Privacy policy

In short

We collect only what is needed for you to build the surprise and send it. We do not read the content you wrote, and we never approach the person receiving it. The link is delivered to you, and you decide who to pass it on to.

Seller details

• Name: סטפטק
• Business number: 319038782
• Postal address: ת.ד. 77512, אשדוד

For anything about personal information: info@momenvi.co.il.

What information we process

• About you: an email address and a phone number — so that we can send you the link and keep you posted on the order.
• What you wrote: the answers in the questionnaire, including your name, the name and the endearment of the person receiving it, a memory or a personal line, and the meeting details if you filled them in.
• Photographs you uploaded, if you uploaded any.
• Your account: the email address the account was opened on, and when it was verified. The password is held encrypted by our authentication provider and is not accessible to us.
• Basic usage data: when the surprise was opened and which answer was chosen — so that we can tell you. No identifier that would let a device be recognised is kept.
• Payment details are collected and kept by the clearing company alone. Payment is made on a secure PayPlus page, and we neither see nor hold card numbers at any stage.
• Information about the person receiving it: only what you wrote about them in the questionnaire. See also “Information about other people” below.

The recipient's replies

We do not ask the recipient for their phone number or email address, and we do not contact them in any way. The only information we hold about them is what you wrote about them in the questionnaire, and whatever they choose to answer themselves — and their answers are shown to you. There is no obligation to answer, and if they do not, no answer is kept.

Technical information and usage

Our infrastructure providers may automatically receive ordinary technical data such as an IP address and request details when your browser talks to their servers, even where that data is not kept by us in the business database.

Whether you have to give information

Giving us the information is your choice and there is no legal duty to give it, but without the details we need we cannot create the moment, complete the purchase, or deliver the link to you.

Information about other people

A moment holds information about another person — the one receiving it — and sometimes about other people who appear in the photographs or in the memories you wrote. Please do not enter sensitive information that is not needed, and upload information or photographs of other people only if you are entitled to.

Who can reach the information here

The content you wrote is checked automatically and only automatically — software checks confirming that the Hebrew is sound and that nothing is missing — and it is not read by a person as part of the service. Operational access to the content is kept to a very small number of people, no more than three, and only for support or a fault. We do not use it for anything else: not for advertising, not for examples on the site, and not for training models.

Service providers

• Vercel — hosting the site.
• Supabase — the database, user authentication and media storage.
• Resend — sending the operational email.
• Google Workspace — the business mailbox.
• PayPlus — clearing the payments.

As at the date this policy was updated, user content on the live site is not passed to any external generative artificial-intelligence service.

Processing outside Israel

Our central data environment on Supabase is currently set to the Frankfurt region, in Germany.

External navigation services

If you filled in a meeting place, the moment shows a link to an external map service. Following it takes whoever follows it off our site and onto that service, which runs under its own privacy policy.

Browser storage and cookies

We keep in your browser only what running the service needs: the draft you are building, your editing preferences, the language you chose to read in — so we do not have to ask again — and a session cookie for your account once you have signed in. There is no third-party advertising or measurement tool on the site, and there are no marketing cookies.

How long information is kept

• The link is live for between 30 and 365 days from the moment it is published, depending on the plan bought.
• After it closes, the content and the media are kept for a further 30 days and then deleted — so that they can be restored if you ask. If you opened a payment for an extension during those days, the deletion waits one more day, so that we do not delete something you have only just paid for.
• An order that was not paid is deleted within 30 days.
• The recipient's answers are deleted or anonymised at the end of the moment's retention period.
• An account that has not been verified within 90 days is deleted.
• The accounting documents for the order — a receipt or an invoice — are kept for 7 years, as the law requires.

Your rights

You may see the information kept about you, ask for it to be corrected, and delete it.

If you opened an account, the deletion is in your account, and it is immediate and cannot be undone. Deleted are the questionnaire, the moments you created — including ones that are still live — the photographs, the answers received, the phone number and the account itself. Kept are the order reference, the amount, the date and the email address: these are the accounting record of the purchase, and we are obliged to keep it for 7 years.

For anything else — access, correction, or deletion without an account — write to us: info@momenvi.co.il. We answer within 30 days.

The full commercial terms are in the terms of service.

Changes to this policy

If we change something substantive, we will update it here and note the date of the update at the top of the page. A change that widens the use of information already collected will not be made without asking for your consent again.