Privacy

Who we are

Giftivus is a trading name of Ringfence Industrial Limited (“we”, “us”), a company in New Zealand. We decide what happens to the personal information you put into Giftivus, so we are responsible for it. That includes what you write about other people.

Our privacy officer is the owner of Ringfence Industrial Limited. You can reach them here:

• Company: Ringfence Industrial Limited
• Email: alex@ringfence.nz

Giftivus is made for people in the United States. Anyone can sign up from anywhere, and we handle everyone’s information the same way. New Zealand’s Privacy Act 2020 covers all the information we hold, wherever you live.

What we collect

From you

• Your account. Your email address and name, and your sign-in details. Clerk handles these for us (see “Who helps us”).
• What you add. Your People (we call them Contacts when we talk about the details), their dates (birthdays, anniversaries and Events you create), gift ideas, Gifts, Plans, wish lists, notes, and your Sensory Notes.
• Who you connect with. Your Connections, and who you plan with, share lists with, or name as a Co-giver.
• Your plan and billing. Which plan you’re on, when it renews, your country, and a record that you agreed to the renewal terms. We keep that record for 3 years. Paddle takes your payment. We never see your card.
• Your settings, such as whether you get “A note before a date”.
• Messages you send us when you ask for help.

Sensory Notes are gift preferences, like what something smells, sounds or feels like. They are not medical details, so please don’t put medical details in them or in any other note.

About people you add

When you add a Contact, you give us their name and whatever else you choose to write: dates, gift ideas, notes. Please add only what you’d be comfortable with that person seeing. Please don’t add health details, or a home address or tracking number for someone who hasn’t agreed.

There’s no email field on a Contact. We only ask for an email address when you choose to ask someone to connect, to plan with you, or to join your Family. We use that address to send that one invite, and we keep it only while the invite is open.

Automatically

• Requests. When you use Giftivus, or open a Share Link, our servers log the time, your IP address, your device type and browser, and which page was asked for. Share Link visitors don’t need an account. If you only look at a list, we hold nothing else about you.
• Errors. When something breaks, we record what failed, which page you were on and your internal Giftivus ID, so we can fix it.
• How the app gets used. We count actions, such as adding a person or saving a gift. We never record the words you type or the names you add. See “Analytics” below.
• Sales-site visits. The Giftivus website counts page views without cookies and without knowing who you are.

Someone put my details in Giftivus

Giftivus users write down details about the people in their lives. If you’re not a user and you’ve landed here, this is for you.

• What we hold. Only what a user typed: probably a name and a date, and maybe gift ideas or notes. We got it from that user, not from you.
• Why. The user wants to remember you and plan gifts for you. That is all we use it for.
• Who sees it. The user who added it. Nobody else sees it unless that user shares a list or plan that includes it. We never show you what a user wrote about you. We don’t contact you unless a user asks us to send you an invite. That is one email, and it has an unsubscribe link.
• You didn’t have to give it to us. You didn’t give it. The user did. You have no duty to give us anything.
• What you can ask. You can ask what we hold about you, ask us to fix it, or ask us to remove it. Write to alex@ringfence.nz with what you think we hold, so we can find it. We may ask you to confirm who you are. We’ll look at each request fairly. If it’s reasonable, we’ll remove or anonymise the record, even if the user who added it would rather we didn’t.
• If we hold your email. That only happens because a user asked us to send you an invite. If you ask us to stop, we put a one-way scrambled copy of your address on a list so we never send you another invite.

What we use it for

We use your information to run Giftivus for you. We don’t use it to show ads, to build a profile of you for others, or to train anything.

Giftivus can suggest that a Gift you’re planning matches an item on a wish list that someone shared with you. We do that on our own servers, not with an outside service.

Who sees what

• Share Links. Anyone who has the link to a wish list can view that list. Reserving an item needs an account. You can turn a link off whenever you like.
• Reservations. The person who owns a wish list never sees who reserved an item. If they turn on “Show taken”, they can see that an item is taken, but not by whom.
• Connections. A Connection sees only the wish lists you ticked under “Share with”. Having a Share Link doesn’t add anything to that.
• Plans. People who plan an occasion with you can see the Gifts in that Plan, except Gifts given to them. A Co-giver sees the Gift they share.
• Family. The person who pays for a Family plan can see who’s in it. They can’t see any member’s People, Gifts, Plans or wish lists. Members can’t see each other’s either.
• Us. We can see what’s in our database, because we run it. We only look when we need to run, secure or fix Giftivus, or when the law makes us.

Who helps us

These companies handle information for us. They work under contracts that limit what they can do with it. We don’t sell your information, and we don’t share it for advertising.

We may also share information when the law says we must, or to protect people from harm. If Ringfence Industrial Limited is ever sold, your information would go to the new owner, and this policy would still apply to it.

