Privacy Policy for EmailToFuture

1. Introduction

EmailToFuture is operated by mondov, s. r. o. ("we," "our," or "us"), a Slovak limited liability company (spoločnosť s ručením obmedzeným). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service that allows you to create time capsules — messages scheduled for delivery to yourself in the future.

For the purposes of applicable data protection law (including the GDPR), mondov, s. r. o. is the controller of your personal data:

• Business name: mondov, s. r. o.
• Company ID (IČO): 57481831
• Tax ID (DIČ): 2122768329
• VAT ID (IČ DPH): SK2122768329
• Address: Cintorínska ulica 983/10, 053 42 Krompachy, Slovak Republic
• Commercial Register: Obchodný register Mestského súdu Košice, Section Sro, Insert No. 65127/V

2. Information We Collect

Personal Information

We collect the following personal information:

• Email address (which serves as both your account identifier and the primary recipient of time capsules)
• Additional recipient email addresses that you add when using the multiple recipients feature (up to 10 recipients per time capsule)
• Authentication information (securely hashed password values if using email/password sign-in method - we never store your actual password)
• Information related to your Google account if you choose to sign in via Google, including your profile picture, name, and email address
• Purchase and billing-related information associated with Premium capsule purchases (processed by our payment provider; we may receive order identifiers, purchase status, and limited customer details needed to fulfill and support your order)

Usage Information

We collect information about your use of EmailToFuture, including:

• Message content you create in time capsules to be sent to yourself and other recipients
• List of recipient email addresses for each time capsule
• Creation date of each time capsule
• Scheduled delivery date of each time capsule
• Status of delivery to each recipient
• Any errors encountered during the delivery process
• System-generated identifiers associated with your time capsules and batches
• Reflection content you add to delivered time capsules
• Time capsule deletion logs including metadata and deletion timestamps (for administrative purposes only)
• File attachments you upload with your time capsules

Attachment Information

When you upload attachments to your time capsules, we collect:

• The files you upload (images, videos, audio, documents)
• File metadata including filename, file type, and file size
• Upload timestamps and association with your time capsules

Local Storage

Draft time capsules are temporarily stored locally in your browser's storage. This data remains on your device and is not transmitted to our servers until you choose to save or schedule the time capsule.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to provide you with our service as requested.
• Consent: You have explicitly agreed to the processing of your data for specific purposes.
• Legitimate Interests: Processing is necessary for our legitimate interests, such as improving our service, ensuring security, and preventing fraud.
• Legal Obligation: Processing is necessary to comply with legal requirements applicable to our operations.

4. How We Use Your Information

We use your personal information for the following purposes:

• To create and maintain your account
• To provide our core service of delivering your time capsules at your requested future dates to you and other recipients you specify
• To identify the sender when delivering time capsules to multiple recipients
• To authenticate your identity when you sign in
• To process account settings changes you request (such as changing your sign-in email or password, managing sessions, joining or leaving the mobile app waitlist, and scheduling or cancelling account deletion)
• To troubleshoot and resolve delivery issues
• To improve and optimize our service
• To communicate with you about your account or our services
• To process Premium purchases, fulfill credits, and handle related support or refund requests
• To comply with legal obligations

5. Data Storage, Security, and International Transfers

Your information is stored in our database powered by Supabase, which is hosted in the United States. If you're accessing our service from outside the United States, please be aware that your data will be transferred to, stored, and processed in the United States.

For users in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws that require specific mechanisms for international data transfers, we rely on standard contractual clauses and other legally approved mechanisms to transfer your data.

We implement appropriate security measures to protect your personal information, including:

• Data encryption during transmission using HTTPS protocol
• Database-level security controls that ensure users can only access their own data after authentication
• Regular security assessments and updates
• Access controls limiting staff access to user data

6. Third-Party Services

If you choose to sign in using Google, their privacy policy will apply to the information you provide through their authentication service. We recommend reviewing Google's Privacy Policy.

Email Delivery

We use Resend API service to deliver your time capsules. Information shared with Resend includes your email address, any additional recipient email addresses you specify, and the content of your time capsules. When you send a time capsule to multiple recipients, their email addresses are also shared with Resend for delivery purposes. Resend's use of this information is governed by their own privacy policy.

