enabling that tag; elsewhere it may be enabled by default. You can refuse or change this choice through Cookie settings below. These controls govern Google Ads measurement, not every third-party service. Advertising measurement may qualify as sharing under some privacy laws; contact us to exercise applicable opt-out rights. Amazon and other external sites control their own cookies after you visit them.
5. Retention, security and transfers
We retain information only as needed for the purposes above, account administration, legal records and dispute handling, then delete or de-identify it where appropriate. We use reasonable safeguards, but no service is completely secure. Providers may process data outside your country; ask us for applicable transfer arrangements; this policy does not establish or certify a transfer safeguard. The service is not directed to children; contact us if a child has provided personal information.
6. Your rights and changes
Depending on your location, you may request access, correction, deletion, portability, restricted processing, objection, withdrawal of consent, or opt out of sale/sharing. Email us below; we may verify your identity and retain records required by law. You may also complain to your local privacy regulator. Withdrawing consent does not affect prior lawful processing. Policy updates appear here with a new date; material changes are notified where required.
7. Website-specific data protection
Account information links sign-in to plan status, billing identifiers and API access. Newsletter records include email, signup source and active status. Quote and contact messages may pass through our email delivery service and Gmail operator inbox; they are used to assess and answer the request, not to confirm stock availability. Do not submit sensitive health, biometric, identity-document or confidential third-party information unless specifically necessary and lawfully agreed. We do not intentionally collect those categories for ordinary website use. Access controls and provider security support protection of stored information; no encryption certification, fixed retention period or absolute security guarantee is claimed. Security incidents are assessed and regulators or affected people notified when required by applicable law. Retention considers purpose, account status, accounting requirements, disputes and backups; deletion requests may be subject to documented legal exceptions.
8. Europe, United Kingdom and Switzerland
Where applicable, the EU GDPR, UK GDPR and Data Protection Act, Swiss Federal Act on Data Protection and national cookie rules protect your information. Rights may include access, correction, erasure, restriction, portability, objection to legitimate-interest processing and direct marketing, and consent withdrawal. You may complain to your competent data-protection authority, the UK's ICO or Switzerland's FDPIC without first contacting us. Required non-essential-cookie consent is distinct from accepting these terms. International transfers may require adequacy decisions, EU standard contractual clauses, UK transfer instruments or other lawful safeguards; ask us for details of the arrangement relevant to your data. This notice does not certify that a particular transfer mechanism or EU/UK representative is already appointed. Regional duties apply only when their legal scope is met.
9. United States, Canada and Mexico
Where California CCPA/CPRA or another applicable US state privacy law covers our processing, eligible residents may request access/knowledge, correction, deletion, portability, opt out of sale/sharing or targeted advertising, and limit qualifying sensitive-information use. Authorized agents may submit requests with appropriate verification; appeal a denial where the applicable law provides an appeal. We do not penalize you for exercising protected rights. We do not sell contact details; third-party advertising measurement may still be classified as sharing or a sale under some laws. Use Cookie settings to reject Google Ads measurement and email us for other opt-outs. This notice does not claim automatic recognition of Global Privacy Control or Do Not Track signals. Canadian PIPEDA and applicable provincial laws, including Quebec Law 25, may provide access, correction, consent and complaint rights; consent withdrawal may affect services requiring the data. Mexico's applicable private-sector data law may provide access, rectification, cancellation and opposition (ARCO), plus applicable consent rights. Contact us to invoke rights that apply to you.
10. Asia-Pacific privacy rights
Applicable laws may include Japan's APPI, South Korea's PIPA, mainland China's PIPL, Singapore's PDPA, Hong Kong's PDPO, Taiwan's Personal Data Protection Act, India's DPDP framework to the extent in force, and Australia's Privacy Act. Depending on the law, rights may include notice of purposes and recipients, access or disclosure, correction, deletion, suspension of use, withdrawal of consent, grievance review and complaints to local regulators. Consent, separate consent, cross-border notices or assessments may be required for some disclosures or overseas processing. China PIPL, Korean PIPA and other local rules can require additional specific disclosures; a general acceptance of this notice is not a substitute. Contact us for processing locations, recipients and transfer details relevant to your request. This notice does not assert that every law applies, that localization requirements have been satisfied, or that a local representative or privacy officer has been designated.
11. Requests, consent and contact
The MemoryIndex.io operator is the contact for privacy questions at mbloom1915@gmail.com. Describe the right you wish to exercise and the account or inquiry concerned; we may request only proportionate information to verify you or an agent. Do not email passwords or full payment details. We handle valid requests within the period required by the applicable law and explain lawful refusals or extensions. Some rights have statutory exceptions and some services cannot operate without necessary information. Account deletion does not automatically cancel a Stripe subscription: cancel renewal or ask us for help as well. Consent withdrawal operates prospectively and does not itself erase lawful accounting or fraud records. Cookie settings changes the Ads consent state; it does not guarantee removal of already-set third-party cookies, which you can manage in your browser. Nothing in this policy waives a data-protection remedy or promises unverified compliance, vendor practices or data-location arrangements.