Privacy Policy

Effective Date: March 3, 2026

Givemo Gifts ("Givemo," "we," "us," or "our") operates the website givemogifts.com, related mobile applications, and all associated services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using Givemo, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

1. Information We Collect

1.1 Information You Provide Directly

Account information: your email address, display name, and mobile phone number (if you enable SMS notifications), provided during signup via email authentication, Google sign-in, or any other authentication method we may offer.
Giftee profiles: names, relationships, birthdays, interests, preferences, gift budgets, and any other notes or details about people you add to the Service.
Chat and conversation data: messages, prompts, and information you share through our AI-powered assistant, including descriptions of people, gift preferences, occasions, budgets, and feedback on recommendations.
Gift history: records of gifts you have given or plan to give, including product names, prices, purchase dates, recipients, and your ratings or feedback.
Preferences and settings: email and SMS reminder preferences, notification settings, communication preferences, SMS consent status, and account configuration.
Payment information: if you subscribe to a paid tier, payment details are collected and processed by our third-party payment processor (Stripe). We do not store your full credit card number, but we may receive and store limited billing information such as the last four digits of your card, card brand, expiration date, and billing address for record-keeping and support purposes.
Communications: any messages, feedback, support requests, or survey responses you send to us.
User-generated content: reviews, wishlist items, shared gift lists, or any other content you voluntarily submit through the Service.

1.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain information through cookies, pixels, SDKs, and similar technologies:

Device and Browser Information

Browser type and version, operating system, device type and model, screen resolution, and device identifiers.
Mobile device information including unique device identifiers, mobile operating system, and mobile network information.

Usage Data

Pages and features visited, actions taken, timestamps, session duration, click paths, and interactions with the Service.
Search queries, recommendations viewed, products clicked, and purchasing behavior through affiliate links.

Log Data

IP address, access times, referring and exit URLs, error logs, and server request data.

Location Data

Approximate geographic location derived from your IP address. We do not collect precise GPS location unless you explicitly grant permission.

1.3 Information From Third Parties

Authentication providers: if you sign in using Google or another third-party authentication provider, we receive your email address and basic profile information (such as name and profile picture). We do not access your contacts, calendar, or other account data unless you explicitly authorize it.
Payment processor: Stripe may provide us with transaction confirmations, payment status, and limited billing details to manage your subscription.
Advertising partners: advertising platforms (described in Section 6) may provide us with aggregated or pseudonymized data about the effectiveness of our advertising campaigns, including conversion data and audience insights.
Affiliate partners: when you purchase products through affiliate links in our Service, affiliate networks may share transaction confirmation and commission data with us. This data is typically aggregated or pseudonymized and does not include your full payment details.

2. How We Use Your Information

Providing and Improving the Service

To operate, maintain, and improve the Service, including tracking important dates, sending reminders, managing contacts, and providing personalized recommendations.
To send you email and SMS reminders at intervals you have configured, including birthday reminders, holiday and occasion reminders (such as Christmas, Hanukkah, Valentine's Day, Mother's Day, Father's Day, and other seasonal events), and notifications about giveaways, promotions, and special offers.
To authenticate your identity and secure your account.
To process payments and manage your subscription.

AI-Powered Features

To power personalized recommendations using your profiles, conversation history, preferences, and feedback.
To search for and retrieve relevant product information from third-party sources on your behalf.
To improve the accuracy and relevance of AI recommendations over time by analyzing patterns in anonymized and aggregated usage data.
To process natural language inputs you provide through our AI chat assistant and convert them into structured profile data.

Analytics and Optimization

To understand how the Service is used, identify trends, measure feature engagement, and optimize user experience.
To conduct A/B testing, analyze user flows, and improve conversion rates.
To generate aggregated, de-identified analytics and reports.

Advertising and Marketing

To measure the effectiveness of our advertising campaigns across platforms.
To build custom and lookalike audiences for advertising purposes using hashed or pseudonymized identifiers.
To deliver and personalize marketing communications about the Service (with your consent where required).
To attribute conversions and optimize ad spend.

Communications

To communicate with you about your account, service updates, new features, and support requests.
To send promotional emails about the Service. You may opt out of promotional communications at any time.

Legal and Safety

To enforce our Terms of Service and comply with legal obligations.
To detect, prevent, and address fraud, abuse, security issues, and technical problems.

We will never sell your personal information to third parties for their own marketing purposes.

