Privacy Policy

1. Introduction

GiftPage ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit giftpage.in and use our gift page creation and sharing services.

This policy is published in compliance with the Information Technology Act, 2000 (and rules thereunder), the Digital Personal Data Protection Act, 2023 (DPDP Act), and applicable Reserve Bank of India guidelines. By using GiftPage, you consent to the data practices described in this policy.

2. Information We Collect

We collect information in the following ways when you use our services:

2.1 Information You Provide Directly

• Account Information: When you create an account (via Google OAuth or email), we collect your name, email address, and profile picture.
• Gift Page Content: Content you create — including recipient names, personal messages, photos, and music selections. This is stored solely to render your gift pages and is not used for advertising.
• Payment Information: When you purchase credits, payment is processed through Cashfree Payments India Private Limited. We receive a transaction confirmation and order ID but do not store your card number, UPI ID, or banking credentials — these are handled exclusively by Cashfree's PCI-DSS Level 1 compliant systems.
• Newsletter / Marketing: If you opt-in, we store your email address for communications only. You can unsubscribe at any time.
• Support Requests: If you contact us, we may retain your communication for quality and resolution purposes.

2.2 Information Collected Automatically

• Usage Data: Pages visited, templates used, time spent, features accessed, and click-through data.
• Device & Technical Information: Device type, operating system, browser type, IP address, screen resolution, and language settings.
• Transaction Records: Purchase history, credit balance, and gift pages published.
• Cookies & Similar Technologies: As described in our Cookie Policy.

2.3 Information from Third Parties

• Google OAuth: When you sign in with Google, we receive your name, email, and profile picture from Google.
• Cashfree Payments: We receive payment status, transaction ID, and order confirmation from Cashfree upon successful or failed payments.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our gift page creation and sharing services
• Process transactions, credit purchases, and send related confirmations and receipts
• Manage your credit balance and gift page publishing
• Send you technical notices, security alerts, and support messages
• Respond to your comments, questions, and requests via customer service
• Communicate about products, services, and offers (with your consent)
• Monitor and analyze usage trends for service improvement
• Detect, investigate, and prevent fraudulent transactions, chargebacks, and abuse
• Comply with applicable Indian laws and regulatory requirements
• Fulfill obligations to Cashfree Payments and other payment partners for dispute resolution

4. Information Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties for their marketing purposes. We may share your information in the following limited circumstances:

• Payment Processing: We share your name, email, order details, and transaction information with Cashfree Payments India Pvt. Ltd. to process your payment. Cashfree may retain this data per their own privacy policy and RBI guidelines. See Cashfree Privacy Policy.
• Authentication: We share relevant data with Google for Google OAuth sign-in.
• Analytics: We share anonymized usage data with Google Analytics for site performance monitoring.
• Gift Page Content: When you share a gift page link, that page's content is publicly accessible to anyone with the link. You control what is included on your gift page.
• Legal Requirements: If required by law, court order, or government authority (including RBI or law enforcement agencies in India).
• Business Protection: To protect the rights, property, or safety of GiftPage, our users, or the public.
• Business Transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred, subject to the acquiring party maintaining this privacy policy.

5. Payment Data & PCI-DSS Compliance

GiftPage uses Cashfree Payments India Private Limited (RBI-authorized Payment Aggregator) as its exclusive payment processor. GiftPage does not collect, process, or store any sensitive payment card data (card numbers, CVV, expiry dates), UPI credentials, or net banking passwords. All such data is entered directly into Cashfree's PCI-DSS Level 1 compliant payment gateway. Transaction records (amount, date, order ID, payment method category) are stored for accounting and dispute resolution purposes only.

6. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption in transit using SSL/TLS for all data transfers
• Encrypted storage of personal data using Supabase (SOC 2 compliant infrastructure)
• Role-based access controls limiting who can access user data
• Secure authentication via NextAuth.js with OAuth 2.0
• Regular security reviews and updates

However, no method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. Your Rights (DPDP Act 2023)

Under the Digital Personal Data Protection Act, 2023 and other applicable laws, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal and regulatory obligations)
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Opt-Out: Opt out of marketing communications at any time
• Right to Withdraw Consent: Withdraw consent for data processing where consent is the legal basis
• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (details in Section 10)

To exercise any of these rights, please contact us at support@giftpage.in. We will respond within 30 days.

8. Data Retention

We retain your account information for as long as your account is active or as needed to provide services. Transaction records (purchase history, credits, order IDs) are retained for a minimum of 5 years to comply with Indian tax and accounting laws. Gift pages created by free users are retained for 30 days after the link expiry date. Premium users' gift pages are retained for 1 year after the link expiry date. Upon account deletion, we will remove your personal profile data within 30 days, except where retention is required by law.

9. Children's Privacy

GiftPage is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. Users under 18 may not make purchases. If we become aware that we have collected personal information from a child under 13, we will delete that information promptly. Please contact us at support@giftpage.in if you believe this has occurred.

10. Grievance Officer

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act 2023, our Grievance Officer details are:

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, sending a notification to your registered email. Your continued use of GiftPage after the effective date constitutes your acceptance of the revised policy.

12. Contact Us

For privacy questions, data requests, or concerns:

SAHIL GANESH KAMBLE (GiftPage)
Email: support@giftpage.in
Address: Maharashtra, India