Privacy Policy
Last Updated: February 23, 2026
Introduction
This privacy policy explains how SipoorAI collects, uses, and protects your personal information when you use our biography storytelling service and our WhatsApp album creation service.
Information We Collect
Information You Provide
- Full name
- Phone number
- Email address
- Photos you upload
- Stories, audio and video recordings
- WhatsApp chat exports (messages and media from group conversations)
- Group member information (names, genders, relationships) as provided by the uploader
- Shipping address and delivery details
- Album cover design preferences and gift recipient information
Third-Party Data in Group Chats
When you upload a WhatsApp group chat export for album creation, the export may contain personal data of other group members, including their messages, photos, and names.
- By uploading a group chat, you represent that you have the right to share this content and that doing so does not violate the rights of other group members.
- We process group chat content solely for the purpose of creating your album. Only selected quotes and photos chosen for the album are retained.
- The original chat export file is automatically deleted after processing is complete or after 7 days, whichever comes first.
Third-Party Personal Information in Printed Books
Memory books may contain personal information, stories, and photographs relating to third parties (family members, friends, etc.). When ordering a printed book, you are responsible for ensuring you have the necessary consent from these individuals and that their inclusion in the book does not violate their privacy.
Payment Information
Payment details are processed and securely tokenized by our authorized payment processor (Sumit). We do not store your credit card number. Your payment method is saved by the payment processor to enable future add-on purchases (such as video storytelling or extra copies) without re-entering your card details. You may request removal of your saved payment method at any time by contacting us.
Automatic Information
- IP address
- Device type and operating system
- Browser type
- Cookie information
How We Use Information
- Service delivery - creating books, albums, processing recordings, storage
- AI-powered photo analysis, caption generation, and album layout
- Automated album creation from WhatsApp chat exports
- Analytics and service improvement
- Error tracking and performance monitoring (Sentry) - operates without consent as necessary for site security and stability
- Targeted advertising - with consent
- Marketing content - with consent only
AI Usage and Model Training
We use third-party AI services to process your content and create your book. Your content is not used to train AI models. AI processing is performed solely for the purpose of providing the service - creating chapters, editing text, and designing the book.
Third Party Sharing
We share information with the following categories of service providers:
- Payment processing providers - Sumit (Israel)
- AI services for generating biography chapters - AWS Bedrock (Europe, Anthropic Claude models). Speech-to-text - Soniox (Europe).
- Analytics and usage tracking - PostHog (Europe)
- Error tracking and performance monitoring - Sentry (Europe)
- Session recording and behavior analysis - Microsoft Clarity (USA) - with consent
- Advertising and audience measurement - Meta Platforms, Inc. (USA) - with consent. Includes the Meta Pixel and Conversions API for ad measurement and retargeting
- Tag management - Google Tag Manager (USA) - with consent. Manages the loading of marketing and analytics scripts
- Professional printing and production services - BookPod (Israel)
- Cloud infrastructure and secure storage - AWS (Europe)
Cookies and Tracking
We use cookies and similar technologies:
- Essential Cookies: Required for site operation - session, login, security, and error tracking (Sentry)
- Analytics Cookies: Help us understand how you use the site and improve it
- Marketing Cookies: Set by Meta (Facebook) via the Meta Pixel to measure ad effectiveness and show relevant advertisements. Includes _fbp (Meta browser ID) and _fbc (Meta click ID) cookies
Third-party providers and tracking
The tools below operate on the site, with their purpose and the data they may receive:
- PostHog: product analytics (page views and on-site actions). Hosted in the EU and accessed via our own domain.
- Meta Pixel and Conversions API: ad measurement and audiences on Facebook and Instagram. Identifying data (hashed phone or email) is shared with Meta in the US only after explicit marketing consent; without consent, only basic measurement runs.
- Google Tag Manager and Google Ads: measurement-tag management and Google ad-campaign measurement.
- Sentry: error and performance monitoring for reliable operation and security. Hosted in the EU.
You can manage cookie preferences via the banner at the bottom of the site.
Your Rights
Under privacy law, you have the following rights:
- Access - request to see information we hold about you
- Correction - request to correct inaccurate information
- Deletion - request to delete your information
- Portability - receive your information in a common format
- Objection - object to processing for certain purposes
- Right to object to automated processing (Amendment 13) - to object to decisions made automatically, including AI-generated biography chapters
We acknowledge requests within 2 business days and complete them within 30 days.
To exercise these rights, contact us at [email protected] or use the 'Delete account' button in account settings. For manual deletion (accounts without a phone on file), email [email protected].
Data Retention
- Account information: As long as account is active
- Video content: Immediately archived upon subscription expiration, kept for 12 months in deep archive
- After 12 months in archive without reactivation - permanent deletion
- WhatsApp source files: Deleted after processing or 7 days, whichever comes first
- Album data (photos, captions, PDFs): Retained for 7 days after creation, then automatically deleted
- Payment records: When you delete your account, personal identifiers are detached from the record, but the amount, date, and invoice reference number are retained by us and by our payment processor Sumit for 7 years per Israeli Income Tax Ordinance §130 and the VAT Law. The link to the receipt PDF on Sumit is removed upon deletion.
Minors
The service is for adults 18 and older. Minors may use the service only with parental consent and supervision.
International Transfers
Some information is transferred to servers in Europe and the USA, including AI processing on Google servers in Europe. For data transferred to the USA (Meta Platforms, Microsoft Clarity, Google Tag Manager), these companies are certified under the EU-US Data Privacy Framework, which provides adequate protection for personal data. Israel maintains an adequacy determination from the European Commission, ensuring equivalent data protection standards. We only transfer marketing-related data to US providers after you give explicit consent.
Security
We take reasonable security measures to protect your information, including encryption in transit (HTTPS), encrypted storage, and access controls. However, no method of transmission or storage is 100% secure. We implement industry-standard measures but cannot guarantee absolute security.
Contact
For privacy questions, contact us at:
