Privacy Policy

Memories Zone Records ("MZ Records", "we", "our") is committed to protecting the privacy of its users. This privacy policy explains how we collect, use, store and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable laws. By using our service, you agree to the practices described in this policy.

We collect the following categories of data: • Identification data: name, email address • Connection data: IP address, connection logs, browser type • Event data: event name, date, organizer names • Media content: voice messages, texts, photos and videos shared by guests • Payment data: processed by our provider Stripe (we do not store your bank details) • Usage data: usage statistics, preferences

Your data is processed for the following purposes: • Provision of the digital guestbook service • Generation of AI recap (audio transcription, image analysis) • Account management and authentication • Payment processing • Service-related communications (notifications, support) • Improvement of our services • Compliance with legal obligations

We process your data on the following legal bases: • Contract performance: to provide the service you ordered • Consent: for AI analysis of your content and marketing communications • Legitimate interest: to improve our services and ensure security • Legal obligation: to comply with accounting and tax obligations

• Account data: retained for the duration of your account, then 3 years after deletion • Media content: retained for 1 year after event creation (extension possible upon request) • Payment data: 10 years (accounting obligation) • Connection logs: 1 year • Support data: 3 years after resolution At the end of these periods, your data is deleted or anonymized.

We share your data only with: • Stripe: payment processing (PCI-DSS certified) • OpenAI: AI analysis (transcription, image analysis) - data processed without retention • Cloud host: secure storage in Europe • Email provider: sending notifications We never sell your data to third parties. All our subcontractors are bound by GDPR-compliant data protection agreements.

Under the GDPR, you have the following rights: • Right of access: obtain a copy of your data • Right to rectification: correct inaccurate data • Right to erasure: request deletion of your data • Right to portability: receive your data in a structured format • Right to object: object to processing of your data • Right to restriction: limit processing of your data • Right to withdraw consent: at any time To exercise these rights, contact us at: privacy@mzrecords.com You may also lodge a complaint with the relevant supervisory authority.

We implement appropriate technical and organizational measures: • Encryption of data in transit (HTTPS/TLS) • Encryption of data at rest • Secure authentication (JWT tokens) • Restricted data access (principle of least privilege) • Regular backups • Monitoring and intrusion detection • Staff training on data protection

We use cookies strictly necessary for the operation of the service: • Session cookies: authentication and navigation • Preference cookies: language, theme We do not use advertising or third-party tracking cookies. You can manage your cookie preferences in your browser settings.

Your data is primarily stored on servers located in the European Union. In case of transfer outside the EU (particularly for AI analysis), we ensure appropriate safeguards are in place (standard contractual clauses, adequacy decision).

Our service is not intended for persons under 16 years of age. We do not knowingly collect data concerning minors. If you are a parent and believe your child has provided us with data, please contact us.

We may modify this privacy policy. In case of substantial changes, we will inform you by email or via a notification on the service. We encourage you to regularly review this page.

For any questions regarding this policy or your personal data: Memories Zone Records Email: privacy@mzrecords.com Data Protection Officer (DPO): dpo@mzrecords.com