Privacy Policy

Givery, Inc. (“Givery,” “we,” “us,” or “our”) operates the Givery platform, including the website at givery.com and any associated mobile applications (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using Givery, you agree to the terms of this Privacy Policy. If you do not agree with the practices described here, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create a Givery account, we collect your email address, username, display name, and password (or authentication credentials if you sign in through Google or Apple). You may also choose to provide a bio, birthday, and profile avatar.

1.2 Shipping Information

If you add a shipping address to your profile (so gift-givers can send you physical items), we store that address in encrypted form. Your full shipping address is only shared with the person fulfilling your wish once a gift has been granted.

1.3 Payment Information

Givery uses Stripe to process all payments. When you contribute to a wish through ChipIn or set up a Stripe Connect account to receive funds, your payment card details and banking information are collected and stored directly by Stripe. Givery does not store your full card number or bank account details on our servers. Please refer to Stripe's Privacy Policy for details on how they handle your payment data.

1.4 Guest Contribution Information

If you contribute to a wish without creating an account (guest checkout), we collect your name and email address to process and confirm your contribution.

1.5 User Content

We collect content you create on the platform, including wishlists, wish descriptions, images, thank-you messages, and any other content you post or share through the Service.

1.6 Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, actions taken, time spent on pages, and referring URLs. This data helps us understand how people use Givery and where we can improve.

1.7 Device and Technical Information

We collect device type, operating system, browser type and version, IP address, language preference, and screen resolution. If you enable push notifications, we collect your push notification token.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service — create and manage your account, display your wishlists and profile, enable social features like following and sharing, and facilitate gift giving.
• Process payments — handle ChipIn contributions, payout funds to wish recipients, and send transaction confirmations.
• Communicate with you — send account notifications, contribution receipts, wish updates, and respond to your support requests. We may also send product updates and announcements.
• Improve the platform — analyze usage patterns, diagnose technical issues, and develop new features.
• Ensure safety and security — detect and prevent fraud, abuse, and unauthorized access.
• Comply with legal obligations — meet applicable legal requirements, enforce our terms, and protect our rights.

3. How We Share Your Information

We do not sell your personal information. We never have, and we never will. We share your information only in the following circumstances:

3.1 Service Providers

We work with trusted third-party services to operate Givery. These providers only access the information necessary to perform their functions:

• Stripe — payment processing, payouts, and financial compliance.
• Supabase — authentication, database hosting, and file storage.
• Resend — transactional email delivery (contribution confirmations, account notifications).
• PostHog — product analytics to understand how the Service is used (anonymized and aggregated where possible).

3.2 Other Users

Information you make public on your profile (display name, username, bio, avatar, and wishlists) is visible to other users and visitors. When someone fulfills your wish, your shipping address is shared with the gift-giver so they can send the item.

3.3 Legal Requirements

We may disclose your information if required to do so by law, in response to a valid legal process (such as a subpoena or court order), or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Givery, our users, or the public.

3.4 Business Transfers

If Givery is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4. Data Security

We take the security of your information seriously and implement appropriate technical and organizational measures to protect it:

• All data in transit is encrypted using HTTPS/TLS.
• Data at rest is encrypted in our database.
• Shipping addresses are stored with additional application-level encryption.
• We use Row Level Security (RLS) policies to ensure users can only access data they are authorized to see.
• Payment information is handled entirely by Stripe, which is PCI DSS Level 1 certified.
• Authentication tokens and sessions are managed securely with industry-standard practices.

No method of transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. If you become aware of any security vulnerability, please contact us immediately.

5. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential cookies — required for authentication, session management, and security. These cannot be disabled.
• Analytics cookies — used by PostHog to help us understand how users interact with Givery. These collect anonymized usage data such as pages visited and features used.

We do not use advertising cookies or third-party tracking for ad targeting purposes. Givery does not serve ads.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — update or correct inaccurate information. You can edit most account details directly from your profile settings.
• Deletion — request deletion of your account and associated personal data. Some information may be retained as required by law or for legitimate business purposes (such as transaction records).
• Data export — request a machine-readable copy of your data.
• Opt-out of marketing — unsubscribe from promotional emails at any time using the link in any marketing email or by updating your notification preferences. Note that transactional emails (such as contribution receipts) are not optional.
• Push notifications — you can disable push notifications at any time through your device or browser settings.

To exercise any of these rights, contact us at privacy@givery.com. We will respond to your request within 30 days.

7. Children's Privacy

Givery is not intended for children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as quickly as possible. If you believe a child under 13 has provided us with personal information, please contact us at privacy@givery.com.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain certain data for legal, financial, or compliance purposes (for example, transaction records may be retained for up to 7 years as required by tax and financial regulations).

9. International Data Transfers

Givery is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to the United States and other countries as described in this policy.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). You have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of your personal information. As stated above, we do not sell personal information. To exercise your California privacy rights, contact us at privacy@givery.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page and updating the “Last Updated” date. For significant changes, we may also notify you by email or through a notice on the Service. Your continued use of Givery after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: