1. Who We Are

GiftyZel ("we," "us," or "our") is a gift delivery platform operated from Houston, Texas, USA. We enable users to send physical and digital gifts to recipients without requiring senders to know recipients' delivery addresses. Questions about this policy may be directed to info@ozodac.com.

2. Information We Collect

• Account information: Name, email address, and (optionally) phone number when you create an account.
• Delivery address: Recipients provide their own shipping address directly. Senders never see recipient addresses.
• Payment information: Processed exclusively by Stripe. We do not store card numbers, CVVs, or bank details on our servers.
• Order data: Gift order details, status, and timestamps.
• Usage data: Pages visited, features used, and device/browser information collected via analytics tools.
• Communications: Messages sent through our contact forms or support channels.

3. How We Protect Your Address

Delivery addresses collected from gift recipients are encrypted at rest using AES-256-GCM, an industry-standard symmetric encryption algorithm. Encryption keys are stored separately from the encrypted data and are accessible only to our secure backend systems.

We never share a recipient's delivery address with the gift sender. The sender only sees the recipient's name and order status. This privacy guarantee is a core design principle of our platform.

4. How We Use Your Information

• Fulfilling and tracking gift orders
• Sending transactional emails (gift notifications, order confirmations, account alerts)
• Sending SMS notifications via Twilio where you have provided a phone number
• Improving our platform and personalizing your experience
• Preventing fraud, abuse, and unauthorized access
• Complying with legal obligations

5. Payment Processing

All payment processing is handled by Stripe, Inc. GiftyZel never stores, transmits, or has access to full payment card numbers or bank account details. Stripe's privacy policy governs the handling of payment data. Vendor payouts are processed via Stripe Connect.

6. Sharing Your Information

We do not sell your personal information. We share data only in these circumstances:

• Vendors: Approved marketplace vendors receive only the information necessary to fulfill an order (recipient name, delivery address, order details). They do not receive sender payment information.
• Service providers: Stripe (payments), Twilio (SMS), SendGrid (email), Supabase (database infrastructure), and Mixpanel (analytics) under data processing agreements.
• Legal requirements: When required by law, court order, or to protect the rights and safety of our users or the public.

7. Data Retention

We retain account data for as long as your account is active. Order records are retained for 7 years for tax and legal compliance. You may request deletion of your account and associated personal data by emailing info@ozodac.com. Deletion requests are processed within 30 days subject to legal retention requirements.

8. GDPR — Rights of EEA Residents

If you are located in the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Request erasure ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Lodge a complaint with your local supervisory authority

To exercise these rights, contact us at info@ozodac.com.

9. CCPA — Rights of California Residents

Under the California Consumer Privacy Act (CCPA), California residents have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information held by us
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising CCPA rights

To submit a CCPA request, email info@ozodac.com.

10. Cookies

We use cookies for authentication, analytics, and payment processing. See our Cookie Policy for details.

11. Children's Privacy

GiftyZel is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of GiftyZel after the effective date constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us at:
info@ozodac.com
GiftyZel · Houston, TX, USA