Privacy

What we keep

Final Messages holds only what it needs to deliver your messages after you pass away:

• Your first name, email address and a hashed password.
• The recordings you make, who each one is for, and that person's name and email address.
• Your keyholders' names and email addresses, and the release code we gave each of them.
• A history of what happened on your account: sign-ins, releases, cancellations, deliveries. You can see it on your settings page.
• Whether emails we send to your people and keyholders were delivered or bounced, so you can fix a wrong address while you still can.

We do not sell or share any of this, and we never show advertising.

Who can see a recording

Only you, until a keyholder enters their release code and the waiting period you chose has passed. Then the person it was recorded for receives a private link. We do not watch or listen to recordings, and nobody else can, including the person it is for, until it is delivered.

Where it is stored

Recordings are stored with Cloudflare R2, account details with Neon (a PostgreSQL database), the service runs on Vercel, and email is sent through Resend. All of these are in the United States, and all data is encrypted in transit and at rest by those providers. Links to play a recording expire after one hour and are created fresh each time a page is opened.

How long we keep it

• Recordings you delete can be restored for 30 days, after which they are removed for good.
• After a recording is delivered, we keep it so the person it is for can return to it. It is removed five years after delivery.
• If you delete your account, everything is removed straight away and your keyholders' codes stop working.

If this service closes

If Final Messages ever has to shut down, we will email every account holder and keyholder at least 90 days beforehand. During that time you can download everything from your settings page. We will not deliver undelivered messages early; they stay private, and after the notice period they are deleted.

Your rights

You can download everything we hold about you, correct it, or delete your account from your settings page at any time. For anything else, write to hello@notleftunsaid.com.