Privacy Policy

Information we collect

We collect the adult purchaser’s email address, payment and transaction identifiers, acceptance records, and limited card details: a recipient first name or nickname, optional pronunciation, relationship, positive traits and interests, sender name, and optional message. We also retain security and operational records such as internal identifiers, coarse request limits, generation status, and provider cost.

We do not ask for recipient contact details, surnames, exact birth dates, schools, addresses, photos, likenesses, or voice recordings.

How we use information

We use this information to validate and moderate requests, process checkout, generate and deliver the card, email the purchaser’s management link, prevent abuse, handle deletion and refunds, operate the service, and meet legal obligations.

Service providers

We send only the information needed for each function to service providers. Stripe processes checkout and payment data. OpenRouter and its routed model providers process constrained prompts, lyrics, and generated media for generation and safety review. Our email, hosting, PostgreSQL, queue, and private object-storage services process delivery and operational data. Provider retention and processing terms can differ from ours.

AI processing

Approved personalization can be included in prompts sent to generation providers. Do not submit details you do not want processed for card creation. Routine application logs and payment metadata exclude raw personalization, messages, lyrics, and secret capability tokens.

Retention

Creative personalization and generated media are retained for up to 12 months unless the purchaser deletes the card sooner. Deletion immediately revokes card and management links and queues creative-data removal. We may retain minimal transaction, acceptance, fraud-prevention, refund, tax, and dispute records for the period required by law or legitimate business obligations.

Secret links and sharing

View and management links are high-entropy capability links. They are not indexed and use generic preview metadata, but anyone who obtains a link may use the access it grants. Avoid forwarding the management link. The purchaser can revoke both links by deleting the card.

Children

Purchasers must be adults. A card may celebrate a child, but the service is not directed to children and does not request a child’s contact information, photo, account, or precise location.

Security and international processing

We use access controls, private storage, hashed capability tokens, encryption in transit, redacted logs, and bounded retention. No system is perfectly secure. Providers may process information in the United States or other locations where they operate.

Your choices

Use the management link to view or delete the card. For privacy questions or requests concerning retained transaction records, contact [email protected]. We may need to verify that a requester controls the purchaser email or management capability.