Privacy Policy

This policy explains what personal data Wishboom collects, why, and the choices you have. It applies to organizers (account holders) and guests (people who contribute or sign a card without an account).

Who is responsible

[Company legal name]
[Street address, City, State ZIP, United States]
Email: gift@wishboom.fun

Data we collect

• Organizers: email address, password (stored hashed) or Google sign-in details, name, and the wishes you create (recipient first name, gift, photos, dates, goals).
• Invitees: names and email addresses that an organizer enters to send an invitation and at most one final reminder.
• Guests: name, email, contribution amount, card message and optional photo.
• Payments: handled by our payment provider. We never see or store full card numbers.
• Technical data: IP address, browser type and logs needed to run and secure the service.

How we use it

• To run group gifts: show progress, deliver invitations and reminders, build the group card.
• To process contributions and prevent fraud.
• To send service emails (no marketing without your consent).
• To meet legal obligations.

Individual contribution amounts are visible only to the organizer, never to other guests. We do not sell or rent personal data, and we do not "share" it for cross-context behavioral advertising.

Legal bases (EU/UK visitors)

We process data to perform our contract with you, based on legitimate interests (security, service improvement), to comply with law, and with consent where required. You may withdraw consent at any time.

Service providers

We use trusted processors for hosting and database, email delivery, payment processing and AI image selection (product links you submit are processed to pick a gift photo). They may only use data to provide services to us. Some are located in the United States.

Retention

We keep wish data while your account is active and for up to 24 months after a wish is completed, unless law requires longer (e.g. payment records). You can ask us to delete data earlier.

Your rights

Depending on where you live (including California under the CCPA/CPRA and the EU/UK under the GDPR), you may have the right to access, correct, delete or export your data, object to or restrict processing, and opt out of emails. We will not discriminate against you for exercising these rights. Email us to make a request; you may also complain to your local data protection authority.

Children

Wishboom is used by adults to celebrate children. Accounts and contributions are for adults 18+. We do not knowingly collect personal data directly from children under 13 (COPPA). Organizers should only enter a recipient's first name and photos they have the right to share. If you believe a child gave us data, contact us and we will delete it.

Security

Data is encrypted in transit, photos are stored privately and access is restricted. No system is perfectly secure.

Changes

We will post updates here and notify organizers of material changes.