Effective date: October 1, 2026 · Last updated: October 22, 2026
Privitum is built on a simple privacy principle: we collect the minimum data necessary to operate the Service, and we do not retain message content. This policy explains what we collect, how we use it, and your rights regarding your information.
Privitum does not retain message content. Audio messages are encrypted using AES-256-GCM encryption before storage. Encryption keys are stored separately from audio files. Messages are permanently and irrecoverably deleted immediately upon playback. Unplayed messages are automatically deleted within seven (7) days. Privitum cannot access, reproduce, or produce message content — even if legally compelled — once a message has been destroyed.
Account information: When you create an account, we collect your name and email address through our authentication provider (Clerk). Contacts: If you save a contact's email address and, optionally, phone number for message delivery, that information is stored with your account until you remove it. Usage data: We collect message send counts and usage metrics to enforce plan limits and detect abuse. We do not collect or store message content, recipient message content, or playback recordings. Recipient email addresses are stored with the message token and deleted when the message is destroyed. A record of each message you send (recipient email address, send time, and whether it was played, expired, or locked) is also kept in your Sent history, which holds your most recent 100 messages and expires 30 days after its last update. It contains no message content. Billing: Payments are processed by Stripe; we store only your plan and a Stripe customer identifier, never card numbers. Waitlist: If you join our waitlist, we collect your email address solely for the purpose of notifying you of the Service launch.
We use the information we collect to operate and maintain the Service; authenticate users and enforce access controls; enforce usage limits and detect abuse; send transactional emails (message delivery notifications, playback confirmations); and communicate service updates. We do not sell, rent, or share your personal information with third parties for marketing purposes.
Privitum uses the following third-party providers to operate the Service: Vercel (hosting and file storage), Upstash (database), Resend (transactional email delivery), Clerk (user authentication), Stripe (payments), Twilio (SMS delivery of one-time PINs, where a phone number has been added), Sentry (error monitoring), and Cloudflare (DNS and email routing). Each provider processes limited data necessary to perform their function. We do not control the privacy practices of these providers and encourage you to review their respective privacy policies.
Account data is retained for the duration of your account. Message tokens and associated metadata are deleted when a message is played or within seven (7) days, whichever comes first. Waitlist email addresses are deleted upon Service launch or upon your request. You may request deletion of your account and associated data at any time by contacting help@privitum.com.
We implement industry-standard security measures including AES-256-GCM encryption of all audio content, PIN-protected message delivery, server-side audio streaming (audio files are never exposed directly to recipients browsers), and automatic destruction of message content after playback. No system is completely immune to security risks. We cannot guarantee absolute security of your data.
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us at help@privitum.com.
We may update this Privacy Policy from time to time. We will notify users of material changes by updating the effective date above. Continued use of the Service after any modification constitutes acceptance of the revised Policy.
Account holders may optionally add a phone number to a saved contact. When they do, Privitum delivers the one-time PIN required to unlock that contact's private message via SMS instead of email, as an additional security measure that separates the message link and its PIN across two channels. Phone numbers are provided by the sending account holder for a specific, known individual — Privitum does not collect phone numbers directly from message recipients or use them for any purpose other than this one-time PIN delivery. Before a phone number can be saved, the sending account holder must confirm that the person expects to hear from them and has agreed to receive a one-time PIN text at that number; Privitum records that confirmation and sends no PIN text to a number without it. Recipients are also shown a notice on the message-retrieval page, and the SMS itself discloses that message and data rates may apply and includes opt-out instructions. SMS messages sent by Privitum are strictly transactional, single-occurrence per message sent, and contain no marketing or promotional content. To stop receiving PIN messages via SMS at a given number, reply STOP to the message, contact the sender to remove that number from their contacts, or email help@privitum.com.
Questions, requests, or concerns regarding this Privacy Policy may be directed to: help@privitum.com