Givvr Inc. operates givvr.app and the Givvr gift service. This policy covers the website, gift and account flows, evaluation features and support. Contact support@givvr.app or Givvr Inc., 24603 Via Tecolote, Calabasas, CA 91302, United States.
1. Information and why we use it
We process account identifiers, display names, sign-in information and email addresses; sender and recipient details; gift messages, selected templates and uploaded gift photos; gift values, fees, tax, payment, refund and reward records; phone numbers, protected phone identifiers, verification and consent events; and support correspondence. These come from you, another party to your gift, connected applications you authorize and service-provider responses.
We also process technical and security information such as IP-derived signals, browser and request information, session identifiers, transaction history, risk decisions and service events. These support access control, fraud prevention, eligibility checks, recovery and troubleshooting. Payment flows can process receipt email and billing details. Stripe collects payment credentials in its payment interface; Givvr handles transaction references and results rather than providing its own card-number entry service.
We use information to provide the requested account and gift features, display personalization to intended recipients, verify phone access, process payments and refunds when enabled, arrange authorized reward fulfillment, answer requests, maintain service records and meet legal obligations. Internal service analytics help understand use and reliability. Do not put credentials, government identifiers, health information or another person's sensitive information in gift content.
2. Disclosures and service providers
Vercel hosts the website and request gateway. Supabase supports authentication, database records and private gift-photo storage. Stripe processes payments; Twilio supplies recipient-requested verification. Relevant notices are available from Vercel, Supabase, Stripe and Twilio. A sign-in provider you choose receives information needed for authentication under its own terms.
When authorized fulfillment is enabled, a reward provider and merchant or issuer receive information needed for issuance and redemption. Tremendous is the intended provider pending explicit approval; its privacy policy governs information it collects directly. Verifying a phone through Twilio does not by itself require disclosure of that number to a reward provider.
The sender and recipient receive information necessary for their gift, such as personalization, amounts and status appropriate to their role. A connected application receives the account and gift information you authorize for its functionality. We may disclose information to advisers, in a business transaction, to comply with legal process, or to protect rights and security. Givvr does not operate an advertising network on this website; payment and authentication providers may process information under their own notices.
3. Phone verification messages
Givvr does not send gift-notification SMS. You request authentication texts by entering a number you control and affirmatively requesting a code through Twilio. This consent covers verification only, not marketing. Message and data rates may apply; frequency depends on requests and retries. Carriers are not liable for delayed or undelivered messages.
Stop requesting codes or contact support@givvr.app to withdraw consent or get help. Where the messaging service supports a STOP or HELP reply, follow its instructions. No alternative verification method is promised; required verification must be completed to proceed. Never share an OTP. A verified number does not establish age or legal identity.
5. Retention and safeguards
Account records support the active account and closure requests. Gift content remains associated with gift delivery, history and related disputes. Transaction, refund, consent, verification and security records support unresolved transactions, fraud prevention, accounting, required records and unclaimed-value obligations. Support records support case handling and follow-up. These purposes, legal requirements and unresolved matters determine retention; there is no uniform automatic deletion period for these categories. Token or cookie expiry is not deletion of the related database record. Provider logs and any backup copies follow separate provider schedules and may persist after account closure.
Account deletion can disable access without immediately erasing transaction or legally required records. Submit deletion requests to support or use account controls when available. We assess which information can be deleted and which must be retained under applicable law.
The service uses access controls, protected session cookies, hashed or encrypted access credentials and phone identifiers, and restricted gift-photo storage. Providers support their own infrastructure protections. No service guarantees perfect security. Protect your account, device, codes and links and report suspected misuse.
6. Rights and updates
Depending on your state and applicable law, you may request access, a copy, correction or deletion; opt out of covered sale, sharing, targeted advertising or profiling; limit covered sensitive-information use; appoint an authorized agent; or appeal a qualifying denial. Email support to make a request or appeal. We verify authority, apply lawful exceptions and deadlines, and do not unlawfully discriminate for exercising rights.
Givvr is for eligible adults 18 and older. Contact us about children's information so we can take required action. Material policy changes receive notice where required and a revised effective date. Service providers may process information in the United States or other locations under their notices and applicable safeguards.