Attachment Storage

We use Cloudflare R2 cloud storage service to store your file attachments securely. Information stored includes your uploaded files and associated metadata. Attachments are transmitted to recipients via secure, time-limited download links. Cloudflare's handling of this data is governed by their privacy policy.

Payments

Paid Premium purchases are processed by Paddle, which acts as our Merchant of Record. Payment card details are handled by Paddle (and its payment processors), not stored by us. Information shared with or received from Paddle may include your email address, order details, and purchase status as needed to fulfill your order and provide support. Paddle's handling of payment data is governed by their privacy policy.

Analytics and Product Improvement

We use the following tools to understand how our service is used and to improve your experience:

PostHog

We use PostHog to collect product analytics such as page views and feature usage. PostHog is configured to use in-memory storage only on your device, which means it does not store persistent analytics cookies in your browser. Event data is sent to PostHog's EU-hosted infrastructure to help us understand how the service is used and improve it. For more information, please review the PostHog Privacy Policy.

Trustpilot

We display Trustpilot review widgets on some pages. If you enable this option in our cookie settings, Trustpilot's script may set third-party cookies and load content from Trustpilot to show review information. If you decline, we show a simple link to our Trustpilot profile instead. For more information, please review the Trustpilot End-user Privacy Terms.

Reddit Embeds

Our contact page can display embedded Reddit posts from our community. If you enable this option in our cookie settings, Reddit's embed script loads third-party content from Reddit and may set cookies or similar technologies controlled by Reddit. If you decline, we show static previews with links to the posts on Reddit instead. For more information, please review Reddit's Privacy Policy.

Your Choices

You can control optional third-party embed cookies through our cookie consent banner or the cookie settings link in the site footer. PostHog is not controlled through the cookie banner because it does not use persistent browser cookies in our current configuration.

7. Multiple Recipients and Consent

When you use our multiple recipients feature, you are responsible for ensuring that:

• You have permission to send time capsules to all recipients you add
• Recipients are aware that they will receive a message from you at the scheduled date
• The content you send is appropriate for all recipients
• You respect all recipients' privacy and communication preferences

When time capsules are delivered to multiple recipients, each recipient will be informed of your email address as the sender to ensure transparency about who scheduled the time capsule. Recipients cannot see other recipients' email addresses in multi-recipient time capsules.

We are not responsible for any disputes that may arise between you and recipients regarding the time capsules you send.

8. Data Retention

We retain your personal information for as long as your account remains active or as needed to provide you services.

Account Deletion

You can schedule deletion of your account from Account settings. Account deletion is not immediate: after you confirm, there is a 7-day grace period during which you can cancel. While deletion is scheduled, your account is read-only (you cannot create new time capsules, reflections, imports, or uploads).

When the grace period ends, we permanently delete your account and associated data, including undelivered time capsules, reflections, attachments stored on our servers, waitlist entries, and related profile information. Pending time capsules that have not yet been delivered will not be sent. Emails already delivered to recipients cannot be recalled from their inboxes.

After purge, we may retain anonymized operational and audit records (for example, deletion logs with user identifiers removed and email addresses redacted) where needed for security, abuse prevention, or legal compliance. If you need help with account deletion, you can also contact us at support@emailtofuture.com.

Sign-In Email Changes

You can change your sign-in email in Account settings. The change requires confirmation from both your current and new inbox (and a password for accounts that use password sign-in). After the change takes effect, pending time capsules addressed to you as the owner are delivered to your new address. Additional recipients you added are unchanged, and capsules that were already sent keep the address they were delivered to.

