Privacy Policy
Effective date: January 31, 2025
Overview
At GiftSolutions.AI, operated by Tan & Fam Inc ("we," "us," or "our"), we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, process, and disclose your information when you use our AI-powered gift recommendation service ("Service").
This policy applies to all users of our website and services, regardless of location, and complies with applicable privacy laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other regional privacy regulations.
Information We Collect
Information You Provide Directly
- Account Information: Name, email address, password when you create an account
- Profile Information: Preferences, gift lists, saved items
- Gift Request Data: Information about gift recipients (age, interests, budget, occasion)
- Communication Data: Messages sent through our chat system, feedback, and support requests
- Payment Information: Processed securely through third-party payment processors
Information Collected Automatically
- Usage Data: How you interact with our service, pages visited, features used
- Device Information: Browser type, operating system, device identifiers
- Location Data: General location based on IP address for content localization
- Log Data: IP addresses, access times, error logs for security and performance
- Cookies and Tracking: As described in our Cookie Policy
How We Use Your Information
We use your information for the following purposes:
- Service Provision: Generate personalized gift recommendations using AI
- Account Management: Create and maintain your user account
- Communication: Send service updates, respond to inquiries, provide support
- Improvement: Analyze usage patterns to enhance our AI algorithms and user experience
- Security: Detect and prevent fraud, abuse, and security incidents
- Legal Compliance: Comply with applicable laws and legal obligations
- Marketing: Send promotional communications (with your consent where required)
Legal Basis for Processing (GDPR)
For users in the European Union, we process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to provide our services
- Legitimate Interest: Improving our services, security, and fraud prevention
- Consent: Marketing communications and optional features
- Legal Obligation: Compliance with applicable laws
Your Privacy Rights
Depending on your location, you may have the following rights:
Universal Rights
- Access: Request copies of your personal information
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal information
- Opt-out: Unsubscribe from marketing communications
Additional EU/UK Rights (GDPR)
- Portability: Receive your data in a machine-readable format
- Restriction: Limit how we process your information
- Objection: Object to processing based on legitimate interest
- Withdraw Consent: Revoke consent for consent-based processing
To exercise these rights, contact us at privacy@giftsolutions.ai or use our contact form.
Data Retention
We retain your information for as long as necessary to:
- Provide our services and maintain your account
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Improve our services (in anonymized form)
Account data is typically retained for 3 years after account deletion, unless a shorter period is required by law.
Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls limiting data access to authorized personnel
- Incident response procedures
- Regular backups and disaster recovery plans
However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
International Data Transfers
Your information may be transferred to and processed in countries outside your residence, including the United States. We ensure adequate protection through:
- Adequacy decisions by relevant authorities
- Standard contractual clauses
- Certification schemes and codes of conduct
- Service provider agreements with appropriate safeguards
Third-Party Services
Our service integrates with the following third-party services, each with their own privacy policies:
- OpenAI: AI language processing - Privacy Policy
- Google Analytics: Website analytics - Privacy Policy
- Supabase: Database and authentication - Privacy Policy
- Amazon Associates: Affiliate program - Privacy Notice
Children's Privacy
Our service is not intended for children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to remove the information.
California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected and how it's used
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising privacy rights
To exercise these rights, contact us at privacy@giftsolutions.ai.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:
- Post the updated policy on this page with a new effective date
- Notify you via email for material changes (if you have an account)
- Provide notice through our service for significant changes
Your continued use of our service after changes become effective constitutes acceptance of the revised policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
- Email: privacy@giftsolutions.ai
- General Support: support@giftsolutions.ai
- Contact Form: giftsolutions.ai/contact
- Mailing Address: Tan & Fam Inc, Privacy Officer, [Address to be provided]
For EU residents, you also have the right to lodge a complaint with your local data protection authority.