Privacy Policy

1. Who we are

GiftsToU provides tools for creating and sharing digital gifts, including letters, birthday experiences, fireworks shows, videos, and handmade packages. For privacy questions or requests, contact us at hello@giftstou.com.

2. Information we collect

We collect information you provide to use the Service, which may include:

• Account information: name, email address, authentication details, and account preferences.
• Gift content: recipient names, messages, photos, audio, video, voice notes, drawings, design choices, and other content you choose to add.
• Gift opening status: when a recipient opens a shared gift, we may record the first and most recent opening time so its creator can see whether it has been opened. We do not use this feature to identify the recipient or record their precise location.
• Purchase information: the selected paid feature, transaction status, and payment-related records. When payments are enabled, card and payment credentials are processed by the payment provider, not stored by GiftsToU except as necessary transaction records.
• Technical information: IP address, browser and device information, approximate location derived from IP address, page requests, security logs, and diagnostic information.
• Communications: information you send when contacting support or giving feedback.

3. How we use information

We use personal information to provide and maintain the Service; create accounts and private gift links; display gifts to recipients; process and administer purchases; prevent abuse, fraud, and security incidents; improve reliability and usability; respond to support requests; and comply with legal obligations.

Where applicable, our legal bases include performing our contract with you, pursuing legitimate interests such as keeping the Service secure, complying with law, and your consent where required.

4. Private links are shareable links

A gift link is designed to be shared by its creator. Anyone who receives a valid link may be able to view the gift and its included content. Please do not include sensitive information or content you would not want a recipient, or a person with access to the link, to see. The creator controls who receives the link and is responsible for obtaining any permissions needed for the content they add.

5. Service providers and disclosures

We use service providers to host, secure, and operate the Service. Our current infrastructure uses Cloudflare services, including Workers and a database service, to deliver the site and store shareable gift records. When paid features are available, we may use payment processors to collect and process payments. Those providers may process information only as needed to provide their services and under their own privacy terms.

We may also disclose information when required by law, to protect rights, safety, and security, in connection with a business transfer, or with your direction or consent. We do not sell personal information or share it for cross-context behavioural advertising.

6. Cookies and local storage

We use strictly necessary technical mechanisms to operate the site. We also use browser local storage or session storage for preferences and temporary experience settings, such as theme selection and in-progress controls. You may clear these through your browser settings; doing so can reset some preferences or local drafts.

7. Retention

We retain account, gift, transaction, and technical information for as long as reasonably necessary to provide the Service, maintain security, resolve disputes, meet legal obligations, and enforce our agreements. Gift content associated with an active shared link may remain available until it is deleted, the account is closed, or we no longer need it for the purposes above. You may request deletion as described below.

8. Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information. No online service can guarantee absolute security, and you should keep your account credentials and private gift links confidential.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal information, and to withdraw consent where processing is based on consent. California residents may have rights to know, correct, delete, and limit certain uses of personal information. To make a request, email hello@giftstou.com. We may need to verify your identity before responding. You may also have the right to complain to your local data protection authority.

10. International transfers

We may process information in countries other than the country where you live. When we transfer personal information internationally, we use appropriate safeguards where required by applicable law.

11. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information to us, contact us at hello@giftstou.com so that we can take appropriate action.

12. Changes to this policy

We may update this Privacy Policy as the Service changes, including when account, payment, or new sharing features are introduced. We will post the updated version here and revise the “Last updated” date. Material changes may also be communicated through the Service or by email where appropriate.