Privacy Policy

Gift.me — Privacy Policy

This Privacy Policy describes how Gift.me, LLC, a Nevada limited liability company with its principal place of business in Nevada, United States ("Gift.me," "we," "us," or "our"), collects, uses, shares, and safeguards personal information when you use our website, mobile applications, and the social, dating, location-discovery, messaging, and gifting services available at https://gift.me, including any gifting or e-commerce features made available through the RealGifts widget, JavaScript client, API, or other plugins (collectively, the "Services"). By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree, please do not use the Services.

We are committed to protecting your privacy while delivering the social, location-aware, and gifting experience that makes Gift.me unique. We handle your information with care using industry-standard security practices, while reserving the rights necessary to operate, moderate, secure, and improve the Services in ways that comply with applicable law.

What This Policy Says in Plain English

THIS SUMMARY IS NOT PART OF THE PRIVACY POLICY, IS NOT LEGAL ADVICE, AND DOES NOT MODIFY OR REPLACE THE FULL POLICY. The full Policy below is the controlling document. If anything in this summary appears to conflict with the full Policy, the full Policy governs.

• We collect: (1) what you give us (profile, content, messages, contact and payment details); (2) what we collect automatically (device, usage, cookies, and — because Gift.me is location-aware — location and proximity data); and (3) what partners and integrated services share with us. See Information We Collect.
• We use your information to operate the platform (posting, messaging, gifting, and location-based discovery and matching), personalize and recommend, verify accounts, prevent fraud and abuse, moderate content, communicate with you, run analytics and AI, deliver marketing where permitted, and comply with law. See How We Use Your Information.
• We share with service providers and partners (including RealGifts for gifting), with other Users to make the social/discovery features work, for legal and safety reasons, and in a business transfer. See How We Share Your Information.
• Important: No privacy setting guarantees absolute privacy. Location features can reveal your general whereabouts. Never send money or sensitive data to people you meet here. See the warnings in How We Share Your Information.
• Your rights depend on where you live (California, Nevada, the EEA, UK, Switzerland, Canada/Quebec, Australia, New Zealand, and elsewhere). See Your Privacy Rights.
• We use industry-standard safeguards (TLS in transit, password hashing, available 2FA, and AES-256 encryption of data at rest provided by our cloud infrastructure). No system is perfectly secure. See Data Security.
• The Services are for adults 18 and older only. We do not knowingly collect data from anyone under 18. See Age Requirements.

The full Policy below governs how we handle your personal information. If you have questions, see Contact.

What Does This Policy Cover?

This Policy covers personal information we collect when you use the Services and information our partners and integrated services share with us in connection with the Services. It does not cover the practices of third parties we do not control, including other Users, other websites and apps you link to, and partners' own services that have their own privacy policies.

1. Information We Collect

Information you provide directly. - Account and profile data: name, username, email address, phone number, password, date of birth, age, gender, sexual/relationship preferences you choose to provide, profile photo(s), bio, and any other details you choose to include. - Content you post or send: photos, videos, stories, captions, comments, messages to other Users, wishlists, gift ideas, and reviews. - Contact and notification preferences: the email addresses, phone numbers, or other identifiers you provide to receive updates about activity such as gifts, profile visits, messages, comments, and matches. - Payment and transaction data: when you purchase a Paid Feature (such as premium membership) or send a gift, billing information is collected and processed securely by third-party payment providers and through the RealGifts widget; we do not store full payment-card numbers on our own servers. - Verification data: where required, government-issued ID, selfie/photo-verification images, and related signals used to confirm authenticity and age. - Photo/ID verification; biometric information. When we verify identity, authenticity, or age, our reviewers and automated tools examine the images and documents you submit (for example, comparing a selfie to an ID photo) to detect fraud, duplicate, or fake accounts. We do not currently create, capture, or store a scan of facial geometry, a facial-recognition template, voiceprint, or other "biometric identifier" or "biometric information" as those terms are defined under biometric privacy laws. If we ever introduce verification that does generate or store a biometric identifier (for example, automated face-match "liveness" technology), we will, before doing so: provide a clear notice; obtain your separate, informed, written consent; use the data solely for verification and fraud-prevention; not sell it or disclose it except to the vendor processing it for us or as required by law; and publish and follow a retention-and-destruction schedule, destroying the identifiers when the verification purpose is satisfied or within the period required by law, whichever is sooner. This commitment is designed to comply with the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and Washington's biometric law. - Demographic and preference data: information you voluntarily share about your interests, relationships, or background.

