Privacy Policy

Shtello Legacy is a service of Shtello LLC ("Shtello Legacy," "we," "us," or "our"). This Privacy Policy explains what we collect, why we collect it, how we use and protect it, and the choices you have. It applies to shtellolegacy.com and the Shtello Legacy application.

Shtello Legacy exists to hold personal video messages and deliver them to the people you choose, on a date you set or after you are no longer able to send them yourself. Because that purpose is deeply personal, we treat your information with a level of care that matches it. We do not sell your personal information, and we do not show ads.

Who we are

Shtello LLC is the data controller for the information described here. If you have any question about this policy or your data, contact us at hello@shtellolegacy.com.

Information we collect

• Account information. Your name, email address, and phone number, and optionally your country and state, date of birth, gender, and social handles.
• Your messages. The video messages you record, their titles and written notes, the recipients you name, and the delivery instructions you set.
• Authentication and security data. Sign-in events, including the time of signup and each login and the IP address used, to secure your account and detect abuse.
• Approximate location. An approximate location (city, region, and country level) derived from your IP address, for security and fraud prevention.
• Precise location (optional). If you turn on location consent, your device's GPS coordinates at the moment you record a message. This is off unless you enable it, and you can revoke it at any time.
• Device and usage data. Pages visited, features used, errors, and your browser and operating system, to operate, secure, and improve the service.
• Payment information. Payments are processed by Stripe. We receive confirmation of your subscription and its status, but we do not receive or store your full card number.

Why we collect it

We use your information to operate and provide the service, which includes storing your messages, running your check-in, and delivering messages to the people you name. We use it to secure your account and prevent fraud and abuse, to process your membership, to communicate with you about your account and your messages, to provide support, to improve the service, and to comply with legal obligations.

We rely on these legal bases where applicable: performing our contract with you, your consent (precise location and marketing, which you can withdraw at any time), our legitimate interests (security, fraud prevention, and improving the service), and compliance with law.

How message delivery works, and what it means for your data

Shtello Legacy delivers a message on a date you schedule, or through your check-in. The check-in periodically asks you to confirm you are still here. If you do not respond for the period you set, and after grace reminders, we treat your messages as ready for release and deliver them to the recipients you named. To do this we may contact your named recipients by email or text using the contact details you provided for them, and share with each recipient only the message or messages you addressed to them, along with your name as the sender.

Recipients do not need a paid account to receive or watch a message addressed to them. If you name someone as a recipient, please make sure you have their correct contact details and a reasonable basis to share a message with them.

When we share information

We do not sell your personal information. We share it only in these limited situations:

• Recipients you choose. We deliver your messages to the people you name, as described above.
• Service providers. Trusted vendors that process data only on our instructions to run the service: Supabase (database and authentication), Vercel (application hosting), Mux (secure video storage and streaming, in the United States), Stripe (payments), Resend (email), Twilio (text messages), and OneSignal (push notifications). Analytics is provided by Google Analytics.
• Legal and safety. When required by law, to respond to lawful requests, to enforce our Terms, or to protect the rights, safety, and security of our users, the public, or Shtello LLC.
• Business transfers. If Shtello LLC is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction, subject to this policy.

How long we keep your information

We keep your account information for as long as your account is active. We keep your messages for as long as they need to be held to deliver them as you instructed, which for scheduled or posthumous delivery may be a long time, because that is the purpose of the service. After a message is delivered, we retain it so that you and your recipients can continue to access it, unless you delete it or close your account. We keep security and transaction records as needed for legal, accounting, and fraud-prevention purposes.

Your choices and rights

You can access and update most of your information directly in your profile, turn precise location on or off, and opt out of marketing at any time. Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. To make a request, contact us at hello@shtellolegacy.com. Please note that we may be unable to delete a message that has already been delivered to a recipient, since it now also exists in that delivery.

Security

We protect your information using encryption in transit, access controls, and signed, private video playback so that only the intended people can view a message. No system is perfectly secure, but we work continuously to safeguard your data and limit who can access it.

Children

Shtello Legacy is intended for adults 18 and older. We do not knowingly collect personal information from children under 18. If you believe a child has provided us information, contact us at hello@shtellolegacy.com and we will remove it.

International users

We operate the service from the United States, and your information is stored and processed in the United States. If you access the service from outside the United States, you understand that your information will be transferred to and processed in the United States.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you. Your continued use of the service after an update means you accept the revised policy.

Contact us

If you have any question or request regarding this Privacy Policy or your personal information, contact us at hello@shtellolegacy.com.