Data categories
What we collect
Account and session data; gift chat and recipient details; wishlists, saves, reactions, refinements, and gift history; commerce support data; usage events, logs, referrers, device data, and approximate location.
Legal / Privacy + data
Covers gift context, optional Google connectors, AI processing, Shopify checkout, analytics, retention, and user controls.
Plain-language summary
What we use
Gift notes, profiles, wishlists, feedback, optional connectors, shop metadata, and analytics.
What we do not do
No profile sales, no raw payment cards, and no stored full Gmail bodies, raw subjects, or raw sender headers.
Your controls
Use without Google, revoke connectors, opt out of AI evaluation, or request access or deletion.
Data categories
Account and session data; gift chat and recipient details; wishlists, saves, reactions, refinements, and gift history; commerce support data; usage events, logs, referrers, device data, and approximate location.
Optional Google data
Calendar and Contacts help detect occasions and relationship signals. Gmail is optional and eligibility-gated; it uses narrow gift-signal searches and stores derived signals, subject hashes, confidence, and dates rather than raw messages.
AI processing
Gemini supports chat and profile extraction. Anthropic supports recommendations, cards, and profile summaries. AI output is assistive and can be wrong; purchases remain the user’s decision.
Subprocessors
Google, Anthropic, Shopify, PostHog, Railway, Resend, and Sentry may process data as needed for sign-in, AI, checkout, analytics, hosting, transactional email, and error monitoring.
Cookies + analytics
Essential cookies include pa_user and pa_oauth_state. Local storage supports resumable sessions and UI state. PostHog may record heatmaps and session replay; email inputs are masked, but gift context and notes may appear in recordings.
Retention + rights
Connector tokens remain until revoked. Revoking Gmail deletes its stored signals; revoking Calendar or Contacts deletes the derived frequency data and clears activation-derived overlay fields. Users can request access, correction, export, deletion, or complaint review.
Contact
You can also revoke Google permissions at myaccount.google.com/permissions.