Privacy Policy
Last updated: October 2, 2026
What we collect
- Your email address (for sign-in and delivery receipts).
- Birthday recipient names and photos you upload.
- Optional delivery email addresses and phone numbers.
- Basic audit logs (timestamps, IPs, user agents) for security.
How long we keep it
Photos and rendered media are retained for 90 days by default and are deleted at the end of that window. Deleting your account wipes all your data within 24 hours.
Subprocessors
Authentication and storage: Supabase. Background jobs: Inngest. Voice synthesis: ElevenLabs or OpenAI. Image moderation: Sightengine. Email delivery: Resend. SMS delivery: Twilio. Video hosting (optional): YouTube.
YouTube API Services
BirthdayStudio uses YouTube API Services. If you choose YouTube delivery for a creation, we upload the rendered video (which shows the recipient's name, the optional photo you provided, and the song) to our own YouTube channel, with a title containing the recipient's name. We never sign in to, read from, or post to your YouTube or Google account, and we store no YouTube data about you beyond the video ID and link of uploads we made.
Uploaded videos are subject to the YouTube Terms of Service and the Google Privacy Policy. Deleting a creation, or your account, also deletes its video from our YouTube channel.
Your rights
You can delete any creation, or your whole account and everything in it, at any time from the app. To request a copy of your data, email sabrsystemssoftware@gmail.comand we'll respond within 30 days. We honor GDPR and CCPA requests.
Contact
BirthdayStudio is operated by Sabr Systems. Questions about this policy: sabrsystemssoftware@gmail.com.