Privacy Policy
Download the Privacy Policy (PDF)
1. Scope and who we are
This Policy explains how Endless Ladies, operated by a business incorporated in Maryland (we, us), handles personal information when people visit EndlessLadies.com, create accounts, preserve an Endless Lady's story, contribute to a page, share it, or contact support. Contact support@endlessladies.com for privacy questions. This Policy does not control copies of content made by people who view a shared or public page outside our Service.
2. Information you provide
We collect the email address and sign-in information needed for an account; the names, relationships, biography details, approximate dates, written stories, prompts and answers, photographs, captions, and visibility choices you submit; contributor invitation email addresses and participation records; and support messages you send. A story or photograph may identify other people, including living women, family members, and children. Please share only what is appropriate and permitted. Our authentication provider handles credentials. Payment card information is collected by Stripe at checkout, not stored as a raw card number by us.
3. Information generated by use
We maintain records such as account and content identifiers, creation and update times, membership and invitation status, subscription status and billing reference IDs, export and rate-limit events, and security or error logs needed to operate and protect the Service. When you visit, hosting and authentication providers may receive an IP address, browser and device details, request time, and session or authentication cookies. We do not infer that a shared story is public merely because it exists in our database.
4. How we use information
We use information to create and authenticate accounts; store, optimize, and display pages according to their privacy setting; support drafts and contributions; manage invitations and permissions; generate requested exports; administer plans and payments; respond to support, privacy and rights reports; protect against abuse; diagnose technical issues; and comply with legal obligations. We do not use family stories and photographs to train a generative AI model as part of the current Service. If we introduce materially different uses, we will update this Policy and seek consent where required before doing so.
5. Visibility: private, link, and public
Every new page is private by default. Private content can be accessed by the owner and accepted invited contributors, subject to their permissions. The owner can turn on share-by-link, which allows anyone holding the link to view the page and published content; recipients may forward the link. A Plus owner can choose public visibility, in which case published page content may be viewed, indexed, cached, or copied by visitors and search engines. Draft stories are intended to remain available to page members rather than ordinary visitors. Do not rely on a link as proof that only a named family member can read it. Visibility can be changed while editing is available, but we cannot recall outside copies already made.
6. Contributors, featured people, and minors
We use the invited email address to restrict acceptance of a contributor invitation to the intended account. The owner controls the page and can delete it; contributions to that page may be removed with it. Ask living people for appropriate permission before publishing their private information or images. A parent or legal guardian should approve sharing a minor's image or personal details. The Service is intended for adult account holders age 18 and older. People under 18 should not create accounts. A person featured on a page can contact us about a privacy or image-rights concern, and we may verify the request and review or restrict the content. Uploads depicting children raise important privacy concerns even if the child is not the account holder.
7. Providers and recipients
We share information only as needed to operate the Service, comply with law, protect rights and safety, or at your direction. This can include hosting and infrastructure providers (currently Vercel), database, authentication and private storage services (currently Supabase), payment processing and subscription management (Stripe), and an email delivery provider for account or service messages. Providers may receive only the information needed for their role. Page viewers receive content according to the owner's chosen visibility. Invited contributors receive access to the relevant page. We may disclose information in response to valid legal process or to protect users and the Service, subject to applicable law. We do not sell a family's uploaded stories or photographs as stock content.
8. Payments and communications
Stripe handles checkout and payment-card data. We receive information such as the subscription's status, plan, billing period, and Stripe customer or transaction references to provide Plus or Archive Mode and handle support. We send necessary account communications, such as confirmation, password reset, billing, security, policy-change, and service-shutdown notices, to the account email. A contributor invitation is currently created as a private link for the owner to share; do not assume the Service automatically emails every invitation. Marketing messages, if introduced, should have separate controls required by law.
9. Cookies and site technology
The Service uses cookies or comparable browser storage necessary to maintain sign-in sessions and protect account access. Infrastructure providers may also maintain security and performance logs. If we add other tracking or advertising technology, we will update this Policy and provide choices where required by law.
10. Storage, image processing, and security
Photographs are resized and converted to optimized files for the Service; source images are not promised as a retrievable original. Processing is designed to strip ordinary image metadata in the saved version, but you should remove sensitive location details before submitting any image. We use account access controls, database authorization policies, and private storage for uploaded photographs, with time-limited delivery links as needed. Security measures reduce risk but cannot guarantee absolute security. Use a strong unique password and keep independent copies of irreplaceable memories.
11. Retention, Archive Mode, and deletion
We retain account and page information while an account and its content remain on the Service, including when a former paid account is in Archive Mode. Canceling Plus does not, by itself, delete content. An owner can delete a page, and an account holder can delete an account in Account Settings; deletion removes owned pages and related content from the active Service, and an active subscription is canceled. Contributions on pages owned by other people may remain with those pages. Backups, payment records, security logs, and legally required records may remain for a limited period consistent with our operational and legal obligations. If the entire Service is permanently discontinued, the Terms describe the 90-day notice and owner export window, subject to exceptional circumstances.
12. Your choices and requests
Owners can edit or delete their pages and choose visibility while editing is available. Plus and Archive Mode owners can download a complete ZIP archive; free-plan owners can contact support@endlessladies.com about obtaining their data. Account holders can change passwords and delete accounts in Settings. Contact support@endlessladies.com to request access, correction, deletion assistance, or review of a page featuring you. We may ask to verify identity and will respond as required by applicable law. Some privacy rights depend on where you live; we will honor applicable rights and explain any lawful exception. Before deletion, download and check anything you need to keep.
13. International access and legal requests
The Service's providers may process data in the United States or other locations where they operate. If you access the Service from another jurisdiction, its privacy rules may give you additional rights. We may preserve or disclose information if law requires it or when reasonably necessary to protect users and investigate misuse, subject to applicable law.
14. Changes and contact
We will post changes to this Policy with a revised effective date and provide additional notice for material changes when appropriate. A change in Policy does not by itself authorize a new use of previously collected private content where consent or another legal basis is required. For privacy questions, requests, or reports, email support@endlessladies.com. Please do not include passwords or payment-card numbers in email.