Privacy Policy

1. Introduction

GAB LLC, a Nevada limited liability company doing business as Giftabiz ("Giftabiz," "we," "us," or "our"), operates the website located at giftabiz.com and related services (collectively, the "Service"). This Privacy Policy describes how we collect, use, share, and protect your personal information when you visit our website, sign up for early access, or otherwise interact with the Service.

By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree with this Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

When you sign up for early access or otherwise interact with the Service, we may collect:

• Contact information: your name and email address
• Business information: what you are launching and when you plan to launch
• Communications: any messages, feedback, or replies you send us
• Payment information (once the platform launches): payment details processed by our payment provider, Stripe. We do not store your full payment card information on our servers.
• Business owner profile information (once the platform launches): campaign details, business photos, video messages, and other content you upload

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

• Device and browser information: browser type, operating system, device type
• Usage information: pages visited, time spent, referring URLs, actions taken
• Network information: IP address, general location (city or country level, not precise geolocation)
• Cookies and similar technologies: as described in Section 7

2.3 Information from Third Parties

We may receive limited information about you from third-party services, such as:

• Engagement metrics from our email service provider (beehiiv)
• Transaction confirmations from our payment processor (Stripe, once launched)
• Aggregated behavior data from analytics providers, if enabled

3. How We Use Your Information

We use your information only for the following purposes:

• To provide the Service: send you emails you signed up for, respond to your inquiries, deliver features you request
• To improve the Service: understand how visitors use our website, identify problems, develop new features
• To communicate with you: send you early access updates, product news, and other communications you have opted into
• To comply with legal obligations: respond to lawful requests, prevent fraud, protect our rights
• To ensure security: detect and prevent unauthorized access, abuse, or illegal activity

4. Legal Basis for Processing (EU/EEA Users)

If you are located in the European Union or European Economic Area, we process your personal information under one or more of these legal bases under the General Data Protection Regulation (GDPR):

• Consent: You have given us permission to use your information (e.g., signing up for the waitlist)
• Contract performance: Processing is necessary to provide services you have requested
• Legitimate interest: Processing is necessary for our legitimate business interests (such as improving the Service), balanced against your rights
• Legal obligation: Processing is required by law

You may withdraw your consent at any time by contacting us or using the unsubscribe link in any email.

5. How We Share Your Information

We do not sell your personal information to third parties. We share information only in these limited circumstances:

5.1 Service Providers

We work with trusted third-party companies that help us operate the Service. These providers are contractually obligated to protect your information and use it only for the purposes we specify. Current and planned providers include:

• beehiiv (email marketing service) — stores subscriber contact info and delivers email communications. See beehiiv's privacy policy.
• Stripe (payment processing, once launched) — processes payments and manages account information. See Stripe's privacy policy.
• Supabase (database and authentication, once launched) — stores user account data securely. See Supabase's privacy policy.
• Web hosting providers — hosts our website and infrastructure
• Analytics providers (if enabled) — helps us understand website usage in aggregate

5.2 Legal Requirements

We may disclose your information if required by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, the safety of others, or to investigate fraud.

5.3 Business Transfers

If Giftabiz is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you (via email or a prominent notice on our website) of any such change.

5.4 With Your Consent

We may share your information with other third parties when you give us explicit consent to do so.

6. Your Privacy Rights

Depending on where you live, you may have the following rights regarding your personal information:

6.1 For All Users

• Access: Request a copy of the personal information we have about you
• Correction: Ask us to correct inaccurate information
• Deletion: Ask us to delete your personal information (subject to legal exceptions)
• Opt out of marketing: Unsubscribe from marketing emails at any time using the unsubscribe link in any email or by contacting us directly

6.2 Additional Rights for EU/EEA Users (GDPR)

• Restriction: Ask us to limit how we process your information
• Portability: Request your information in a machine-readable format
• Objection: Object to processing based on legitimate interest
• Right to lodge a complaint: File a complaint with your local Data Protection Authority

6.3 Additional Rights for California Users (CCPA/CPRA)

California residents have the right to:

• Know what personal information is collected, used, shared, or sold
• Access their personal information
• Delete their personal information
• Opt out of the sale of personal information (we do not sell your information)
• Non-discrimination for exercising these rights

6.4 How to Exercise Your Rights

To exercise any of these rights, email us at hello@giftabiz.com. We will respond within 30 days (or as required by applicable law). We may need to verify your identity before fulfilling your request.

7. Cookies and Tracking Technologies

We use minimal cookies to operate the Service. These include:

• Essential cookies: required for the website to function properly (e.g., session management)
• Analytics cookies: help us understand how visitors use the Service (if enabled)
• Third-party cookies: from services like beehiiv (for email tracking and delivery)

You can control cookies through your browser settings. Blocking essential cookies may affect Service functionality.

8. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this Policy, including:

• Active subscribers: for as long as you remain subscribed to our communications
• Deleted accounts: up to 30 days after account deletion (for backup and legal purposes)
• Transactional data: as required by applicable law (typically 7 years)
• Analytics data: typically 14-26 months in aggregated form

After the retention period, we delete or anonymize your information.

9. Data Security

We take reasonable technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (SSL/TLS)
• Encryption of sensitive data at rest
• Access controls limiting who can view your information
• Regular security reviews of our practices and providers

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

10. International Data Transfers

Giftabiz is based in the United States, and your information will be processed and stored in the U.S. If you are located outside the U.S., your information may be transferred to and processed in countries with different data protection laws. By using the Service, you consent to such transfers.

For EU/EEA users, we rely on appropriate safeguards for international transfers, including Standard Contractual Clauses approved by the European Commission, adequacy decisions where applicable, and other lawful mechanisms as required.

11. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at hello@giftabiz.com.

12. Third-Party Links

The Service may contain links to third-party websites, products, or services. This Policy does not apply to those third parties. We are not responsible for the privacy practices or content of third-party services. Please review their privacy policies separately.

13. Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy
• Notify subscribers by email if the changes materially affect your rights
• Post the updated Policy prominently on our website

Your continued use of the Service after any changes indicates your acceptance of the updated Policy.

14. Contact Us

For questions, requests, or concerns about this Privacy Policy or our privacy practices, contact us at:

For EU/EEA users, you may also contact your local Data Protection Authority.