Privacy Policy

This Privacy Policy explains what information GradMoment collects, how it is used, and the choices you have. By using GradMoment, you agree to the practices described below.

1. Information You Provide

• Account information: your email address and password (passwords are stored only as a one-way hash — we never see your plain-text password).
• Announcement content: the graduate's name, school, graduation date, message, photo, and any gift links you choose to add.
• Guestbook entries: if guests leave messages on your published page, we store the name, email (if provided), and message they submit.
• Communications: if you contact support, we keep a record of the conversation.

2. Information Collected Automatically

• Session cookie: we use a single session cookie to keep you logged in.
• Server logs: standard request logs (IP address, user agent, timestamps) used to operate the Service, diagnose problems, and prevent abuse.

3. Published Pages Are Public

Anything you publish on a GradMoment announcement page is publicly accessible to anyone with the link. That includes the graduate's name, school, photo, message, gift links you add, and any guestbook messages displayed on the page. Search engines may index published pages. Please do not include information on a published page that you would not want to be public.

You can unpublish a page at any time from your dashboard, which removes public access.

4. How We Use Information

• to provide, maintain, and improve the Service;
• to authenticate your account and keep it secure;
• to display your announcement page and deliver guest messages to you;
• to send transactional messages (for example, when you share a page via SMS, or for account-related notices);
• to detect, investigate, and prevent abuse, fraud, or security incidents;
• to comply with legal obligations.

5. Service Providers

We use a small set of third-party providers to operate the Service. They process information only on our behalf:

• Cloudinary — image hosting for photos you upload.
• Stripe — payment processing, when paid features are enabled.
• Email delivery provider — for transactional email.
• Hosting and infrastructure providers — to run the Service.

6. Sharing

We do not sell your personal information. We share information only with the service providers listed above, with people you choose to share a published page with, and as required by law (for example, to respond to a valid legal request) or to protect the rights, property, or safety of GradMoment, our users, or the public.

7. Data Retention

We retain account information and announcement content for as long as your account is active. Published pages may also have an expiration date set when they were created. You can delete content from your dashboard, and you can request full account deletion by contacting us.

8. Your Choices

• Access and correction: you can review and edit your announcement content from your dashboard at any time.
• Unpublish: you can unpublish a page at any time to remove public access.
• Deletion: you can request deletion of your account and associated data by emailing hello@gradmoment.com.

9. Children

GradMoment is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

10. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and may notify you on the home page or by email.

12. Contact

Questions about this Privacy Policy? Email us at hello@gradmoment.com.