Privacy Policy
Last Updated: September 27, 2025
At Momentite, we believe in transparency and simplicity. This policy explains what data we collect, why we need it, and how we protect it.
The Basics
- Who we are: Momentite is operated by Usta Studio LLC, Wyoming, USA
- Where we process data: Our servers are hosted in Germany (EU) by Hetzner
- Contact for privacy questions: [email protected]
- Our promise: We'll never sell your data. Period.
What We Collect
Information you give us:
- Account info: Name, email, password (encrypted)
- Profile data: Company name, team member details you add
- Payment info: Processed by Stripe (we don't store card numbers)
- Your content: Projects, tasks, documents, files, and messages you create
Information collected automatically:
- Essential cookies: Only for keeping you logged in
- Anonymous analytics: Page views, feature usage via Umami (privacy-friendly, no cookies)
- Basic usage data: Login times, feature usage (for improving the service)
- Technical data: IP address, browser type (for security and support)
What we DON'T collect:
- Marketing cookies
- Tracking cookies
- Personal data from your clients (unless you add them as users)
- Personal analytics data (no user tracking)
Why We Need This Data
| What We Collect | Why We Need It |
|---|---|
| Email & Password | To create and secure your account |
| Payment Info | To process your subscription |
| Your Content | To provide the service you're paying for |
| IP Address | For security and to prevent abuse |
| Usage Data | To fix bugs and improve features |
How We Use Your Data
We use your data to:
- Run Momentite: Store your projects, send notifications, process payments
- Communicate with you:
- Service emails (password resets, payment receipts)
- Important updates about Momentite
- Occasional updates about our other products (you can opt out)
- Keep things secure: Detect and prevent fraud or abuse
- Improve the service: Understand which features are useful
We will NEVER:
- Sell or rent your data
- Share it with third parties for marketing
- Use it for advertising
- Look at your private content (unless you ask for support)
Who Has Access
Service providers that help us run Momentite:
- Hetzner (Germany) - Hosts our servers
- Stripe (USA) - Processes payments
- Resend (USA) - Sends transactional emails
- Nightwatch - Monitors service uptime
- Umami (Self-hosted) - Privacy-friendly analytics (no personal data collected)
When we might share data:
- Legal requirements: If law enforcement has a valid court order
- Your permission: If you explicitly ask us to
- Business transfer: If we sell Momentite (buyers would be bound by this policy)
Where Your Data Lives
- Primary servers: Germany (Hetzner data centers)
- File storage: Germany (Hetzner Object Storage)
- Backups: Germany
For EU users: Your data stays in the EU for processing and storage.
For non-EU users: By using Momentite, you agree to data storage in the EU.
How Long We Keep Data
| Type of Data | How Long We Keep It |
|---|---|
| Active account data | As long as you have an account |
| Closed account data | 30 days after closure, then deleted |
| Backup data | Up to 90 days in disaster recovery systems |
| Payment records | 7 years (legal requirement) |
| Support conversations | 2 years |
Your Rights
You can always:
- Access your data: Download everything from your account settings
- Update your info: Change it anytime in your account
- Delete your data: Remove specific items or your entire account
- Export your data: Get a copy in a standard format
- Stop emails: Unsubscribe from product updates (except critical service emails)
- Object to processing: Tell us to stop using your data in specific ways
For EU users (GDPR rights):
- Right to be forgotten
- Right to data portability
- Right to restrict processing
- Right to file a complaint with your local data protection authority
How We Protect Your Data
- Encryption in transit: All data is sent over HTTPS/SSL
- Encrypted passwords: Using industry-standard bcrypt
- Secure infrastructure: Firewalls, regular updates, monitoring
- Access controls: Only essential team members can access servers
- Regular backups: In case something goes wrong
- Incident response plan: We'll notify you within 72 hours of any breach
Cookies & Analytics
Cookies: We only use essential cookies that are necessary to:
- Keep you logged in
- Remember your preferences
- Maintain security
No tracking, no advertising, no third-party cookies.
Analytics: We use Umami, a privacy-friendly analytics tool that:
- Doesn't use cookies
- Doesn't track individual users
- Doesn't collect personal information
- Only shows us aggregate data (like which features are popular)
This helps us understand how to improve Momentite without invading your privacy.
Children's Privacy
Momentite is for business use only. We don't knowingly collect data from anyone under 18.
Email Communications
Emails we send:
- Essential emails (always):
- Password resets
- Payment confirmations
- Security alerts
- Critical service updates
- Notification emails (based on your settings):
- When you're @mentioned in chat
- Task assignments and updates
- New messages in #client-chat
- Timeline updates
- Project activity summaries
- Product updates (you can opt out):
- New features
- Tips and best practices
- Other products (opt-in only):
- Information about our other tools
You can control notification preferences in your account settings.
International Transfers
While our servers are in Germany, some service providers are in the USA:
- Stripe (payments) - EU-US Data Privacy Framework certified
- Resend (emails) - Standard contractual clauses in place
We ensure all transfers comply with GDPR requirements.
Changes to This Policy
- We'll notify you by email for significant changes
- Small clarifications may happen without notice
- You can always see the "Last Updated" date at the top
Data Protection Officer
We don't have a formal DPO (not required at our size), but privacy questions go directly to our founding team at [email protected]
Contact Us
For all questions (privacy, support, general):
[email protected]
To exercise your rights:
Email us with "Data Rights Request" in the subject
Mailing address:
Usta Studio LLC
[Address - To be updated]
Your privacy matters. We built Momentite to be a tool you can trust with your business data. We'll never betray that trust by misusing your information.
By using Momentite, you agree to this Privacy Policy.