Information we collect automatically.

• Location data: precise GPS coordinates, geo-tags, IP-derived location, and other location signals, collected when you enable location services or post location-tagged content. This is essential to the location-based discovery and "nearby" features that define the Gift.me experience. You can control location collection through your device and account settings; disabling it may limit certain features.
• Device and usage data: IP address, device identifiers, browser type, operating system, app version, access times, pages and profiles viewed, links clicked, and interaction patterns (including timing, frequency, and sequence of actions).
• Interaction and association data: information about other Users you view, follow, message, gift, match with, or interact with; inferred connections based on mutual connections, shared locations, similar interests, or proximity; and derived preferences our systems generate (which may or may not be accurate).
• Cookies, pixels, and tracking technologies: standard web and mobile technologies used to operate the Services, remember your preferences, measure performance, and — where permitted — deliver relevant content and advertising. See Cookies, Do Not Track, and Global Privacy Control. For general information about cookies, visit allaboutcookies.org.

Information from third parties and derived data.

• Integrated services / social logins: if you sign in with Apple, Google, Facebook, or another provider, we receive certain account information from that provider as you authorize.
• Inferred or derived information: behavioral profiles, interest categories, relationship inferences, and predictive insights generated by our systems to support matching, recommendations, and moderation.
• Partner and public-source data: information from the RealGifts platform in connection with gifting, and publicly available or partner data that helps us verify accounts, prevent fraud, or improve the Services.

Moderation and safety data. Content and activity on Gift.me may be reviewed — automatically, by human moderators, or both — for compliance with our Terms and Community Guidelines. This includes messages and other communications you send through the Service (which are not end-to-end encrypted and may be accessed, scanned, or reviewed for trust-and-safety, fraud-prevention, and legal-compliance purposes, including by automated systems). This may also include analysis of IP addresses, device fingerprints, behavioral signals, message metadata, and other data we determine is reasonably necessary for account analysis, investigation, trust-and-safety, or enforcement.

Aggregated and de-identified data. We may aggregate or de-identify information so it no longer reasonably identifies an individual, and may use and share it for any lawful purpose.

Please don't share dangerous information. The Services are not designed for confidential or high-risk communications. We strongly advise you never to share financial account details, government identification (except where we specifically request it for verification), health information, private keys, passwords, or any content that could cause harm if disclosed, in your profile, content, or messages to other Users.

2. How We Use Your Information

We use the information we collect to deliver, secure, improve, and operate the Services, including to:

• Operate the core platform: enable profiles, posting, messaging, gifting, profile viewing, matching, and all location-based discovery features.
• Personalize and recommend: show you relevant content, potential connections and matches, gift suggestions, and nearby experiences.
• Verify accounts and prevent fraud and abuse: confirm authenticity and age, detect and prevent fraud, spam, scams, and policy violations, and protect the community.
• Moderate and keep the community safe: detect violations, investigate reports, and enforce our Terms and Community Guidelines.
• Communicate with you: send notifications about activity (gifts, profile visits, new followers/matches, comments, messages), and contact you for support, security, updates, and administrative purposes, consistent with your preferences and applicable law.
• Run analytics, research, and product development: understand usage, improve features, and develop new capabilities, including AI/machine-learning tools.
• Marketing and advertising: deliver our own and, where permitted, third-party promotional communications and advertising, subject to your choices and applicable law.
• Process payments and memberships: facilitate Paid Features and gifting through the RealGifts widget, including placing membership orders on your behalf as described in the Terms of Use.
• Legal and business purposes: comply with law, respond to legal process, enforce our agreements, protect rights and safety, and facilitate business transactions such as mergers or acquisitions.

Legal bases (EEA / UK / Switzerland users). Where the GDPR, UK GDPR, or Swiss FADP applies, we process personal information on these legal bases: performance of a contract with you (for example, to provide the Services and fulfill orders); compliance with a legal obligation; your consent (which you may withdraw at any time, without affecting prior processing — for example, consent to precise location processing or to processing of special-category data you choose to share); and our legitimate interests in operating, securing, moderating, and improving the Services and keeping the community safe, except where overridden by your interests or fundamental rights.

3. How We Share Your Information

We share personal information only with your consent or as described below. We do not sell your information to third parties for their own independent marketing purposes; however, certain sharing with advertising and analytics partners may qualify as a "sale" or "share" under California and other state privacy laws, which you can opt out of (see "Sale" and "Share" of personal information below). Categories of recipients include:

• Service providers and partners. Hosting, analytics, fraud-prevention, identity-verification, content-moderation, payment-processing, customer-support, communications, and marketing providers that help us operate the Services. We require these recipients by contract to use personal information only to provide services to us and not for their own purposes, except as permitted by law, and we take commercially reasonable steps to oversee their compliance.
• RealGifts (gifting and memberships). RealGifts, LLC is an affiliated company that operates the gifting platform integrated into Gift.me. To provide gifting, gift delivery, Store Credit, and Paid Features, we share with RealGifts the information needed to place and fulfill orders on your behalf through the RealGifts widget. Your home/delivery address is private by default and is not shared with senders or other Users; it is used through RealGifts only to deliver a gift to you. RealGifts' handling of that information is also described in the RealGifts Privacy Policy.
• Other Users / platform functionality. When you post publicly, message, match, gift, or interact, your profile, content, and associated data (which, depending on your settings and the feature, may include approximate location or proximity) may be visible to recipients, matches, followers, or the broader community according to your privacy settings. Information about interactions, proximity, or inferred connections may be shared with other Users to enable the social and discovery features.
• Legal and safety. When we believe in good faith that disclosure is necessary to comply with law, respond to a valid legal request (subpoena, court order, or governmental request), enforce our agreements, or protect the rights, property, or safety of Gift.me, our Users, or the public, including to investigate violations or unsafe conduct.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of some or all of our assets, your information may be transferred as part of the transaction.

"Sale" and "Share" of personal information. We do not sell personal information for money. However, when we use third-party advertising, attribution, or analytics technologies (such as advertising or analytics SDKs, pixels, tags, and cookies), the disclosure of online identifiers, device identifiers, and activity data to those partners may constitute a "sale" or a "share" for cross-context behavioral advertising as those terms are broadly defined under the California Consumer Privacy Act, as amended (the "CCPA/CPRA"), and analogous U.S. state privacy laws. You have the right to opt out. To exercise it, use the "Do Not Sell or Share My Personal Information" link in our footer or app settings, or contact us as described in Contact Us. We honor opt-out preference signals, including the Global Privacy Control (GPC), as a valid request to opt out for the browser or device from which we receive the signal. We disclose the categories of personal information and the categories of third parties involved in Information We Collect and below; we are not required to, and do not, name each individual partner. We do not sell or share the personal information of consumers we know to be under 16 years of age.

What opting out does and does not affect. An opt-out of "sale"/"share" (including a GPC signal) applies only to the advertising- and analytics-related sharing described in this paragraph. It does not stop, and you cannot opt out of, our sharing of personal information with our service providers and processors to operate, secure, and support the Services — including fraud prevention, identity and age verification, trust-and-safety and abuse detection, payment processing, and customer support — or our disclosures for the legal, safety, and business-transfer purposes described above. Those disclosures are not a "sale" or "share," are necessary to protect you, other Users, and the platform, and continue regardless of any opt-out. Likewise, when you exercise a deletion or other right, we may retain and continue to use information where an exception applies (for example, to detect and prevent fraud or security incidents, ensure safety, comply with law, or defend legal claims).

Important Privacy Warning: Although we strive to honor your chosen privacy settings and "private" modes, nothing you post or share on Gift.me is guaranteed to remain private. Content can be screenshotted, recorded, copied, re-shared by recipients or other Users, indexed by search engines, or otherwise disclosed. Location-based features inherently involve proximity data that may reveal your general whereabouts. Act accordingly. We are not responsible for the actions of other Users or third parties who obtain your information through the Services.

Scam and Fraud Warning: The internet contains bad actors. Never send money, gift cards, cryptocurrency, bank or payment details, or any sensitive personal data to anyone you meet on Gift.me, even if they claim to be in distress or offer a deal. We do not conduct criminal background checks on members and are not liable for losses resulting from interactions on the Services. Report suspicious activity immediately to us and, where appropriate, to law enforcement.

4. Location Data & Your Controls

Because Gift.me is a location-aware dating and discovery platform, location data is central to features such as "nearby," proximity, and discovery. You control location sharing:

• You may enable or disable device-level location permissions at any time through your device settings, and adjust in-app location settings where available.
• Disabling location may limit or disable discovery, "nearby," and other location-dependent features.
• Even with precise location disabled, we may derive approximate location from your IP address for security, fraud-prevention, and basic functionality.
• Consider the Important Privacy Warning above before enabling precise location sharing or posting location-tagged content.

