Sweetly Sent Privacy Policy

This Privacy Policy explains how Sweetly Sent collects, uses, stores, and shares personal information in connection with our website, account features, subscription service, and card-reminder and fulfillment services.

This Policy describes our current practices and should be read together with our Terms of Service.

When you use Sweetly Sent, you may provide information including:

• Your name, such as your first and last name.
• Your email address, which we use for account access and communications.
• Your marketing-email preference, if you choose to provide one, such as whether you would like to receive marketing or promotional emails from Sweetly Sent.
• Your mailing address, where Sweetly Sent sends the greeting cards and stamped envelopes prepared for you.
• Information about people you care about, which we may refer to as loved ones or recipients, including their name and your relationship to them.
• Occasion information, such as birthdays, anniversaries, holidays, custom occasions, and associated dates.
• A loved one's mailing address, if you choose to save it for your own reference.
• Card preferences and notes you provide to help us select cards appropriate for that person.
• Communications you send us, including support requests and other correspondence.

Some information you provide to Sweetly Sent relates to people who are not Sweetly Sent account holders. By providing information about another person, you represent that you have the right to provide that information for purposes of using Sweetly Sent.

Sweetly Sent uses Supabase to provide authentication and database services.

We currently use passwordless email authentication. Instead of creating a Sweetly Sent password, you receive a one-time verification code by email when signing in.

We also maintain session information and basic account records necessary to operate and secure your account.

Payment processing and subscription billing are handled by Stripe.

Sweetly Sent may receive and store billing-related information from Stripe, including your subscription plan, subscription status, billing-period dates, Stripe customer and subscription identifiers, and other information necessary to administer your subscription.

Sweetly Sent does not receive or store your full payment-card number, CVC, or other complete payment-card credentials. Those details are handled by Stripe.

To operate the Sweetly Sent service, we maintain information related to card fulfillment, which may include the card selected for an occasion, scheduled preparation and mailing dates, actual mailing dates, fulfillment status, and operational notes associated with fulfilling an order.

These records form part of your Sweetly Sent fulfillment history.

Loved-One Mailing Addresses

If you choose to save a mailing address for a loved one, Sweetly Sent stores that address only for your own reference and use within your Sweetly Sent account.

Sweetly Sent will never use a loved one's saved mailing address for marketing, advertising, promotional outreach, or direct contact. It is stored as a convenience for you and is not used to market to your loved one or to market products or services to you based on that address.

Sweetly Sent also does not use a loved one's saved address to fulfill your order.

Sweetly Sent sends the greeting card and stamped envelope to your mailing address. You then personalize the card, address the stamped envelope, and mail it to the person yourself.

When you use Sweetly Sent, certain technical information may be generated automatically by the systems and service providers used to operate the website.

This may include authentication and session information, IP address and connection information, browser or device information, request and server logs, security and fraud-prevention information, and other routine technical information generated when our infrastructure receives or processes a request.

Sweetly Sent does not currently use an analytics platform, advertising pixel, session-replay tool, or targeted-advertising system on the Service.

If our practices change, we will update this Privacy Policy as appropriate.

While you are completing sign-up, Sweetly Sent may temporarily save your in-progress onboarding information in your browser's local storage.

This helps prevent you from losing information if you refresh the page or temporarily leave the onboarding process.

This browser-stored draft remains on your device unless and until it is submitted to Sweetly Sent, is not used for advertising or behavioral tracking, and is designed to be cleared when onboarding is successfully completed or when you choose to start over.

Sweetly Sent currently uses cookies and similar browser storage that are necessary to provide account and authentication functionality.

We do not currently use Sweetly Sent cookies for targeted advertising or marketing tracking.

Because our own cookies are currently limited to essential account and service functionality, Sweetly Sent does not currently display a cookie-consent banner.

Third-party services you visit through Sweetly Sent, such as Stripe-hosted checkout or billing pages, may use their own cookies and technologies according to their own privacy practices.

We may use information collected through Sweetly Sent to create, maintain, and secure your account; remember the people and occasions you ask us to track; select, prepare, and fulfill greeting-card orders; administer your subscription and billing; send authentication messages, including sign-in codes; send transactional and service-related communications; with your consent, send marketing or promotional communications, such as news, updates, and special offers; respond to support requests; prevent fraud, misuse, and security incidents; maintain, troubleshoot, and improve the Service; preserve appropriate fulfillment and account records; and comply with applicable legal, tax, accounting, and regulatory obligations.

Sweetly Sent does not currently use your personal information to build targeted advertising profiles or serve targeted advertising.

Sending marketing emails to customers who have chosen to receive them is separate from targeted advertising and does not involve building advertising profiles or tracking your activity across other services.

Providing marketing consent is entirely optional. During sign-up, you may choose to opt in using a checkbox that is not selected by default and is separate from your acceptance of these policies. Existing customers are not automatically enrolled in marketing emails based solely on having an account or subscription.

