Privacy Policy

Last Updated: January 6, 2025

1. Introduction

EchoGift ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

2. Information We Collect

Personal Information You Provide:

  • Contact Information: Name, email address
  • Order Information: Recipient name, occasion, story details
  • Payment Information: Processed securely through Stripe (we do not store payment details)
  • Song Details: Genre preferences, tone, personal stories, artwork inspiration
  • Communication: Messages sent to our support team

Information Automatically Collected:

  • Website Usage: Pages visited, time spent, click patterns
  • Device Information: Browser type, operating system, IP address
  • Cookies: Website functionality and analytics cookies

3. How We Use Your Information

We use your information to:

  • Provide Services: Create your custom songs and artwork
  • Process Orders: Handle payments and deliver completed songs
  • Customer Support: Respond to inquiries and resolve issues
  • Communication: Send order confirmations and delivery notifications
  • Service Improvement: Analyze usage to enhance our offerings
  • Marketing: With your consent, send promotional materials
  • Legal Compliance: Meet legal and regulatory requirements

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties.

We may share information with:

  • Service Providers: Stripe (payment processing), Formspree (email handling), Vercel (hosting)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfer: In the event of a merger, acquisition, or sale of assets
  • Consent: When you explicitly authorize sharing

5. Data Security

We implement appropriate security measures to protect your information:

  • Encryption: All data transmission is encrypted via HTTPS
  • Secure Payment: Payment processing through PCI-compliant Stripe
  • Access Controls: Limited access to personal information
  • Regular Updates: Security systems are regularly maintained

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for:

  • Order Records: 7 years for business and tax purposes
  • Personal Stories: Permanently deleted after song creation (unless used as samples with permission)
  • Email Communications: Retained for customer service purposes
  • Website Analytics: Aggregated data retained indefinitely

7. Cookies and Tracking

We use cookies for:

  • Essential Functions: Website operation and security
  • Analytics: Understanding website usage patterns
  • Marketing: Tracking conversion and advertising effectiveness

You can control cookies through your browser settings, but some features may not function properly if disabled.

8. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal information
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your personal information (subject to legal retention requirements)
  • Opt-out: Unsubscribe from marketing communications
  • Data Portability: Request your data in a portable format

To exercise these rights, contact us at hello@echogifts.shop

9. Third-Party Services

Our website uses third-party services:

These services have their own privacy policies and we are not responsible for their practices.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information during such transfers.

11. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

12. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising CCPA rights

13. European Privacy Rights (GDPR)

If you are in the European Union, you have additional rights under GDPR:

  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated date. Significant changes will be communicated via email or website notice.

15. Contact Information

For questions about this Privacy Policy or our data practices, contact us:

Email: hello@echogifts.shop

Website: echogifts.shop