5. Cookies, Do Not Track, and Global Privacy Control

You can manage cookies through your browser and device settings. Disabling cookies may impair some features. Do Not Track: because there is no consistent industry standard for responding to "Do Not Track" browser signals, we do not currently respond to them. Global Privacy Control (GPC): we treat a GPC signal as a valid request to opt out of any "sale" or "sharing" of personal information for the browser or device from which we receive it, to the extent required by the CCPA/CPRA and analogous state laws. See How We Share Your Information and your rights in Your Privacy Rights.

6. Data Security

We implement industry-standard safeguards, including: - Transport Layer Security (TLS/SSL) for data in transit; - secure password hashing (for example, bcrypt or Argon2); - available two-factor authentication (2FA); - encryption of data at rest using industry-standard AES-256 encryption provided by our cloud hosting infrastructure (including our managed database storage); - access controls, monitoring, and periodic security reviews; and - network protections such as firewalls and system restrictions.

Payment-card data is processed by PCI-DSS-compliant providers and through the RealGifts widget, and is not stored in plaintext on Gift.me servers. Access to personal information by Gift.me personnel is limited to those who need it for their role. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach, we will notify affected users and regulators as and where required by applicable law.

7. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with legal obligations (including tax, accounting, fraud-prevention, trust-and-safety, and dispute-resolution), resolve disputes, and enforce our agreements. When information is no longer needed for these purposes, we delete or de-identify it on a regular schedule. You may request deletion of certain information (see Your Privacy Rights); we may retain limited copies where permitted or required (for example, backups, fraud-prevention, safety records, or legal holds).

Except where a longer period is required by law, by a legal hold, or by an active fraud, safety, or abuse investigation, we apply the following maximum retention periods to key categories of personal information:

| Category | Maximum retention | |---|---| | Account profile and account-settings data | For the life of your account, then deleted or de-identified within 90 days after account closure or a verified deletion request | | Identity/age verification images (government ID, selfie) | Up to 24 months after verification, then deleted (we aim to retain only a pass/fail result and timestamp once verification is complete) | | Biometric identifiers (only if ever introduced — see Information We Collect) | Destroyed when the verification purpose is satisfied or within the period required by applicable biometric law, whichever is sooner | | Precise (GPS) location history | Up to 90 days, then deleted or aggregated/de-identified | | Approximate / "nearby" location | Most recent value only; overwritten as it updates | | Messages and chat content | Up to 24 months after the message is sent, then deleted or de-identified | | Moderation, safety, and abuse-report records | Up to 7 years (longer only under legal hold) | | Transaction, gifting, and membership-billing records | Up to 7 years (tax, accounting, chargeback, and dispute-defense purposes; much of this flows through RealGifts) | | Server, security, and access logs | Up to 12 months | | Backups | Purged on our normal backup-rotation cycle (up to 90 days); deleted data may persist in backups until the cycle completes | | Marketing and email-engagement data | Until you opt out; we retain a minimal suppression-list record indefinitely so we can continue to honor your opt-out |

These are maximum periods; we often delete sooner when data is no longer needed. We may update this schedule as our practices and legal obligations evolve.

8. Your Privacy Rights

Where applicable law gives you rights regarding your personal information, you may exercise them by contacting us at [email protected]. We may need to verify your identity before responding. You may designate an authorized agent (with written, signed authorization) to act on your behalf. We will not discriminate against you for exercising any of these rights. Note that exercising certain rights (such as deletion) may limit or terminate your ability to use parts of the Services.

Effect of deletion on membership and Store Credit. Closing or deleting your account, or deleting your personal information, results in closure of your account. Any premium membership and any RealGifts Store Credit are governed by the Terms of Use and the RealGifts Terms, including their redemption-window and forfeiture provisions. If you wish to use any membership benefit or Store Credit, do so before requesting deletion.

