Privacy Policy

Last updated: May 14, 2026

Giftwrapped is operated by FloMoney LLC (“we,” “us,” or “our”), a California limited liability company. This Privacy Policy describes how Giftwrapped collects, uses, and shares information when you use gift-wrapped.com, shop.gift-wrapped.com, or any related service.

1. Information we collect

Account information. Email, first name, password (stored hashed via Supabase Auth), and optionally birth month and day (no year).

Celebration information. Celebrant first name and birth month/day (entered by the Organizer), videos / photos / text you record, your displayed name to other Contributors and the Celebrant, and responses to optional questionnaire prompts.

Payment information (Contributions). All payment credentials are collected and processed by PayPal or Stripe directly. Giftwrapped never sees your full payment details. From the processors we receive only transaction ID, amount, account identifier for refund routing, and payment status.

Store purchases. When the Celebrant redeems a gift card or makes a purchase at shop.gift-wrapped.com, that purchase is processed by Shopify and its payment processors. Shopify's own privacy policy governs the information Shopify collects.

Technical information. IP address, browser type and version, device type, pages visited, and approximate location derived from IP — used for security and fraud prevention.

2. How we use your information

To operate and maintain the Service, authenticate you, process Contributions and issue Giftwrapped Gift Cards, coordinate Celebration Links, send Service-related emails, fulfill and ship store orders, respond to support requests, detect fraud and abuse, and comply with our legal obligations. We do not use your information for advertising, third-party marketing, or sale to data brokers.

3. How we share your information

We share your information only as necessary to operate the Service:

• PayPal, Inc. — Contribution payment processing. PayPal collects payment credentials directly from you.
• Stripe, Inc. — Contribution and store payment processing. Stripe collects payment credentials directly from you.
• Shopify, Inc. — e-commerce store, gift card issuance, store checkout. We share the Celebrant email and gift card amount.
• Printful, Inc. — print-on-demand fulfillment. We share shipping address and product details for store orders.
• Supabase — database and authentication infrastructure for the platform.
• Vercel — application hosting.
• Sendblue — optional iMessage delivery of birthday-morning notifications. We share the Celebrant's phone number (provided by the Organizer).

We also share information when required by law, in response to valid legal process, or to protect the rights, property, or safety of Giftwrapped, our users, or others. We do not sell your personal information.

4. Payment information — processors vs. us

Because we use PayPal Checkout, Stripe Checkout, and Shopify Checkout for all payments, the processors collect, store, and are responsible for payment credentials, payment method details, verified identity information used for KYC, transaction records, and disputes. Giftwrapped collects and stores only transaction metadata. The processors' privacy policies govern the information they collect:

• PayPal: paypal.com/us/legalhub/privacy-full
• Stripe: stripe.com/privacy
• Shopify: shopify.com/legal/privacy

5. Video and message content

Videos and messages you record are stored on Supabase storage and accessible only via the private Celebration Link; they are not publicly indexed. You retain ownership. By recording, you grant Giftwrapped a limited license to host and display them to the Celebrant and authorized viewers.

6. Cookies and tracking

We use cookies for authentication, security, and basic analytics. We do not use third-party advertising trackers. shop.gift-wrapped.com (Shopify) uses Shopify's standard cookies for cart, checkout, and analytics.

7. Data retention

• Account data — retained while your account is active. Request deletion at support@birthdayfor.com.
• Transaction records — 7 years (U.S. tax and financial-record obligations).
• Gift card balances and ledger — retained while a balance is outstanding; 7 years after redemption.
• Video and message content — 1 year after the Celebration Day, then deleted unless archived.
• Backups — up to 90 days after deletion of the live record.
• Store orders — per Shopify's standard retention.

8. Security

Encryption in transit (HTTPS/TLS), encryption at rest (Supabase-managed), hashed password storage, role-based access control internally, and tokenized payment processing — Giftwrapped never handles raw payment credentials. Report security issues to security@birthdayfor.com.

9. Children's privacy

The Service is not intended for children under 13. Celebrants under 13 may not be the subject of a group gift. If you become aware that a child under 13 has provided personal information to the Service, contact us and we will delete it.

10. California residents — CCPA / CPRA rights

California residents have the right to know, access, request a copy, request deletion, opt out of sale or sharing (we do not sell or share for advertising), limit sensitive personal information use, and non-discrimination for exercising these rights. Email support@birthdayfor.com with subject line “California Privacy Request” — we will verify identity before responding.

11. Other state privacy rights

Residents of Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws have similar rights of access, correction, deletion, and portability. Email support@birthdayfor.com to exercise any such right.

12. International users

The Service is operated in the United States and intended for U.S. users only. Information accessed from outside the U.S. will be transferred to and processed in the U.S. Do not use the Service if you do not consent to this transfer.

13. Changes

We may update this policy at any time. Material changes will be communicated by email to your account email, or by a prominent notice on the Service, before they take effect.

14. Contact

Questions? Email support@birthdayfor.com.

Giftwrapped is a service of FloMoney LLC, a California limited liability company.