Privacy Policy

Wishyours (“we”, “us”) helps you create birthday pages and gifts. This policy explains what we collect, why, and the choices you have. By signing in, creating a page, or adding content, you consent to the practices described here. Questions? Email wishyourssuprise@gmail.com.

What we collect

• Account details: when you sign in with Google, we receive your name, email address, and profile photo.
• Content you provide:the birthday person’s name and details, your messages, photos, voice notes, private letters, favourite things, song links, and any reveal PIN you set.
• Surprise order details: the website name and custom domain you request, and the email or WhatsApp number you give us so we can deliver the finished site.
• Payment information: payments are processed by Gumroad, our Merchant of Record. We never see or store your full card details.
• Usage & technical data: basic, aggregate page-view counts and the cookies needed to keep you signed in.

How we use it, and how we don’t

We only use your information to provide the service you asked for: to build, host, and display your page or gift; to fulfil Surprise orders and deliver the finished website; to send you and our team the related order and account emails; and to keep the service secure and prevent abuse.

We do not sell or rent your data. We do not use your photos, voice notes, letters, or other content to train AI models, and we do not use them for advertising. Any product analytics we look at are aggregate and do not involve reading your private content.

Content about other people

Wishyours lets you add photos, voice notes, and details about the birthday person and about friends who sign the book. You are responsible for having the permission you need to share other people’s information and images with us, and you confirm you have that permission each time you upload. If someone wants their content removed, contact us and we will take it down.

Who can access it

We share only what’s needed with the services that run Wishyours: Supabase(database & file storage), Gumroad (payments, as Merchant of Record), Resend (email), Google (sign-in), and Vercel (hosting). Each processes data on our behalf under their own terms.

Our own team may access the content of an order when it is necessary to: (a) build and deliver a Surprise order (which is hand-built by us from the details you provide); or (b) moderate content, keep users safe, or comply with the law (for example, reviewing a report of abuse). We access private content only when there is a genuine reason to.

Keeping your content secure & private

Your data is stored on managed infrastructure, encrypted in transit and at rest, with database access controls that stop the public from reading other users’ data. Private letters and reveal PINs get extra protection: a private letter is never included in a page’s public data and is released only when the correct PIN is entered, and repeated wrong attempts are temporarily locked out. Pages are not search-indexed, and a paid page can only be opened by someone with the PIN you share.

How long we keep it, and deleting it

We keep your pages and their content while they’re live so the birthday person can revisit them. You can delete a Wish or Free page you created at any time from the Edit screen, or ask us to delete any page, order, or your whole account by emailing wishyourssuprise@gmail.com. We remove it, and the media stored with it, promptly.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete it. You can withdraw consent for future processing by deleting your pages and account. Sign out at any time to end your session. To exercise any of these, email us at the address above.

Children

Wishyours is intended for adults creating gifts. Please don’t use it to collect personal information from children in a way that isn’t permitted by applicable local laws.

Changes

We may update this policy as the service grows. We’ll change the date above when we do, and significant changes will be highlighted.

Contact

For anything privacy-related, email wishyourssuprise@gmail.com.