Privacy Policy
Overview
Told To Last is built on a foundation of privacy. Your memories, the questions you ask, and the video answers you receive are yours: private by default, shared only when you explicitly choose to share them with specific individuals.
What We Collect
We collect your phone number or email address for authentication and to enable you to send questions to others. We store the video answers sent to you and the questions you create. We collect basic usage data to improve the product. We do not sell your personal data to third parties.
How We Use Your Information
Your phone number or email address is used to verify your identity via one-time password (OTP) and to route questions to the right person. Video answers are stored securely and accessible only to you and the people you explicitly share them with. We do not use your videos to train AI models.
Data Storage & Security
Videos are stored using industry-standard encryption. We use Supabase for database storage and Mux for video delivery, both of which maintain strong security practices. Access to your data is authenticated via secure JWT tokens with limited lifetimes.
Your Rights
You may request deletion of your account and all associated data at any time by contacting us. Upon deletion, your videos, questions, and personal information will be permanently removed from our systems within 30 days.
Data Retention After Cancellation
If you cancel your subscription, your vault is preserved in read-only mode and is not deleted right away. After 90 days it moves to archive storage, and if no action is taken for 12 months it is permanently deleted. We notify you at each stage (including 60, 30, and 7 days before deletion) and you can download all of your content at any time before that window closes. Once a vault is permanently deleted, the data cannot be recovered. Full details are in our Terms of Service.
Contact
For privacy-related questions or requests, contact us at support@toldtolast.com.
Last updated: June 2026