Privacy Policy

Last updated: December 22, 2025

Who We Are

featuremessage (the "Service") is operated by Andreas Losing ([email protected]). This Privacy Policy describes how we process personal data when you browse our pages, create an account, schedule messages, or interact with us. It applies in addition to any product-specific agreements or data processing addenda.

Data We Process

We only collect the data necessary to deliver and protect the Service:

Account data: email address, authentication metadata, and plan details when you sign up or log in.
Billing data: payment status, customer IDs, and invoices handled by our payment provider (no raw card numbers touch our servers).
Content data: messages, videos, delivery dates, and other inputs you submit so we can schedule and deliver your future messages.
Usage & device data: event logs, pages viewed, approximate location (derived from IP), and technical information needed to maintain performance and security.
Communications: support requests, feedback, and any information you send us by email or forms.

Purposes & Legal Bases

We process personal data on these legal grounds (Art. 6 GDPR):

Contract (Art. 6(1)(b)): create accounts, deliver messages, manage subscriptions, and provide support.
Legal obligations (Art. 6(1)(c)): fulfill tax, accounting, and regulatory requirements.
Legitimate interests (Art. 6(1)(f)): secure infrastructure, prevent fraud, measure product usage, and improve features. Where required, we balance these interests against your rights.
Consent (Art. 6(1)(a)): send optional communication or place non-essential cookies. You can withdraw consent at any time via the channels listed below.

Processors & Transfers

We rely on vetted service providers that act as processors under Art. 28 GDPR. They only access data necessary to perform their tasks and are bound by contracts.

Hosting & infrastructure: Vercel, database and storage providers.
Video storage: AWS S3 for secure video file storage.
Payments: Polar for subscription billing and invoicing.
Email delivery: Resend for transactional and notification emails.

Some providers operate outside the EU/EEA. In those cases we rely on EU adequacy decisions or Standard Contractual Clauses. A current list of subprocessors or a Data Processing Agreement (DPA) is available on request.

Cookies & Tracking

We use essential cookies to operate the Service and optional analytics scripts that load only after you grant consent. If you do not consent, only the required cookies remain active.

Data Retention

We keep personal data only for as long as necessary:

Account data: stored while your account is active.
Billing data: retained up to 10 years to meet tax and accounting rules.
Content data: messages and videos are removed when you delete them or after delivery, unless legal obligations require longer retention.
Support communications and logs: retained for a reasonable period to resolve issues and maintain security.

Backups are cycled automatically; data may persist in archives for a short time.

Security

We use industry-standard safeguards such as encryption in transit, access controls, monitoring, and regular reviews of our infrastructure. No online service is perfect, but we work continuously to reduce risk and respond quickly to incidents.

Your Rights

You can exercise the following rights at any time:

Access, rectification, deletion, or restriction of your personal data.
Data portability in a structured, commonly used format.
Objection to processing based on legitimate interests.
Withdrawal of consent without affecting prior processing.

Email [email protected] with enough detail to verify your identity. You also have the right to lodge a complaint with your local supervisory authority.

Changes

We may update this Privacy Policy to reflect product changes or legal requirements. When we do, we will revise the "Last updated" date and, if the changes are significant, provide additional notice (for example via email or in-app message).

Contact

Questions or requests about privacy can be sent to [email protected]. For contractual matters, see our Terms of Service.