Time Capsule Deletion

You can delete your scheduled or delivered time capsules at any time through your dashboard. When you delete time capsules:

• The message content and associated data are permanently removed from your accessible data
• We maintain deletion logs for administrative, security, and audit purposes that include:
  • Time capsule metadata (creation date, scheduled date, recipients)
  • Deletion timestamp
  • Content length (but not the actual content)
• Deletion logs may be retained for longer periods as required for operational and legal purposes

Attachment Storage and Retention

File attachments are stored securely using cloud storage services. When you upload attachments:

• Attachments are stored encrypted and associated with your time capsule
• Attachments are retained for 90 days after your time capsule is delivered, allowing recipients time to download them
• After the 90-day retention period, attachments are automatically and permanently deleted from our storage
• If you delete a time capsule before it is delivered, any associated attachments are also deleted
• We do not access or view the content of your attachments except as required for technical support or legal compliance

9. Your Rights

Depending on your location, you may have rights regarding your personal data, including:

• The right to access the personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your personal information
• The right to restrict or object to processing of your personal information
• The right to data portability

You can schedule deletion of your account and manage certain account settings (including sign-in email, password, sessions, and the mobile app waitlist) directly in Account settings. For other requests, or if you need assistance, please contact us using the information provided below.

10. GDPR-Specific Rights

If you are in the European Economic Area (EEA) or United Kingdom, you have specific rights under the General Data Protection Regulation (GDPR):

• Withdrawal of Consent: Where we process data based on consent, you can withdraw that consent at any time.
• Complaints to Supervisory Authorities: You have the right to lodge a complaint with your local data protection supervisory authority.
• Timely Response: We'll respond to all legitimate GDPR requests within 30 days. If more time is needed, we'll notify you.

For data portability requests, we will provide your personal data in a structured, commonly used, and machine-readable format to enable transfer to another controller when technically feasible.

11. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights:

• Right to Know: You can request information about the personal data we've collected about you in the past 12 months, including categories of information, sources, purposes, and third parties with whom we've shared it.
• Right to Delete: You can request deletion of personal information we've collected from you, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

While EmailToFuture does not sell personal information as defined by the CCPA, we do share data with service providers as described in this policy. To exercise your CCPA rights, please contact us using the information below. We will respond to verifiable consumer requests within 45 days.

Categories of Information Collected

In the past 12 months, we have collected these categories of personal information:

• Identifiers (email address)
• Authentication information
• Commercial information (email content, delivery dates, and purchase-related records)

12. Data Breach Notification

In the event of a data breach that may compromise your personal information, we will notify you via email without undue delay and within 72 hours of discovery when possible. This notification will include information about the nature of the breach, the data affected, and steps we're taking to address the situation.

13. Compliance with Privacy Regulations

EmailToFuture is committed to complying with applicable data protection laws, including the European Union's General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other regional privacy regulations.

We implement privacy by design principles by limiting data collection to what's necessary, securing data through encryption and access controls, and maintaining records of our processing activities. We have also established procedures to handle data subject requests promptly and accurately.

We have appropriate Data Processing Agreements (DPAs) in place with our service providers to ensure your data is protected throughout its lifecycle.

14. Children's Privacy

EmailToFuture is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

15. Local Storage and Cookies

EmailToFuture uses local storage to save draft time capsules on your device. This data remains locally on your device and is not transmitted to our servers until you choose to save or schedule an email.

We use cookies and similar technologies for the following purposes:

• Essential cookies: Required for authentication, security (such as Cloudflare Turnstile on sign-in forms), and core service functionality.
• Third-party embed cookies: Optional cookies used by Trustpilot review widgets and Reddit post embeds when you enable them in cookie settings.
• Functional local storage: Theme preference, email drafts, dashboard display settings, and your saved cookie preferences remain on your device and are not used for cross-site tracking.

We also use PostHog for product analytics with in-memory storage only, as described in the Analytics and Product Improvement section above. You can control optional embed cookies through our consent banner, the cookie settings link in the footer, or your browser settings. Note that blocking certain cookies may affect embedded content on our site.

16. Governing Law

This Privacy Policy is governed by the laws of the Slovakia, without regard to its conflict of law principles. However, this does not affect your statutory rights based on the laws of your country of residence.

17. Data Protection Contact

While mondov, s. r. o. does not require a formal Data Protection Officer under GDPR criteria, for any privacy-related inquiries or to exercise your data protection rights, please contact us at: support@emailtofuture.com

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website and updating the "Last Updated" date. For significant changes, we will make reasonable efforts to notify you directly, such as through email if we have your contact information.

19. Contact Information

If you have questions or concerns about this Privacy Policy, please contact us at: support@emailtofuture.com