3. How We Share Your Information

We do not sell your personal information. We may share information in the following limited circumstances:

Service Providers

We use trusted third-party services to operate Givemo, including providers for cloud hosting, database management, email delivery, SMS delivery, user authentication, payment processing, and AI-powered features. These providers access your data only as necessary to perform their functions and are contractually obligated to protect it. Key service providers include:

Google: sign-in authentication.
Stripe: payment processing and subscription management.
Third-party AI providers: processing of conversations and profile data to generate personalized recommendations. Data sent to AI providers is used solely for generating responses and is subject to their data processing agreements. We instruct our AI providers not to use your personal data to train their general-purpose models.

SMS Opt-In Data: Text messaging originator opt-in data and consent will not be shared with any third parties. Your phone number and SMS consent status are used solely by Givemo to deliver the text message reminders and notifications you have requested.

Analytics and Tracking Providers

We use analytics services to understand how the Service is used and to improve user experience. These providers may collect data through cookies, pixels, and similar technologies (see Section 6 for details).

Advertising Platforms

We share certain data with advertising platforms for campaign measurement, conversion tracking, retargeting, and audience building. This data may include hashed email addresses, device identifiers, IP addresses, and on-site behavioral events (such as signups and purchases). We use tracking pixels and SDKs from the following platforms:

Google Ads (including Google remarketing tags)
Meta Ads (Facebook and Instagram, via the Meta Pixel)
TikTok Ads (via the TikTok Pixel)
Reddit Ads (via the Reddit Pixel)
X / Twitter Ads (via the X Pixel)
LinkedIn Ads (via the LinkedIn Insight Tag)
Pinterest Ads (via the Pinterest Tag)
Snapchat Ads (via the Snap Pixel)
Microsoft Advertising / Bing Ads (via the UET Tag)
Additional advertising platforms as we expand our marketing efforts.

These platforms may use this data in accordance with their own privacy policies to serve you targeted advertisements on their networks. You can opt out of personalized advertising through the mechanisms described in Section 7.

Affiliate Networks

When our AI assistant recommends products, those recommendations may include affiliate links. If you click an affiliate link and make a purchase, the affiliate network and/or retailer will know that you arrived from Givemo. We may receive commission and transaction confirmation data from these affiliate networks. We do not share your giftee profiles or personal data with affiliate partners.

Aggregated and De-identified Data

We may share aggregated, de-identified data that cannot reasonably be used to identify you. This includes trend reports, market insights, and statistical analyses. This data is used for business development, research, and partnerships.

Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Givemo, our users, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our Service before your information becomes subject to a different privacy policy.

4. AI-Powered Features and Your Data

How AI Uses Your Data

When you interact with our AI assistant, your messages, profile data, stated preferences, and feedback are sent to third-party AI providers to generate personalized responses and recommendations.
The AI assistant may use information from your profiles (such as interests, relationships, and past gifts) to find and suggest relevant products from third-party sources.
Your conversation history within a session may be used to provide context for more relevant recommendations.
Feedback you provide (such as ratings or preferences) is used to improve future suggestions.

Data Processing by AI Providers

Conversations are processed by third-party AI providers under data processing agreements that restrict how your data may be used.
We instruct our AI providers not to use your personal data to train their general-purpose models.
AI-generated recommendations are suggestions only. We do not guarantee their accuracy, suitability, or availability.

Product Search and Retrieval

When the AI assistant searches for product recommendations, it may query third-party product databases and affiliate networks using information derived from your profiles (such as interests and budget ranges). The queries sent to these services are based on preference data and do not include your personal identifying information.

Automated Decision-Making

Our AI features involve automated processing of your data to generate personalized recommendations. These recommendations are informational only and do not have legal or similarly significant effects on you. You are always free to disregard any recommendation. If you have concerns about automated processing, please contact us at privacy@givemogifts.com.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Specific retention practices include:

Account data: retained until you delete your account or request deletion.
Profiles and reminders: retained until you delete individual records or delete your account. Deleting a profile automatically removes associated reminders.
AI conversation history: retained for a reasonable period to provide continuity and improve recommendations. You may request deletion of your conversation history at any time.
Phone number and SMS consent: your phone number and SMS consent status are retained while your account is active and SMS notifications are enabled. If you opt out of SMS, your consent status is updated to reflect your preference. If you delete your account, your phone number and SMS records are deleted within 30 days.
Gift history and feedback: retained until you delete individual records or your account.
Payment records: transaction records may be retained for up to 7 years to comply with tax and financial reporting obligations.
Analytics data: usage data collected through analytics platforms is retained according to those platforms' standard retention policies.
Advertising data: data shared with advertising platforms is subject to those platforms' retention policies.

