Privacy Policy
Last updated: April 14, 2026
Giftaro is operated by Bluestamp, Inc. ("we", "us"). This Policy explains what we collect, how we use it, and the choices you have. Using Giftaro means you agree to this Policy.
What we collect
Account info when you sign up: name, email, and authentication details (a Google account ID or a password hash). You may also add a profile photo.
Gift info when you create or contribute to a gift: titles, descriptions, photos, target amounts, recipient details you enter, messages, and the amount you contribute.
Payment info through Stripe, which handles all card data — we never see your full card number. We do receive limited metadata like amount, currency, status, last four digits, Stripe IDs, and, for organizers, payout and verification details we need to run the Service.
Usage and device data from normal server logs and web/app telemetry: IP address, browser/user-agent, device type, timestamps, and pages viewed.
Communications you send us, plus the transactional emails we send you (receipts, notifications).
How we use it
- run the Service — create accounts, host gifts, process contributions, pay organizers out;
- send transactional messages (receipts, security, account notices);
- prevent fraud and abuse, enforce our Terms, and meet legal and accounting obligations;
- understand usage so we can improve the product;
- with consent or where permitted, send occasional product updates.
We don't sell your personal information, and we don't use it for third-party advertising.
AI features
Some features use third-party AI providers to generate text (for example, suggested gift descriptions). Inputs you provide to those features are sent to the provider under their terms and are not used by us for advertising profiles.
Who we share with
- Service providers who help us run Giftaro — Stripe (payments and identity verification), Google (authentication), our hosting provider (Vercel), our database provider (Turso), our email provider, and AI providers for generative features.
- Other users where it's part of the product — for example, an organizer sees the name (or display name), amount, and message a contributor submits.
- Legal and safety — to comply with law, respond to lawful requests, enforce our Terms, or protect rights and safety.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
Cookies
We use first-party cookies to keep you signed in, remember preferences, and secure the Service. Our analytics and performance tools are cookieless and don't track you across sites. You can turn cookies off in your browser; parts of the Service may break if you do.
Data retention
We keep personal information for as long as your account is active or as needed to run the Service. We keep transaction records for as long as required by tax, accounting, anti-fraud, and legal obligations — typically up to seven years. You can request deletion; we may retain limited information where the law requires it.
Security
We use reasonable technical and organizational measures to protect your information — encryption in transit, access controls, and reputable hosting partners. No system is perfectly secure; you use the Service at your own risk.
Your choices and rights
Depending on where you live (California and other U.S. states, the EEA, the UK) you may have rights to access, correct, delete, export, or object to certain uses of your information, and to withdraw consent. Email support@giftaro.app to exercise these rights. We won't discriminate against you for exercising them. For EEA/UK users, our legal bases for processing are contract, legitimate interests, legal obligation, and consent.
You can delete your account at any time. Some records related to past transactions will be retained as described above.
Children
Giftaro isn't directed to children under 13, and we don't knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.
International users
We operate in the United States. If you use Giftaro from outside the U.S., your information will be transferred to and processed in the U.S. and other countries where our providers operate, which may have different data-protection laws than yours.
Changes
We may update this Policy as Giftaro evolves. If changes are material, we'll let you know (for example, by email or in the app) and update the date above.
Contact
Bluestamp, Inc. — privacy questions or requests can be sent to support@giftaro.app.