My WishlistDraft — awaiting counsel
Legal — draft

Privacy policy

What we collect, why, how long we keep it, and what a giver's email is never used for. Written to cover both sides of the product: a list owner with an account, and a giver who has no account at all.

PlaceholderLast updated date on publish
Stand-in copy — not legal text

Every section below is structure only: the headings are real, the words are not. Nothing on this page has been written or reviewed by a lawyer, and none of it may be published. Amber markers are the holes. Counsel to draft against our PII inventory; the engineering data map is in handoff/.

01

Who we are and how to reach us

Legal entity name, registered address and the contact route for privacy requests. entity + address privacy contact

02

What we collect

Three groups, and they are deliberately different sizes. From a list owner: email, list contents and anything typed into an item note. From a giver: a name and an email, attached to a claim. From an organisation: legal name and EIN, plus the named admin. No card, bank or payout details exist anywhere — we never hold money. final field-by-field table

Technical data collected automatically, and what we do not collect. analytics + cookie scope

03

Why we use it, and our lawful basis

One row per purpose: running a list, sending a claim confirmation, sending share-the-cost and thank-you emails, verifying a nonprofit, preventing fraud. purpose/basis table

04

Who else sees it

Email sender, image storage and hosting, named individually with their own privacy terms. There is no payment processor because there are no payments. Nothing is sold, and nothing is shared for advertising. subprocessor list

05

Givers and people who never signed up

A giver's email is used for the claim confirmation, the release link and nothing else. It is not added to a mailing list and is not shown to the list owner in surprise mode. retention period for claim emails

06

People named on a charity list

First name and age at most, held by the organisation and consented to before posting. No surnames, faces, addresses or case detail, ever. consent record + retention rules

07

How long we keep things

Per data type, with the one we are legally required to keep longer: nonprofit verification records. Claim records are kept only as long as the list exists. retention schedule

08

Your rights and how to use them

Access, correction, deletion, portability and objection, plus what survives an account deletion and why. GDPR/CCPA text + response window

09

Security

Encryption in transit and at rest, no card data anywhere on the platform, EXIF stripped from every uploaded photo. breach notification commitment

10

Changes to this policy

How we tell you, and how much notice you get before a material change takes effect. notice period

Replacing this page

The layout, the section nav and the anchors are final — swap the paragraph text and delete the banner and the markers. Section order is the order counsel will review in.