Privacy Policy

We collect information you provide directly, information generated through your use of our services, and limited technical data collected automatically.

Account Information

• Name — provided during registration or via Google OAuth.
• Email address — used for sign-in, order confirmations, and transactional messages.
• Hashed password — if you register with email/password (we never store plaintext passwords).
• Phone number (optional) — if you choose to add a phone number or sign in via phone OTP.
• Theme preference — your chosen light or dark mode setting.

Gift Data

When you create a gift, we collect the content you provide, including:

• Recipient name
• Occasion and vibe selections
• Personal message text
• Uploaded photos
• Any customization options you select (voice, style, tempo, custom instructions for AI-generated content)

Payment Information

We do not collect or store credit card numbers or full payment details. Payments are processed securely by Stripe. We retain only a Stripe payment intent ID and the transaction amount for our records.

Automatically Collected Data

• Session data — IP address and user agent string, collected as part of authentication sessions.
• Gift view analytics — when someone views a gift delivery page, we collect a hashed viewer fingerprint for view counting. We do not collect or store the viewer's raw personally identifiable information.
• Usage metrics — aggregated site usage data collected through Vercel Analytics.

We use the information we collect to:

• Create, manage, and secure your Popgift.ai account.
• Generate and deliver personalized AI gifts (photo cards, songs, videos) based on the content and preferences you provide.
• Process payments and maintain transaction records.
• Send transactional emails, such as order confirmations and gift delivery notifications.
• Verify your identity through email, Google OAuth, or phone OTP authentication.
• Track gift delivery metrics (e.g., whether a gift has been viewed).
• Analyze aggregated usage patterns to improve our product and user experience.
• Respond to support inquiries and communicate with you about your account or gifts.
• Comply with legal obligations and enforce our terms of service.

We do not sell your personal information to third parties. We do not use your data for advertising or marketing purposes beyond our own transactional communications.

We rely on trusted third-party services to operate Popgift.ai. Each service receives only the data necessary to perform its function:

• Stripe — payment processing. Stripe handles all credit card and payment information directly. We never receive or store your full card details. See Stripe's Privacy Policy.
• Google — OAuth sign-in. If you choose to sign in with Google, Google shares your name and email address with us. See Google's Privacy Policy.
• Twilio — phone number verification via one-time passcodes (OTP). Your phone number is sent to Twilio to deliver verification codes. See Twilio's Privacy Policy.
• UploadThing — file storage for uploaded photos and generated assets. See UploadThing's Privacy Policy.
• Vercel Analytics — aggregated usage metrics to help us understand how our site is used. See Vercel's Privacy Policy.
• Replicate — AI-powered video and music generation. The prompts and parameters you provide for gift creation are sent to Replicate's models. See Replicate's Privacy Policy.
• Anthropic — AI text generation for gift messages and song lyrics. The content you provide (occasion, vibe, message) is sent to Anthropic's language models. See Anthropic's Privacy Policy.
• Resend — transactional email delivery for order confirmations and gift notifications. See Resend's Privacy Policy.

Popgift.ai uses cookies and similar technologies as follows:

• Authentication cookies — essential session cookies that keep you signed in. These are strictly necessary for the service to function and cannot be disabled.
• Theme preference — a cookie or local storage entry that remembers your light/dark mode choice.
• Analytics — Vercel Analytics may set cookies to collect aggregated, anonymized usage data.

We do not use advertising or tracking cookies. We do not participate in cross-site tracking or behavioral advertising networks.

You can manage cookies through your browser settings. Please note that disabling essential cookies will prevent you from signing in and using core features of Popgift.ai.

We retain your data according to the following guidelines:

• Account data — retained for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except as required by law.
• Gift data and generated assets — retained for as long as your account exists, so recipients can continue to access their gifts. If you delete a gift, its associated data and files are removed.
• Payment records — transaction IDs and amounts are retained for accounting, tax, and legal compliance purposes, as required by applicable law.
• Session and analytics data — session records are retained for security and fraud prevention. Aggregated analytics data does not contain personally identifiable information and may be retained indefinitely.

Depending on your location, you may have certain rights regarding your personal information. We honor the following rights for all users:

• Access — you can request a copy of the personal data we hold about you.
• Correction — you can update your account information at any time through your account settings.
• Deletion — you can request deletion of your account and associated personal data.
• Data portability — you can request your data in a portable format.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to opt out of the sale of your personal information. We do not sell personal information, so this right is automatically fulfilled.
• The right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, please contact us at support@popgift.ai. We will respond to verifiable requests within 45 days.

Popgift.ai is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@popgift.ai so we can take appropriate action.

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Passwords are hashed using industry-standard algorithms and are never stored in plaintext.
• All data is transmitted over HTTPS with TLS encryption.
• Payment information is handled entirely by Stripe, a PCI DSS-compliant payment processor. We never receive or store full card details.
• Authentication sessions include security metadata (IP address, user agent) for fraud detection.
• Gift viewer analytics use hashed fingerprints rather than raw personally identifiable information.

While we strive to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Notify you via email or a prominent notice on our website, if the changes are significant.

We encourage you to review this policy periodically. Your continued use of Popgift.ai after any changes indicates your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@popgift.ai
• Entity: Popgift.ai
• Jurisdiction: New York, USA

This privacy policy is provided for informational purposes. Consult with a qualified attorney for legal advice specific to your situation.