If you delete your account, we will delete your personal data within 30 days, except where retention is required for legal, regulatory, or legitimate business purposes. Some data that has already been shared with third-party analytics or advertising platforms cannot be recalled, but we will cease any further sharing.

6. Cookies, Pixels, and Tracking Technologies

We use cookies, tracking pixels, SDKs, and similar technologies for authentication, analytics, advertising, and personalization.

Essential Cookies

Required for authentication, session management, and core Service functionality. These cannot be disabled without breaking the Service.

Analytics Cookies and Scripts

Used to understand how the Service is used, measure feature engagement, and improve user experience. We use industry-standard analytics tools to collect anonymized usage data, page views, events, and user flows.

Advertising Pixels and Tags

Used to measure advertising effectiveness, attribute conversions, build audiences, and enable retargeting:

Google Ads Pixel/Tag: tracks conversions from Google Ads campaigns and enables remarketing audiences.
Meta Pixel (Facebook/Instagram): tracks conversions and enables audience creation for Meta advertising platforms.
TikTok Pixel: tracks conversions from TikTok ad campaigns and enables audience creation.
Reddit Pixel: tracks conversions from Reddit ad campaigns and enables audience targeting.
X (Twitter) Pixel: tracks conversions from X ad campaigns and enables audience targeting.
LinkedIn Insight Tag: tracks conversions from LinkedIn ad campaigns and enables audience creation.
Pinterest Tag: tracks conversions from Pinterest ad campaigns and enables audience targeting.
Snap Pixel: tracks conversions from Snapchat ad campaigns and enables audience creation.
Microsoft UET Tag: tracks conversions from Microsoft Advertising / Bing Ads campaigns and enables audience targeting.
Additional pixels: we may add tracking pixels from additional advertising platforms in the future. This policy will be updated accordingly.

These pixels may collect data including your IP address (which may be hashed), browser and device information, pages visited, actions taken (such as signups, subscriptions, or purchases), and hashed email identifiers. This data is transmitted to the respective advertising platform and processed according to their privacy policies.

Managing Your Cookie Preferences

You can manage cookies and tracking technologies through the following mechanisms:

Cookie consent banner: when you first visit our Service, you will be presented with a cookie consent banner that allows you to accept or decline non-essential cookies and tracking technologies.
Browser settings: most browsers allow you to block or delete cookies through their settings. Note that blocking essential cookies will prevent the Service from functioning properly.
Platform opt-outs: you can opt out of personalized advertising from specific platforms through their own settings (see Section 7).
Do Not Track: we currently do not respond to "Do Not Track" browser signals, as there is no universally accepted standard for compliance. However, you may use the cookie consent and platform opt-out mechanisms described above.

7. Your Rights and Choices

7.1 All Users

Regardless of your location, you have the right to:

Access: request a copy of the personal information we hold about you.
Correction: request correction of inaccurate or incomplete information.
Deletion: request deletion of your account and personal data.
Data export: request your data in a portable, machine-readable format.
Opt-out of marketing emails: unsubscribe from promotional communications at any time using the link in any marketing email or from your account settings.
Opt-out of SMS: reply STOP to any SMS message, disable SMS notifications in your account settings, or contact us at support@givemogifts.com. See our Terms of Service (Section 5) for full SMS messaging terms.
Opt-out of non-essential cookies: adjust your preferences via our cookie consent banner or browser settings.
Opt-out of personalized advertising: use the platform-specific opt-out mechanisms listed below.

To exercise any of these rights, contact us at privacy@givemogifts.com.

Advertising Opt-Out Options

Google: ads.google.com/settings or the Google Ads Settings page.
Meta (Facebook/Instagram): facebook.com/adpreferences or Instagram app settings.
TikTok: TikTok app settings under Privacy > Ads Personalization.
Reddit: reddit.com account settings under Privacy & Security.
General opt-out: the Digital Advertising Alliance (DAA) at optout.aboutads.info or the Network Advertising Initiative (NAI) at optout.networkadvertising.org.
Mobile devices: use "Limit Ad Tracking" (iOS) or "Opt out of Ads Personalization" (Android) in your device settings.

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

Right to know: you may request details about the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the categories of third parties with whom we share it.
Right to delete: you may request deletion of your personal information, subject to certain exceptions.
Right to correct: you may request correction of inaccurate personal information.
Right to opt-out of sale or sharing: while we do not sell personal information for monetary consideration, certain data sharing practices with advertising platforms (such as sharing hashed identifiers for targeted advertising) may constitute "sharing" under the CPRA. You may opt out of this sharing by adjusting your cookie preferences or contacting us.
Right to limit use of sensitive personal information: we do not use sensitive personal information for purposes beyond what is necessary to provide the Service.
Right to non-discrimination: we will not discriminate against you for exercising your privacy rights.

