Privacy Policy

PhotoMedley connects to your Google Drive, downloads the photos and videos you point us to, builds your video, puts it back in your Drive, and deletes everything on our end. We don't store your photos. We don't sell your data. We don't look at your Drive beyond the folder you choose.

PhotoMedley ("we," "us," or "our") is a service that creates photo reels from your Google Drive photos. We are based in the United States. You can reach us at hello@photomedley.com.

Your email address. We collect your email when you sign in with Google. We use it to send you a notification when your video is ready. That's it.

A Google OAuth access token. When you sign in, Google gives us a temporary token that lets us access your Drive. This token is used only during video processing and is never stored permanently. It expires automatically.

Job status. We store a small record (your job ID and its status — pending, running, done) so we can show you progress and confirm delivery. This record contains no photos, no file contents, and no personal information beyond what's needed to track your job. It is automatically deleted after 7 days.

We request the drive.file scope — the most restricted Google Drive permission available. This means we can only access files and folders that you explicitly select using the Google Drive Picker. We cannot see, browse, or access anything else in your Drive.

When you choose a folder, we download its photos and videos to process your video. Once the video is built and uploaded back to your Drive, all downloaded files are permanently deleted from our servers. We do not keep copies.

• We never store your photos or videos.
• We never sell, rent, or share your personal information with third parties for marketing.
• We never access any part of your Google Drive beyond the folder you choose.
• We never use your photos to train AI models or any other purpose beyond building your video.

We use the following services to operate PhotoMedley:

• Google (OAuth + Drive API) — for sign-in and Drive access. Governed by Google's Privacy Policy.
• Stripe — for payment processing. We never see or store your card details. Governed by Stripe's Privacy Policy.
• Resend— for sending your "video is ready" email. Only your email address is shared.
• Modal— for video processing compute. Your photos pass through Modal's servers temporarily during encoding and are deleted immediately after.
• Upstash (Redis) — for storing job status records. No personal content is stored here.
• Vercel — for hosting the web application.

Job status records are automatically deleted after 7 days. We do not retain your photos, videos, or Drive access tokens beyond the duration of your job. Your email address is not stored in a marketing database — it exists only in the context of your job record and expires with it.

You can request deletion of any data we hold about you at any time by emailing hello@photomedley.com. You can also revoke PhotoMedley's access to your Google account at any time via your Google account permissions.

PhotoMedley is not directed at children under 13. We do not knowingly collect personal information from children under 13.

If we make material changes to this policy, we will update the date at the top of this page. Continued use of PhotoMedley after changes constitutes acceptance of the updated policy.

Questions about this policy? Email us at hello@photomedley.com.