1. Information We Collect

When you create a GiftPilot account, we collect your name, email address, company name, and phone number. When you submit a client order, we collect the recipient's name, mailing address, and closing date. Payment information is collected and processed securely by Stripe — we never store your full card details.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your GiftPilot account
• Fulfill gift orders and ship packages to your clients
• Process payments through Stripe
• Send you order confirmations and status updates
• Respond to support requests
• Improve our platform and services

3. Sharing of Information

We do not sell your personal information. We share data only with trusted third parties who help us operate our service:

• Stripe — payment processing
• Supabase — secure data storage and authentication
• Fulfillment partners — sourcing, engraving, packaging, and shipping of gifts

Each partner is contractually required to handle your data securely and use it only for the purpose of providing their services to us.

4. Client Recipient Data

When you enter a client's name and mailing address to submit a gift order, that information is used solely to fulfill and ship the gift. We do not contact your clients directly, add them to marketing lists, or share their information with any party beyond what is required to deliver their gift.

5. Data Retention

We retain your account data for as long as your account is active. Order records are retained for a minimum of 3 years for business and tax purposes. You may request deletion of your account and associated data at any time by contacting us.

6. Cookies and Tracking

GiftPilot uses session cookies to keep you signed in. We do not use third-party advertising cookies or tracking pixels. Anonymous usage data may be collected to help us understand how the platform is used and improve it over time.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at the address below.

8. Security

We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse. Authentication is handled by Supabase, and all data is transmitted over encrypted HTTPS connections.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. Continued use of GiftPilot after changes are posted constitutes your acceptance of the revised policy.

10. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at:

GiftPilot
Email: support@giftpilot.com