Privacy Policy

GiftCue - Effective: July 13, 2026 - Last updated: July 13, 2026

This Privacy Policy explains how GiftCue ("we," "us," "our") collects, uses, and protects information when you use our service at giftcue.app, getgiftcue.com, giftcue.ai, giftcue.org, and any related apps. By using GiftCue you agree to this policy.

GiftCue is an assumed business name of True Grit Toolkits LLC, an Oregon limited liability company (Oregon Registry #243310695), operating GiftCue under Oregon Assumed Business Name registration #257359597. Principal place of business: 1275 Monroe St, Eugene OR 97402.

1. The two kinds of people GiftCue serves

GiftCue exists to help one person (the Sender) give a gift to another person (the Recipient). The Sender provides information about the Recipient so we can build a personalized gift picker. This privacy policy treats both groups carefully, and treats the Recipient with extra care, because they didn't choose to share their information themselves.

2. What we collect

From the Sender (the person building a picker)

• Account information: email address used for sign-in. We do not store passwords (we use magic-link or HMAC-cookie sign-in).
• Payment information: if you pay for a picker, your payment method is collected and processed by Stripe. We never see or store your full card number. We retain a token plus last 4 digits.
• Form input: when you build a picker, the information you provide about the Recipient (their name, approximate location, age band, likes, dislikes, occasion, budget, gift type preference, free-text notes).
  ⚠️ Keep it light: Please don't include health, medical, religious, financial, or other sensitive details about your recipient.
  We ask that you avoid describing health conditions, medical history, financial status, religious beliefs, or other sensitive personal attributes when building a picker. This protects the Recipient's privacy should their picker URL be shared, and protects you from liability if that information is inadvertently exposed.
• Usage data: standard server logs (IP address, user agent, timestamps) retained for 30 days for abuse detection.

From the Recipient (the person opening the gift link)

• Their pick: which option they selected from the 12 generated for them.
• Page interaction: when they opened the link, how long they spent, whether they used the help chat.
• Optional help-chat content: if they ask Cue (our help assistant) a question, the question and our response are stored for that session only.
• What we do NOT collect from the Recipient: we do not ask the Recipient to sign in, give us their email, or share their phone number. We never know who they actually are beyond what the Sender told us.

3. How we use what we collect

• Generate the picker: Recipient profile data is sent to our AI provider (Anthropic) to generate 12 personalized gift options. This processing occurs under Anthropic's commercial API terms; your data is not used to train AI models, and is subject to Anthropic's own privacy policy (anthropic.com/privacy).
• Post-pick notifications: When the Recipient makes a selection, we send a transactional email to the Sender confirming their choice. This email includes accurate company header (True Grit Toolkits LLC, 1275 Monroe St, Eugene OR 97402), strictly transactional content (no marketing or promotional material), and one-click unsubscribe link compliant with CAN-SPAM. All Resend-delivered emails are signed and authenticated to prevent spoofing.
• Hydrate with real local businesses: options are matched against real local vendor data from Google Places (New) within roughly 15km of the recipient's location, then displayed with vendor photos served through our own image proxy (no Google identifiers exposed to the browser).
• Render images: hero photos come from real vendor data when available; for non-location options we generate hero imagery with Cloudflare Workers AI.
• Deliver the experience: store the session so the Recipient can come back to their link, and so the Sender can see the pick.
• Improve the service: we may use aggregated, anonymized usage data to improve the product (e.g. "what percentage of recipients pick experiences vs. products").
• Comply with law: respond to valid legal process.

We do not sell your data. We do not run third-party ad networks or analytics that fingerprint users. We do not share Recipient information with anyone other than the Sender who created their picker.

4. How long we keep things

• Gift sessions: 30 days from creation, then deleted automatically.
• Account email: until you ask us to delete it.
• Payment records: 7 years (required for tax/accounting).
• Server logs: 30 days.
• Help-chat transcripts: session duration only, then deleted.

5. Cookies

We use one cookie: giftcue_auth, an HMAC-signed timestamp used to keep you signed in. It's httpOnly, Secure, SameSite=Lax, and expires after 14 days. We don't use tracking cookies, third-party cookies, advertising cookies, or session-replay cookies. If we add privacy-respecting analytics (such as Plausible) we will update this policy first.

6. Third parties we use

SMS delivery is not currently active. If we add SMS in the future it will be opt-in only, with documented TCPA-compliant consent.

7. Your rights

Regardless of where you live, you can:

• Request a copy of the personal information we hold about you.
• Request correction or deletion of your personal information.
• Withdraw consent for any optional processing.
• Opt out of email communications at any time.

To exercise any right, email privacy@giftcue.app. We respond within 30 days.

California residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, request deletion, and opt out of "sale" or "sharing" of personal information. We don't sell personal information. We don't share it with third parties for cross-context behavioral advertising.

EU / UK residents (GDPR)

GiftCue is a United States-based service, and data processing occurs on US infrastructure. If you're in the EU or UK:

• You consent to data transfers under US jurisdiction for the purpose of service delivery and AI-powered option generation. Anthropic (our AI provider) is also US-based and operates under US privacy standards, not GDPR.
• We still provide GDPR rights: you can request access, correction, deletion, or portability of your personal data. Email privacy@giftcue.app to exercise these rights.
• Our legal basis for processing is: (a) contract for service delivery (generating your picker), (b) legitimate interests for fraud prevention and product improvement, and (c) consent for optional features like email notifications.
• This service is compliant with UK data protection standards. EU users should understand that our processing does not meet GDPR adequacy requirements (UK has now diverged post-Brexit).

Use GiftCue only if you accept these data transfer terms. If you have concerns, contact privacy@giftcue.app before proceeding.

8. Recipient privacy specifically

If you are a Recipient who received a GiftCue link, your information was provided to us by the Sender who built your picker. We don't have your phone number, email, or any contact information beyond what the Sender wrote in the form (typically your first name and city).

If you want us to delete the entire session: email privacy@giftcue.app with the picker URL. We'll honor it within 7 days, which means the Sender will no longer see your pick.

9. Children and Minor Recipients

GiftCue is not intended for children under 13 to use directly. However, Senders frequently describe gift Recipients who are minors (children, teens). Here's how we handle that:

• If you describe a minor Recipient (their age, interests, etc.), that information is sent to our AI provider (Anthropic) only to generate appropriate gift ideas. It is not used for any other purpose.
• Recipient picker data is deleted after 30 days unless the Sender requests earlier deletion.
• We do not collect contact information from the Recipient unless they explicitly provide it (e.g., through help-chat). Most Recipients remain anonymous to us beyond their profile.

If you are a minor receiving a gift link and have privacy concerns, the adult Sender can request deletion at any time by emailing privacy@giftcue.app.

If you're a Sender: describing a minor is fine (that's often the whole point). Just be thoughtful about what you write in the free-text notes field (see warning in section 2).

10. Security

All traffic uses HTTPS / TLS. Authentication is HMAC-signed and httpOnly. Database access is encrypted at rest. We follow standard infrastructure security practices and use Cloudflare's enterprise-grade security platform. No system is 100% secure; we encourage you to use a strong, unique password and contact us immediately if you suspect an issue.

11. Changes to this policy

If we make material changes, we'll post the updated policy here and update the "Last updated" date. For users with an account, we'll also email you. Continued use after changes means you accept them.

12. Contact

For any privacy questions: privacy@giftcue.app

True Grit Toolkits LLC d/b/a GiftCue
1275 Monroe St, Eugene OR 97402, USA

This Privacy Policy reflects the operating reality of GiftCue at the date above. It will be reviewed by qualified counsel prior to scaled commercial launch.