(a) California residents (CCPA / CPRA). You have the rights to: know the categories and specific pieces of personal information we collected, the sources, the business/commercial purposes, and the categories of third parties to whom we disclose it; delete personal information, subject to legal exceptions; correct inaccurate personal information; opt out of "sale" or "sharing" (see How We Share Your Information); limit the use and disclosure of Sensitive Personal Information to the purposes permitted by the CCPA/CPRA (described below); and non-discrimination for exercising any of these rights. Given Gift.me's nature, some information you provide — such as precise geolocation, account log-in credentials, and information about your sex life or sexual orientation — may be "Sensitive Personal Information." We use Sensitive Personal Information to provide the dating, discovery, location, and gifting features you request, to keep the community safe, and for the other permitted business purposes enumerated in the CCPA/CPRA. To the extent we use or disclose Sensitive Personal Information beyond those permitted purposes, you may direct us to limit such use via the "Limit the Use of My Sensitive Personal Information" link in our footer or app settings, or by contacting us as described in Contact Us. If we deny a request, you may appeal by emailing [email protected] with the subject line "Privacy Appeal" and explaining why you believe the denial was incorrect; we will respond within the time required by applicable law. "Shine the Light" (Cal. Civ. Code § 1798.83): we do not share your personal information with third parties for their own direct marketing; California residents may ask questions by emailing [email protected] with the subject line "Shine the Light."

(b) Nevada residents (NRS 603A). Nevada residents have the right to direct us not to sell certain "covered information" within the meaning of NRS Chapter 603A. To submit a verified request, email [email protected] with the subject line "Nevada Opt-Out" and include sufficient information to verify your identity.

(c) Other U.S. state privacy laws. Residents of states with comprehensive privacy laws (for example, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others as they take effect) may have rights to access, correct, delete, obtain a portable copy of, and opt out of certain processing (including targeted advertising, "sale," and certain profiling) of their personal data, and to appeal a denied request. To exercise these rights, contact [email protected]. If we deny your request, you may appeal by emailing [email protected] with the subject line "Privacy Appeal" and explaining why you believe the denial was incorrect; we will respond within the time required by applicable law.

(d) EEA, UK, and Switzerland residents. Where the GDPR, UK GDPR, or Swiss FADP applies, you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent and to lodge a complaint with your local data protection authority. To exercise these rights, contact [email protected].

(e) Canada residents (PIPEDA + Quebec Law 25 where applicable). You have the right to access and correct personal information we hold, and the additional rights provided to Quebec residents under Law 25 where it applies. Contact [email protected].

(f) Australia and New Zealand residents. In Australia, you may exercise rights under the Australian Privacy Principles (Privacy Act 1988 (Cth)); in New Zealand, under the Privacy Act 2020. Contact [email protected].

(g) Other international users. Your local law may give you rights regarding your personal information. Contact [email protected] for assistance.

Managing your information in-product. Where available, you can review and update your profile and certain information in your account settings, and manage notification and location preferences there. When you update information, we may retain a copy of prior information in our records. To opt out of marketing email, use the unsubscribe link or email [email protected]; note that we may still send you non-marketing service and legal notices.

9. International Users and Data Transfers

Gift.me is based in the United States. By using the Services, you understand that your information may be transferred to, stored, and processed in the United States and other countries where we or our service providers operate, which may have different privacy standards than your home jurisdiction. Where required, for transfers from the EEA, UK, Switzerland, or other restricted jurisdictions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, the Swiss equivalent, or an applicable adequacy decision. Contact us for a copy of the safeguards.

10. Age Requirements and Children's Privacy

The Services are intended only for users who are at least 18 years old. Because of the location-based, social, dating, and gifting nature of the platform, users under 18 are strictly prohibited from creating accounts or using the Services for any reason. We do not knowingly collect personal information from anyone under 18, and we comply with applicable child-protection laws (including the U.S. Children's Online Privacy Protection Act). If we learn that a user is under 18, we will promptly disable the account and delete the associated information. If you believe a minor is using the Services, contact [email protected].

11. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will post the updated Policy here and update the "Last updated" and effective dates above. For material changes, we will provide reasonable notice (for example, by posting a notice on the Services, by in-app notice, or by email where required by law), and where your consent is required by applicable law, we will obtain it. Your continued use of the Services after the effective date of an updated version constitutes acceptance, and information we collect is subject to the Policy in effect when it is used.

12. Conditions of Use

If you use the Services, your use and any dispute over privacy is subject to this Policy and the Terms of Use, including the dispute-resolution section in the Terms (which provides for binding individual arbitration for users in the United States and Canada, and the forum and consumer protections of your country of residence for users elsewhere).

13. Contact

If you have questions or requests regarding this Policy, contact us at:

Gift.me, LLC Attn: Privacy Officer 732 S 6th Street, Ste R Las Vegas, NV 89101, United States Phone: 888-558-4438

• Privacy inquiries / rights requests: [email protected]
• General inquiries / support: [email protected]
• Legal notices: [email protected]
• Copyright / DMCA notices: [email protected]

We review and respond to verified requests as required by law.