Privacy Policy

This policy explains how Who Sent That (“we”, “us”, “the Service”) collects, uses, and protects your information when you create, send, and manage interactive eCards. You can build and preview an eCard without an account; we only collect what we need to deliver the eCard and run the Service.

1. Information we collect

Depending on how you use the Service, we may collect:

• Your details: your name and email address, so we can deliver your eCard and send you a copy, receipts, and delivery updates.
• eCard content: the message, colours, interactive reveal, and any photo or audio (such as a song or recorded voice message) you add to an eCard.
• Recipient details:if you ask us to email or schedule an eCard, the recipient's email address, used solely to deliver that eCard.
• Reminders: if you set a date reminder, the date and email address you provide, so we can email you when the occasion approaches.
• Subscription details: if you subscribe, the email address tied to your subscription and its status (managed through our payment processor).
• Technical data: standard server log data such as IP address, approximate location, browser type, and pages visited, for security and operational purposes.

We do not collect or store your full payment card details. Payments are processed by third-party providers (see section 5), each of which operates under its own privacy policy.

2. How we use your information

We use the information we collect to:

• Create, host, and deliver your interactive eCard.
• Email or schedule eCards to your chosen recipient when you ask us to.
• Process one-time payments and, if you choose, manage your yearly subscription and its renewal.
• Send date reminders you have asked us to set.
• Provide customer support and respond to your messages.
• Improve the reliability, security, and features of the Service.
• Send you occasional marketing emails about new eCard types, features, and promotions — but only with your consent.

You can unsubscribe from marketing emails at any time using the unsubscribe link in any such email, or by contacting us. Transactional emails (such as a receipt, a delivery confirmation, or a reminder you requested) are not affected by unsubscribing from marketing.

3. Card content, photos, and audio

While you are building an eCard, its content — including any photo or audio — lives only in your browser. We only save and host that content once you complete checkout and a shareable eCard is created. eCards that are never sent are not stored on our servers.

An eCard you send is hosted at a private, unguessable link so your recipient can open and revisit it. Anyone with that link can view the eCard, so share it only with people you intend to reach.

4. Cookies and tracking

We use essential cookies to keep the Service running (for example, session management). We may use analytics to understand how visitors use the site. You can disable cookies in your browser settings, though some features may not work correctly without them.

5. Payments and subscriptions

One-time eCard purchases are processed by PayPal, and subscriptions are processed by Stripe. When you pay, you provide your payment details directly to that processor — we never see or store your full payment card number. We receive only confirmation of payment and the limited information needed to fulfil your order and manage any subscription (such as the associated email address and subscription status). These providers handle your payment data under their own privacy policies.

6. Sharing your information

We do not sell, rent, or trade your personal information. We share data only with service providers who help us operate the Service — including hosting, email delivery, analytics, and the payment processors named above — and only as needed to provide the Service, under appropriate confidentiality obligations. We may disclose information if required by law or to protect the rights, safety, and security of our users or the Service.

7. Data retention

We keep eCard content for as long as needed so recipients can open and revisit their eCard, and we retain reminder and subscription details for as long as those are active. If you request deletion of your data, we will remove it within 30 days, except where we are legally required to retain it (for example, records needed for tax or accounting).

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict the use of personal information we hold about you, and to withdraw consent for marketing. To exercise any of these rights, email us at support@whosentthat.com.

9. Children

The Service is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can remove it.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

11. Contact

Questions about this policy? Reach us at support@whosentthat.com or through our support page.