Privacy Policy

Effective date: July 1, 2025

This Privacy Policy explains how GiftHint (operating at sendgifthint.com) (“we”, “us”, or “our”) collects, uses, discloses, and protects personal data when you visit or use our website and services (the “Service”). By using the Service you accept the practices described in this Policy.

1. Controller

GiftHint operates the Service. At the moment GiftHint is not a registered legal entity and provides the Service as an operator based in Romania. Questions about this Policy or requests regarding your personal data should be sent to support@sendgifthint.com.

2. Scope — what personal data we collect

We collect and process the minimum personal data necessary to provide the Service. The main categories are:

Phone number — the recipient phone to which an SMS “hint” is sent. Required to perform the SMS delivery.
User name / display name — the name you provide that may appear inside the SMS text.
Message content — the text of the hint you choose to send (stored to track delivery and status).
Technical & usage data — such as IP address, browser user agent, timestamps, device identifiers, and logs created when you interact with the Service.
Cookies and similar technologies — used for analytics, security/fraud prevention, and optional marketing tracking (see Cookies section).

We do not collect email addresses directly as part of the normal flow. However, third-party services used by us (for example payment processors) may collect emails on their own systems; we are not responsible for their separate practices.

3. How we collect information

We collect information when you interact with the website and use the Service (for example when you start a chat, enter a phone number, compose and send a hint, or when our scripts run in your browser). Technical data may be created automatically and logged by our systems.

4. Purposes and legal bases for processing

We use your personal data for the following purposes and rely on these legal bases:

Providing the Service (performance of a contract) — sending SMS messages you request, storing message and delivery status, and operating the core functionality.
Legitimate interests — preventing fraud and abuse, securing and improving the Service, debugging, and maintaining logs for troubleshooting and operational stability.
Consent — where required (for example marketing cookies, analytics tracking that requires consent), you will be asked to opt in and may withdraw consent at any time.
Legal compliance — if we must retain or disclose information to comply with legal obligations, court orders, or law enforcement requests.

5. Third-party services we use

To operate the Service we integrate certain third-party providers. These providers may have access to personal data as needed to perform their functions:

Twilio — used to send SMS messages and receive delivery status updates.
Google Analytics — analytics and usage measurement (may be subject to cookie consent).
Hotjar — behavior analytics (heatmaps, session recordings) — used only if you consent to such tracking.
Meta Pixel — optional marketing/analytics pixel (subject to consent where required).
FastSpring — payment/checkout provider (if used). FastSpring may collect payment-related personal data on its own systems.

These third parties process data under their own privacy terms. We recommend that you review their privacy policies for more detail. We also require that these providers act only on our instructions and protect data appropriately.

6. International transfers

Some third-party providers we use may transfer or store data outside the European Economic Area (EEA). By using the Service you grant permission for such transfers. Where required by law, we put safeguards in place (for example Standard Contractual Clauses or other lawful transfer mechanisms) to ensure an adequate level of protection for your personal data.

7. Cookies and tracking

We use cookies and similar technologies for several purposes:

Essential cookies — required for the Service to function (e.g., session state, security).
Analytics cookies — to measure usage and improve the Service (e.g., Google Analytics).
Marketing cookies — used by third-party platforms (e.g., Meta Pixel) to provide advertising features and measurement. These only run with your consent where required.

You can control and delete cookies via your browser settings. For opt-outs from specific third-party services, please refer to the vendor opt-out tools (for example Hotjar’s and Google’s opt-out options) or contact us at support@sendgifthint.com for assistance.

8. Data retention

We retain personal data (including SMS content and delivery status) for as long as necessary to provide the Service and to comply with our legal and operational obligations. Specifically, message-related records are retained until you request deletion or until retention is otherwise required by law.

If you request deletion of your data, we will proceed in accordance with applicable law and our procedures — see the “Your rights” section below for how to submit a request.

9. Your rights (EU / GDPR)

If you are located in the EU/EEA, you have certain rights regarding your personal data. These include:

Right of access — request a copy of your personal data.
Right to rectification — request correction of inaccurate or incomplete data.
Right to erasure — request deletion of your data (subject to legal exceptions).
Right to restriction — request that processing be limited in certain circumstances.
Right to portability — request a machine-readable copy of data you provided to us.
Right to object — object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise your rights, contact us at support@sendgifthint.com. We will verify your identity before responding. We will respond to requests without undue delay and in any event within one month of receipt. Where requests are complex or numerous, we may extend this period by up to two further months and will inform you of the extension and reason.

If you are not satisfied with our response, you have the right to lodge a complaint with your national supervisory authority. In Romania the data protection authority is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP).

10. Minors

The Service is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe that we have collected data from a child under 16, please contact us and we will take steps to delete the information in accordance with applicable law.

11. Security

We follow generally accepted industry standards to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. These measures include administrative, technical, and physical safeguards appropriate to the sensitivity of the information. However, no method of transmission or storage is completely secure; we cannot guarantee absolute security.

12. Sharing and disclosure

We may disclose personal data only in the limited circumstances described below:

To service providers who process data on our behalf (e.g., Twilio, analytics, hosting, backups).
To comply with legal obligations or respond to lawful requests by public authorities.
To protect rights, property, safety of GiftHint, our users, or the public.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be posted on the Site with an updated effective date. Your continued use of the Service after any change constitutes acceptance of the updated Policy.

14. Contact

For questions, to exercise your rights, or to request deletion of your personal data, contact us at:
support@sendgifthint.com

This Privacy Policy is provided for informational purposes and does not create contractual or other legal rights beyond those required by applicable law.

Related: Terms of Use