The short version
- We only collect what's needed to run gift exchanges.
- We use it only for giftex — never for ads, and never sold.
- It's stored with Google Cloud and emails are sent through Brevo, who handle it only on our behalf.
- Delete your account any time and everything goes with it.
What we collect
If you join the beta waitlist
- Your email address.
If you're an organizer
- Your name, email address and password (stored only as a secure hash — we can't see it).
- The exchanges you create: their names, your rules and the message you write.
- Payment details, if you pay a fee. These are handled by Stripe; we never see or store your full card number.
If you're a participant
- Your name and email address, added by the organizer of your exchange.
- For workplace exchanges that keep teams apart, the name of your team (for example "Design"). It's used only to stop teammates drawing each other.
- Who you were matched with.
- Whether and when you opened your private link, and whether our emails to you were delivered.
How it's used
Only to run giftex:
- Drawing names and showing each participant their own match.
- Sending exchange emails, resends and account emails (like password resets).
- Showing organizers who has seen their match and which emails didn't arrive. Organizers never see who drew whom.
- Contacting waitlist members about the beta.
- Keeping the service secure and fixing problems.
We don't use your information for advertising, we don't build profiles, and we don't sell or rent it to anyone.
Who handles it
We use a small number of service providers to run giftex. They process information only on our instructions and may not use it for their own purposes.
- Google Cloud Platform — hosts the giftex website and stores our database (Cloud SQL) in Toronto, Canada.
- Brevo — delivers our emails. It receives the recipient's name and email address and the email's content.
- Stripe — processes fee payments. Stripe receives your payment details directly; we only receive confirmation that you paid.
Some of these providers may process information outside your country. We'll only share information beyond this if the law requires it, such as a valid court order.
How long we keep it
- Exchanges are deleted 12 months after names are drawn, or sooner if the organizer deletes them. When an exchange is deleted, all data associated with it — participants, email addresses, matches, rules and messages — is permanently removed.
- Organizer accounts are kept until you delete your account. When you delete your account, all information associated with it — your profile and every exchange you created, including all participant details — is permanently removed from our platform.
- Waitlist emails are deleted when the beta ends, or sooner if you ask.
- Deleted information may remain in our encrypted database backups for up to [7 days] before those backups are automatically erased.
Security
Information is encrypted in transit and at rest. Private reveal links use long, random codes that can't be guessed. Access to the database is limited to what's needed to run giftex. No system is perfectly secure, but we'll tell affected people promptly if a breach ever puts their information at risk.
Your choices
You can ask to see, correct or delete your information at any time — whether you're an organizer, a participant or on the waitlist. Email us at admin@giftex.ca and we'll respond within 30 days. Organizers can also edit or delete their exchanges, or delete their whole account, directly in giftex from the Account page.
Children
Organizers must be adults. If you add a child to an exchange, please use a parent's or guardian's email address.
Changes & contact
giftex is run by Peter Londry, an individual based in Ottawa, Ontario, who is responsible for the information described in this policy.
If we change this policy, we'll update the date above and let organizers know by email before any significant change takes effect.
Questions? Contact Peter Londry at admin@giftex.ca.