If you opt in, we store your current marketing-email preference along with related details, such as when you provided consent, the source of that consent (for example, during sign-up or through your account settings), and the version or wording of the consent language you agreed to. We also keep a record of your opt-in and opt-out choices over time.

You may opt out of marketing emails at any time, including through your Sweetly Sent account settings or by using the unsubscribe instructions included in any marketing email you receive. You may also choose to opt back in later.

Opting out of marketing emails does not affect transactional or service-related communications connected to your account, subscription, billing, occasions, orders, or use of the Service. Those communications are necessary to operate and support Sweetly Sent and are not considered marketing.

Sweetly Sent uses third-party service providers to operate the Service. These providers may process information in connection with the services they provide to us.

The information handled by each provider depends on the services it performs for Sweetly Sent.

These providers may maintain their own privacy policies and security practices.

Sweetly Sent does not sell personal information.

We also do not currently use personal information for targeted advertising.

Remembering important people and occasions is a core part of Sweetly Sent.

When you add a loved one, you may provide information such as their first and last name, your relationship to them, important occasions and dates, optional card preferences or notes, and an optional mailing address for your own reference.

This information is provided by you, not collected directly from that person.

We use this information in connection with providing, operating, securing, and supporting the Sweetly Sent service for you.

Sweetly Sent does not use your loved one's information to market to them or contact them directly.

In particular, a loved one's saved mailing address is stored only for your own use within your Sweetly Sent account. Sweetly Sent will never use that address for marketing, advertising, promotional outreach, or direct contact.

Sweetly Sent also does not sell your loved one's information or mail fulfillment materials directly to them.

By providing information about another person, you confirm that you have the right to provide that information for your use of Sweetly Sent.

We retain information for as long as reasonably necessary to provide and operate Sweetly Sent, maintain account and fulfillment records, meet tax, accounting, and financial obligations, prevent fraud and abuse, resolve disputes and support requests, and comply with applicable legal obligations.

The amount of time information is retained may vary depending on the type of information and why we need it.

If you request deletion of your account, we may delete, deidentify, archive, or retain information as appropriate depending on our operational and legal obligations.

Certain records may need to be retained after an account is closed or deleted, including billing records, fulfillment history, fraud-prevention information, or records required for legal, accounting, or compliance purposes.

You may request deletion of your Sweetly Sent account or contact us regarding other privacy requests by emailing:

support@sweetlysent.com

Sweetly Sent does not currently offer a self-service account-deletion feature.

We will review requests and respond in accordance with applicable law and our legitimate retention obligations.

Deleting or closing an account does not necessarily require us to erase every historical record immediately where retention is reasonably necessary for legal, financial, fraud-prevention, fulfillment-history, or other legitimate purposes.

If you remove a loved one or occasion from your active Sweetly Sent account, we may archive the record rather than immediately erase it.

Archived loved ones and occasions are removed from your active People & Occasions experience.

Some information may remain associated with preserved fulfillment records, such as a historical record showing that card materials were previously mailed to you for a particular occasion.

This helps us preserve accurate account and fulfillment history without treating archived information as active account data.

Sweetly Sent takes reasonable measures designed to protect personal information.

Current measures include passwordless, one-time-code authentication; database-level access controls designed to restrict customer information appropriately; restricted administrative access; server-side handling of sensitive credentials; HTTPS encryption for information transmitted between your browser and our infrastructure; and security features provided by our hosting and infrastructure providers.

No online service can guarantee complete security.

Sweetly Sent does not claim that its systems are 100% secure, and we have not represented that Sweetly Sent has completed a third-party security certification such as SOC 2 or ISO 27001.

Sweetly Sent is currently intended for customers in the United States and is not currently offered internationally.

If we expand into additional countries or jurisdictions, we may update this Privacy Policy and our privacy practices accordingly.

Sweetly Sent is intended for a general audience and is not directed to children under 13.

We do not knowingly collect personal information directly from children under 13.

If you are under 18, we recommend that a parent or legal guardian create and manage the Sweetly Sent account on your behalf.

If we learn that we have collected personal information directly from a child under 13 in circumstances where we should not have done so, we may take appropriate steps to delete or otherwise address that information.

Depending on where you live, applicable law may provide you with rights regarding your personal information.

These rights may include the ability to request access to, correction of, or deletion of certain personal information, or to receive information about how personal information is used.

To make a privacy-related request, contact:

support@sweetlysent.com

We may need to verify your identity before completing certain requests.

Your rights may vary depending on your location and applicable law.

We may update this Privacy Policy from time to time to reflect changes to Sweetly Sent, our practices, or applicable requirements.

When we update the Policy, we will update the effective date.

If required by law or otherwise appropriate, we may provide additional notice of material changes.

If you have questions about this Privacy Policy or Sweetly Sent's privacy practices, or if you would like to make a privacy-related request, contact:

support@sweetlysent.com