How we protect your MomentPanel
This page is maintained by MomentPanel to answer common security and privacy questions about how we handle your contacts, content, and account data.
This page describes our current practices and is not an independent certification.
Authentication & account access
Accounts are protected with email verification and password sign-in. Sessions use short-lived tokens with automatic refresh, and access to your MomentPanel and contributor data is scoped to your authenticated account using row-level security on our database.
Data in transit and at rest
All traffic to MomentPanel is served over HTTPS. Customer data and uploaded media are stored on managed cloud infrastructure with encryption at rest provided by our hosting and storage providers.
What data we collect
We collect the information you provide to coordinate a MomentPanel: your account email, recipient and occasion details, contributor names and emails, uploaded messages, photos, and video clips, and payment metadata returned by our payment processor. We do not store full card numbers.
Contacts and contributor lists
Contributor email addresses you provide are used solely to invite, remind, and deliver the MomentPanel for that specific purpose. They are not used for marketing and are not shared with third parties.
Retention and deletion
Content and contributor lists are retained while your MomentPanel is active and for a limited period after delivery so the recipient can revisit it. You can request deletion of your account and associated MomentPanel data at any time by emailing us.
Subprocessors
We rely on vetted infrastructure providers for hosting, database, storage, email delivery, and payments. These providers process data on our behalf under their own security and compliance programs.
Privacy requests & security contact
For data access, correction, or deletion requests, or to report a suspected security issue, email hello@momentpanel.com. We respond within one working day, Monday–Friday.
Shared responsibility: MomentPanel secures the platform and your account data; you remain responsible for the accuracy of contacts you upload and for keeping your account credentials confidential.