To submit a verifiable consumer request, email privacy@givemogifts.com. We will respond within 45 days. If we require additional time to fulfill your request, we will notify you of the reason and may take up to an additional 45 days (90 days total). You may also designate an authorized agent to make a request on your behalf.

7.3 European Economic Area, UK, and Swiss Residents (GDPR)

If you are located in the EEA, United Kingdom, or Switzerland, you have the following additional rights under the General Data Protection Regulation (GDPR):

Legal basis: we process your data based on consent (for cookies, marketing, and optional features), contract performance (to provide the Service), and legitimate interests (to improve the Service, ensure security, and conduct analytics).
Right to portability: you may request your data in a structured, commonly used, machine-readable format.
Right to restrict processing: you may request that we limit how we use your data.
Right to object: you may object to processing based on legitimate interests, including profiling for direct marketing.
Right to withdraw consent: where processing is based on consent (including cookie consent), you may withdraw consent at any time without affecting the lawfulness of prior processing.
Right to lodge a complaint: you may file a complaint with your local data protection authority.
Automated decision-making: our AI recommendation features involve profiling, but recommendations are informational only and do not produce legal or similarly significant effects. You may request human review of any automated processing that concerns you.

For GDPR-related requests, contact us at privacy@givemogifts.com. We will respond within 30 days. For complex or numerous requests, we may extend this period by up to two additional months (90 days total) and will notify you of any extension and the reason within the initial 30-day period.

7.4 Other Jurisdictions

If you reside in a jurisdiction with specific data protection laws (such as Brazil's LGPD, Canada's PIPEDA, or Australia's Privacy Act), you may have additional rights. We will honor reasonable privacy requests consistent with applicable law. Contact us at privacy@givemogifts.com to exercise your rights.

8. International Data Transfers

Givemo is based in the United States. Your information may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

Where required by applicable law, we ensure appropriate safeguards for international data transfers, including standard contractual clauses, data processing agreements with our service providers, and reliance on adequacy decisions where available.

By using the Service, you acknowledge that your information will be processed in the United States and other jurisdictions as described in this policy.

9. Data Security

We take the security of your data seriously and implement appropriate technical and organizational measures, including:

All data in transit is encrypted using TLS/HTTPS.
Database access is controlled by Row Level Security (RLS) policies, ensuring users can only access their own data.
Authentication tokens are managed via secure, HTTP-only cookies.
Service role keys, API credentials, and secrets are stored as encrypted environment variables, never exposed to client-side code.
Third-party service providers are evaluated for their security practices and bound by data processing agreements.
We conduct periodic reviews of access controls and security configurations.
Payment information is handled by Stripe, a PCI DSS Level 1 certified payment processor.

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. If we become aware of a security breach that affects your personal data, we will notify you and relevant authorities as required by applicable law.

10. Children's Privacy

Givemo is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@givemogifts.com.

Note: giftee profiles may include information about minors (such as a child's name and birthday entered by a parent or guardian). This information is provided by the adult account holder for their own gift-planning purposes and is protected under the account holder's privacy settings.

11. Third-Party Links and Services

The Service may contain links to third-party websites, products, or services, including retailer websites accessed through affiliate links and product recommendations. We are not responsible for the privacy practices, content, or security of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

Product recommendations generated by our AI assistant link to third-party retailers. Any purchases you make are transactions between you and the retailer, governed by the retailer's terms and privacy policy. We do not control the retailer's data practices.

12. Push Notifications and Mobile App Permissions

If you use our mobile application or Progressive Web App (PWA), we may request permission to send push notifications. You can manage notification preferences in your device settings or within the app. We may also request access to device features such as your camera (for scanning gift items or receipts) or contacts (for importing giftee information). These permissions are always optional, and you can revoke them at any time through your device settings.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time as our practices evolve or as required by law. When we make material changes, we will notify you by email or by posting a prominent notice on the Service prior to the change becoming effective. For significant changes that affect how we process your data, we will provide at least 30 days' notice.

We encourage you to review this policy periodically. The "Effective Date" at the top of this policy indicates when it was last revised. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Givemo Gifts
Email: privacy@givemogifts.com
Website: https://www.givemogifts.com

For GDPR-specific inquiries, you may also contact our designated data protection contact at the email address above.