Privacy policy

1. Who runs GiftLoom

GiftLoom is run by Jay Stants, an individual, and is currently in a limited, invite-only trial. In this policy, “GiftLoom”, “we”, and “us” mean the service and the person who runs it.

2. What we collect

• Your account: your name, email address, password (stored only as a one-way hash, never in readable form), optional profile photo, notification preferences, and the invite code you signed up with.
• Your plans:the events, people, gift lists, gifts, wishlist items, budgets, prices, links, notes, dates, and photos you add. This can include information about other people, such as the names of friends and family you’re buying for.
• Sharing activity: email addresses of people you invite to an event or list, who has accepted, and the name a visitor types when they claim an item on a shared wishlist.
• The waitlist:if you join the waitlist on our home page, we store the email address you enter, which of the page’s sign-up forms you used, and when. Nothing else is asked for, and it isn’t linked to a GiftLoom account.
• Abuse protection: to limit repeated sign-in, sign-up, waitlist, and assistant requests, we keep a running counter tied to an email address or network (IP) address. It records a count and a time window, not a history of what you did.
• Usage and errors: anonymous page-view counts (which pages are visited, from what kind of device and country) and, if something breaks, technical error reports. Neither uses cookies, and error reports are configured not to include your IP address, cookies, or form contents.

3. How we use it

• To run GiftLoom: save your plans, show them across your devices, and share them with the people you choose.
• To send account email you ask for or need, such as password resets and invitations you send.
• To email waitlist members about the GiftLoom trial, such as when their spot is ready. We don’t use a waitlist address for anything else.
• To keep the service safe, including slowing down repeated sign-in attempts.
• To understand, in aggregate, which parts of GiftLoom get used, and to find and fix bugs.

We don’t sell your data, share it with advertisers, or use it to train AI models.

4. Services that handle your data for us

GiftLoom relies on a few providers to operate. Each only receives what it needs for its job:

• Vercel hosts the app, stores uploaded photos, and provides the anonymous page-view counts.
• Neon hosts the database where your account, your plans, and waitlist sign-ups are stored.
• Resend delivers email, such as password resets, invitations, and emails to the waitlist.
• Anthropicpowers the in-app assistant. When you use it, your messages and the matching gift and event names it looks up are sent to Anthropic to generate a reply. If you don’t use the assistant, nothing is sent.
• Sentry receives technical error reports when error monitoring is turned on.

When you paste a product link, GiftLoom’s server visits that page to fill in its title, price, and image. The store sees a request from GiftLoom, not from your device.

We may also disclose information if the law requires it.

5. Who else can see your plans

• People you invite to an event or list can see and, depending on the permission you give them, edit it. If you link a collaborator to a person on that event, gifts for that person stay hidden from them.
• Anyone with a shared wishlist linkcan see that person’s name and the items on the list, including prices and notes. Turn the link off at any time to stop sharing.
• Photos you upload are stored at hard-to-guess web addresses. Anyone who has one of those addresses can open the photo, so avoid uploading anything sensitive.

6. Cookies and browser storage

GiftLoom uses one cookie to keep you signed in; the app can’t work without it. Your light or dark theme choice is saved in your browser. There are no advertising or cross-site tracking cookies.

7. How long we keep it, and deleting it

We keep your data while your account exists. Deleting your account in Settings permanently removes your account, your events, people, lists, gifts, wishlists, invitations, and the photos you uploaded. Copies may remain for a limited time in routine backups and logs before they’re overwritten.

We keep a waitlist email address only while the waitlist is running, and delete the list when it closes. Because a waitlist entry isn’t linked to an account, deleting an account doesn’t remove it and the Settings export doesn’t include it. You can ask to be taken off the waitlist at any time (see sections 8 and 12).

8. Your choices

• See and edit your information anywhere in the app, including your profile in Settings.
• Export everything in your account — your profile, plans, sharing records, and notifications — as a file from Settings.
• Delete your account and its data from Settings.
• Leave the waitlist by asking us to remove your email address. Every email we send to the waitlist will include a way to do this.

9. Keeping it secure

Connections to GiftLoom are encrypted, passwords are stored only as hashes, and password-reset links are single-use and expire after an hour. No system is perfectly secure, but we work to protect your data and limit who can reach it.

10. Children

GiftLoom isn’t meant for children under 13, and we don’t knowingly collect their information. If you believe a child under 13 has created an account or joined the waitlist, it will be deleted once we learn of it.

11. Changes to this policy

GiftLoom is still changing during the trial, and this policy will change with it. When it does, the “last updated” date above changes too; for significant changes, we’ll let account holders know in the app or by email.

12. Contact

A dedicated contact address for privacy questions, including requests to leave the waitlist, will be listed here soon. In the meantime, you can see, export, and delete your account data yourself from Settings.