Sending your information overseas

These companies may keep information outside New Zealand. Our Giftivus server runs with Fly.io in Sydney, Australia. They hold information for us, under our contracts with them. Your New Zealand privacy rights still apply to it, and we remain responsible for it.

Cookies, storage and analytics

There’s no cookie banner. Giftivus sets two kinds of cookie: the ones that keep you signed in, and one that helps us find faults.

• Sign-in cookies. Clerk sets the cookies that keep you signed in. The service doesn’t work without them.
• Diagnostic cookie. Our diagnostics tool (HyperDX) sets one cookie, called __rum_sid. It groups the errors and timings from one browser session, so we can see what went wrong. It ends after 15 minutes of no activity, or after 4 hours at most. It is not used for advertising, and it is not used on other websites.
• Payments. The checkout belongs to Paddle. While it is open, Paddle may set its own cookies to take your payment and prevent fraud. See Paddle’s privacy notice for the details.
• Analytics. PostHog runs in your browser’s memory. It sets no cookie and uses no local storage. Autocapture and session recording are off. Before an event is sent, we strip the address of any Share Link, invite, or code from it. Every event carries only your plan, how long you’ve had an account (in broad bands such as “1 to 7 days”), and details like the type of action.
• Diagnostics. Our diagnostics tool doesn’t record sessions. Its only cookie is __rum_sid, described above.
• Our website. Umami counts page views with no cookie.
• Advertising. There are no advertising or cross-site trackers on Giftivus. No other party collects information about what you do on other sites through Giftivus.

Do Not Track. Giftivus doesn’t track you across other websites or over time on other services, so there’s nothing for a “Do Not Track” signal to switch off. We don’t change anything in response to one. Our analytics (PostHog and Umami) use no cookies and no personal details.

Emails we send

We send a short list of emails, and no others. We don’t send marketing, upgrade, seasonal or re-engagement emails.

Emails from Paddle come separately, under Paddle’s name and logo, and you can’t turn them off: your receipt, subscription confirmations, a renewal reminder (30 days before a renewal, in the places where Paddle sends it), cancellation, refund, price changes, and failed-payment notices.

Invites:

• We send an invite only because someone asked us to. It names them and carries no ads.
• Every invite email has an unsubscribe link and works with your email app’s unsubscribe button.
• If you unsubscribe, we keep a scrambled one-way copy of your address on a do-not-send list, and never send you another invite.

How long we keep it

• Closing your account. You can close your account in Settings, under Close account. Within 30 days, sign in again to reopen it. After 30 days, it is deleted for good, from our database, from Clerk and from our other systems.
• Backups. Deleted information can remain in our backups for a short time. It isn’t used and it ages out.
• Billing. Paddle is the merchant of record. Paddle keeps the payment and tax records.
• Logs and diagnostics. Kept only as long as we need them to run and secure Giftivus.
• Analytics. PostHog events hold an internal random ID. After your account is purged, that ID links to nothing.
• The do-not-send list. It holds one-way scrambled addresses, not readable ones.
• Paying when you close. Closing your account cancels the renewal. Your plan runs to the end of the year you paid for. See our Refunds page.

Your choices and rights

You can:

• See and download everything: Settings, then Export my data.
• Fix anything, right where it is.
• Close your account: Settings, then Close my account. We delete it and everything in it for good after 30 days.
• Turn off “A note before a date” in Settings, or use the unsubscribe link in an invite email.
• Ask us what we hold about you, ask us to correct it or remove it, object to how we use it, or ask us to stop. This includes people who aren’t users (see “Someone put my details in Giftivus”).
• Take back a consent you gave.
• Complain. Write to us first. We’ll answer within 20 working days. If we don’t put it right, you can go to a privacy regulator: in New Zealand, the Office of the Privacy Commissioner, or the regulator where you live.

Some places give you more legal rights than others. Where the law gives you fewer, we apply the same practice to everyone anyway. Nothing here takes away rights you have under the law where you live.

To use any of these, write to alex@ringfence.nz. Sending from the address on your account helps us know it’s you.

Security, and if something goes wrong

We protect your information with sign-in through Clerk, encrypted connections, and limits on who can reach our systems. No service can promise it will never fail.

If a breach is likely to cause you serious harm, we’ll tell you and the New Zealand Privacy Commissioner as soon as we can, and we’ll tell other regulators where the law says we must.

Age

Giftivus is for people 16 and over. When you sign up, you tick a box to say you’re 16 or over. Someone who owns a Family plan promises that everyone they invite is 16 or over too.

We don’t knowingly collect information from anyone under 16. If we learn an account belongs to someone younger, we’ll close it and delete its information. If you think this has happened, write to alex@ringfence.nz.

Changes

If we change this policy in a way that matters, we’ll tell you in the app before the change starts. The date at the top is the version you’re reading. We’ll change this policy whenever we change the tools listed above.

Contact and complaints

• Company: Ringfence Industrial Limited
• Email: alex@ringfence.nz
• Privacy officer: the owner of Ringfence Industrial Limited