The Gift Lab — Privacy Policy
Effective 29 June 2026
This policy explains what we collect and how we use it. Controller: TheGiftLab, contact hello@thegiftlab.app.
What we collect
- Gift content: the answers and photos you submit to build a gift.
- Contact: your email (to send the link and receipt) and, if you choose, the recipient’s email (to deliver the gift).
- Payment: handled by Stripe — we receive confirmation of payment, never your card number.
- Basic usage data: standard server logs and essential cookies needed to operate the site and process checkout. We do not run advertising or analytics tracking cookies.
Why we use it
To create and deliver your gift, process payment, provide support, and meet legal obligations.
Who we share it with (processors)
Stripe (payments), Supabase (database & photo storage), Vercel (hosting), and Resend (email delivery). We do not sell your personal data.
Retention
Gift content and photos are deleted ~6 months after purchase (on link expiry). Abandoned/unpaid submissions are deleted within ~24 hours. We keep minimal transaction records as required for tax/accounting, and your email for receipts until you ask us to remove it.
International transfers
We are based in Singapore and use service providers that may process data in other countries. Where required, we rely on appropriate safeguards for those transfers.
Your rights
Depending on your location — including Singapore’s PDPA, UK/EU GDPR, and California’s CCPA — you may request access, correction, or deletion of your data, and a copy of it. Email hello@thegiftlab.app to exercise these rights.
Cookies
We use only essential cookies required to run the site and complete checkout. We do not load advertising or analytics tracking cookies, so no cookie-consent banner is required.
Children
The Service is not directed to children under 16 and is intended for adult purchasers.