Privacy Policy

This Privacy Policy describes how Greeting Joy ("Greeting Joy", "we", "us", or "our") collects, uses, and protects your personal information when you use our website and services.

Effective Date: May 2026

Information We Collect

We collect information that you provide directly to us, including:

  • Account information: email address, name, and profile picture (when signing in via Google or other social login providers).
  • Payment information: processed securely by our third-party payment provider (Stripe). We do not store your full credit card details on our servers.
  • Card content you create: greeting card messages, video recordings, audio recordings, recipient details, and other content created through our services.
  • Recipient information: names and email addresses of people you send greeting cards to.
  • Communications: any correspondence you send to us via email or our contact forms.

We also collect certain information automatically:

  • Usage data: pages visited, features used, and interactions with the service.
  • Device information: browser type, operating system, IP address, and general location (country/region level).
  • Cookies and similar technologies: for session management, authentication, analytics, and improving your experience.
  • Referral data: UTM parameters and referral source to understand how you found us.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our greeting card services.
  • Deliver greeting cards to recipients on your behalf, including scheduled deliveries.
  • Process transactions and manage your account and credits.
  • Authenticate your identity and secure your account.
  • Send you transactional emails (login codes, purchase confirmations, card delivery notifications) and, with your consent, marketing communications.
  • Send event reminder emails when you have configured reminders.
  • Analyse usage trends to improve our platform and user experience.
  • Detect and prevent fraud, abuse, and security incidents.
  • Comply with legal obligations.

Your Content and Creations

Greeting cards, messages, videos, audio recordings, and other content you create using Greeting Joy are yours. We do not claim ownership over your creations.

Your card content is shared with the intended recipients as part of the card delivery process. For social/group cards, wishes and messages may be visible to other contributors based on the privacy settings you configure.

Recipient Data

When you send a greeting card, we collect your recipient's name and email address solely for the purpose of delivering the card. We do not use recipient email addresses for marketing or any other purpose beyond card delivery and related notifications (e.g., reply notifications).

Recipients may request deletion of their data by contacting us.

Third-Party Services and Integrations

We use trusted third-party service providers to operate our platform:

  • Authentication: Google OAuth (and in the future, Apple Sign In) for social login. When you sign in with Google, we receive your name, email, and profile picture from Google in accordance with their privacy policy.
  • Payments: Stripe for secure payment processing.
  • AI Image Generation: OpenAI for generating custom card backgrounds. Prompts you submit for custom backgrounds may be processed by OpenAI in accordance with their privacy policy.
  • File Storage: Cloudflare R2 for secure storage of uploaded media (video, audio, images).
  • Hosting and Infrastructure: cloud hosting providers for data storage and content delivery.
  • Analytics: anonymised analytics to understand usage patterns.

Social Login (Google, Apple)

When you choose to sign in using a social login provider (e.g., Google), we receive limited profile information as described above. We only request the minimum scopes necessary for authentication (openid, email, profile). We do not access your contacts, calendar, drive, or any other private data from your Google account.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you request account deletion, we will remove your personal data within 30 days, except where we are legally required to retain it (e.g., financial transaction records).

Greeting cards and associated content (messages, media) will also be deleted upon account deletion.

Data Security

We implement industry-standard security measures to protect your personal information, including:

  • HTTPS encryption for all data in transit.
  • Secure authentication mechanisms.
  • Regular security audits and monitoring.
  • Access controls limiting who can access your data.

Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: request correction of inaccurate data.
  • Erasure: request deletion of your personal data ("right to be forgotten").
  • Portability: request your data in a portable format.
  • Objection: object to certain processing of your data.
  • Withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, please contact us using the contact information at the bottom of our website.

Children's Privacy

Our services are not directed to children under the age of 13 (or applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

International Data Transfers

Your information may be processed and stored in countries other than your own. We ensure appropriate safeguards are in place for any international data transfers in compliance with applicable data protection laws.

Cookies

We use cookies for:

  • Essential cookies: required for authentication, session management, and security.
  • Analytics cookies: to understand how our service is used and improve it.
  • Preference cookies: to remember your settings and preferences (e.g., dark mode, language).

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the service.

Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. We encourage you to review this page periodically.

Policy last updated: May 2026

For questions about this Privacy Policy, please contact us using the contact page at the bottom of our website.