Privacy Policy

1. Our Privacy Pledge

This Privacy Policy explains what personal data we collect when you use Joy Reveal (website, application, and celebration portals), how we use it, and the choices you have concerning your information.

2. Information We Collect

We collect information in the following categories:

A. Account & Profile Information

• Personal Accounts: Name, email address, password. For personal accounts, services are operated via one-time purchases; we retain records of event credit allocations provisioned to your account to verify your balance and event entitlement.
• Business Workspace Details: Company name, team member emails, employee seat directories, and organizational roles (Business Owner, Admin, and Employee tiers). When a workspace subscription is cancelled, existing employee directory details remain retained to facilitate uninterrupted access until the subscription end date; however, our system restricts the collection and addition of any new employee profiles from the moment cancellation is initiated.

B. Celebration & Contributor Content

• Event Configuration: Event titles, recipient names, milestone categories (birthday, farewell, anniversary, etc.), scheduled unlock date/time, and customized theme styles.
• Uploaded Media & Wishes: High-resolution photos, recorded videos, voice audio greetings, and written messages submitted by event hosts and invited contributors.

C. Billing, Transaction & Subscription Data

When you purchase one-time personal celebration events or recurring business workspace subscriptions, payment processing is performed securely by Paddle (our Merchant of Record). Joy Reveal receives and maintains transaction identifiers, payment timestamps, event credit allocations, and subscription lifecycle states (active, cancelled, period end date). We do not collect or store full credit card numbers or raw security codes (CVV) on our servers.

D. Technical & Device Information

Standard server logs, browser type, operating system, IP address, and platform diagnostic telemetry to ensure optimal media delivery and responsive performance.

3. How We Use Your Information

We process your data strictly to deliver and enhance the Joy Reveal experience, including:

• Powering synchronized countdown timers and unlocking celebratory events at the precise scheduled moment;
• Transcoding and optimizing contributor images and videos for rapid, fluid playback across mobile, tablet, and desktop screens;
• Automating the assembly of exportable HD and 4K Memory Movies with licensed background music;
• Dispatching transactional notifications, contributor invitation emails, and reveal moment reminders;
• Detecting and mitigating fraud, spam invites, or violations of our acceptable use policies.

4. Secret Mode & Contributor Secrecy

A cornerstone of Joy Reveal is the element of surprise. Our platform enforces technical access controls so that when an event is configured in "Secret Mode", all incoming wishes, photo uploads, and video greetings are isolated from the recipient's view until the timer expires.

Hosts can review contributions, arrange layout order, and verify items prior to the reveal. Contributors can choose to display their name or remain an anonymous well-wisher.

5. Third Parties & Data Processors

We partner only with vetted service providers who adhere to strict data security agreements and data protection laws:

• Payment Processing (Paddle): Reseller and Merchant of Record managing checkouts, global tax compliance, and recurring billing.
• Cloud Infrastructure & Storage: Secure enterprise cloud hosting utilizing encrypted buckets for photo and video storage.
• Transactional Email: Cloud email delivery services utilized solely to deliver event invitations, reveal alerts, and password resets.

6. Security & Encryption Safeguards

We implement robust technical and organizational security measures to protect your memories:

• Data in Transit: All web traffic is encrypted using Modern Transport Layer Security (TLS 1.3 / HTTPS).
• Cryptographic Payloads: Client-server API interactions utilize cryptographic signing and payload protections to prevent tampering.
• Data at Rest: Stored celebration media and database records are encrypted with AES-256 standard encryption.
• Strict Access Controls: Employee access to user data is strictly restricted on a least-privilege, need-to-know basis.

7. Retention, Deletion & Audit Logging Rules

To balance security, compliance, and user privacy, Joy Reveal applies a strict distinction between celebratory media storage and database records:

Celebration media and workspace records follow structured lifecycles according to plan type:

• Personal Accounts (One-Time Purchases & Event Credits): Personal users purchase one-time event packages and receive an allocation of events to use. Media associated with an event is retained for the designated duration (typically 30 to 60 days following the scheduled reveal moment) to allow hosts and guests ample time to view and download their high-resolution photos, greetings, and Memory Movies prior to automatic permanent purging from cloud storage.
• Business Workspaces (Subscriptions & Cancellations): Business workspaces maintain active media archives for the duration of the subscription. When a subscription is cancelled, access to all existing events and employee records remains fully active until the current billing cycle ends ("Subscription End Date"). During this pending-cancellation period, no new employees or team members can be added to the workspace. Following the subscription end date, media enters an archival window before scheduled permanent deletion unless the workspace is reactivated.

Hosts can initiate a complete purge of celebration media at any point after the reveal. Once purged, files are permanently deleted from our active storage infrastructure. Please note that data deletion or account closure does not entitle the account to a refund under our strict No-Refund Policy.

8. Your Privacy Rights (GDPR, CCPA & Global Rights)

Regardless of your location, Joy Reveal provides comprehensive privacy rights:

• Right to Access: You can request a summary of the personal data we hold about you;
• Right to Rectification: You can update inaccurate account and profile information via your account settings;
• Right to Erasure ("Right to Be Forgotten"): You can request the deletion of your account, events, and uploaded media. Uploaded media files (images, videos, audio) will be permanently and irreversibly purged from cloud storage, while database records are soft-deleted and retained for required audit and security logging;
• Right to Data Portability: You can download your Memory Movies, uploaded photos, and event greetings;
• Right to Opt-Out: You can opt out of non-essential marketing communications at any time.

Note Regarding Deletion & No Refunds: Exercising your privacy rights (such as account closure or data erasure) permanently removes media files from storage and soft-deletes database entries for audit and logging, but does not provide eligibility for refunds of one-time purchases or subscription fees, as all sales are final under our No-Refund Policy.

9. Cookies & Local Browser Storage

Joy Reveal uses lightweight cookies and local storage tokens solely for essential platform operations:

• Authentication: Preserving your logged-in session securely;
• Appearance & Theme: Saving your selected active theme palette (e.g. Aurora, Ocean, Sunset);
• Event Drafts: Temporary caching of celebration wizards to prevent accidental loss of written messages during upload.

We do not employ third-party behavioral advertising tracking cookies.

10. Policy Changes

We may periodically update this Privacy Policy to reflect platform features, security advancements, or legal adjustments. When significant changes occur, we will notify registered hosts via email or through prominent notifications within the application.

11. Privacy Team Contact

If you have inquiries, complaints, or wish to exercise your data rights, please contact our Data Protection and Privacy team: