Privacy Policy

1. Introduction

At Everwish ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service at everwish.cards.

Everwish is operated by Everwish LLC, registered in New Jersey, United States.

By using Everwish, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Personal Information You Provide:

• Sender Information: Your full name, email address, and phone number
• Recipient Information: Recipient's name, email address, and/or phone number (used to deliver your card)
• Card Content: Custom messages, emojis, and photos you upload
• Payment Information: Processed securely through Stripe (we do not store credit card details)
• Account Information: Email, name, preferences, VIP/membership status

Google Account Data (when you connect Gmail):

Information Collected Automatically:

• Usage Data: Pages visited, cards viewed, time spent on site
• Device Information: Browser type, operating system, IP address
• Tracking Data: When cards are sent, delivered, opened, and viewed
• Cookies: For authentication, preferences, and analytics

3. How We Use Your Information

• Create and Deliver Cards: Generate personalized video cards and deliver them via email. WhatsApp and SMS delivery is facilitated by the sender directly (see Section 5).
• Bulk Sending: Use imported Gmail contacts to send cards to multiple recipients using your monthly bulk credits.
• Birthday & Event Reminders: Use your Google Calendar data (with permission) to remind you of upcoming occasions.
• Process Payments: Complete transactions securely through Stripe.
• Send Notifications: Notify you and recipients about card delivery and viewing status.
• Track Delivery: Monitor card status (sent, delivered, opened, viewed).
• Identify Recipients: Match email and/or phone number provided at checkout to determine if a viewer is the original intended recipient.
• Provide Support: Respond to questions and resolve issues.
• Improve Our Service: Analyze usage patterns to enhance features.
• Prevent Fraud: Detect and prevent unauthorized activity.

4. Recipient Identification & Card Access

Everwish uses the contact information entered during checkout to determine who is the intended recipient of a card:

• Original Recipient: Any person whose email or phone number was entered at checkout is considered an original recipient. They can view the full card experience including action buttons (Thank You, Download, Create One) without promotional banners.
• Third Parties (C, D, …): Anyone who receives a card link but whose email or phone does not match the checkout data is considered a third party. They will see a promotional version of the card encouraging them to create their own Everwish card.
• Bulk Recipients: Each recipient in a bulk send is individually identified. Successfully matched recipients are counted against the sender's 500 monthly bulk credits.

5. Card Delivery Methods & Responsibility

Email Delivery (Everwish sends):

When a recipient email is provided, Everwish sends a card notification email directly to that address via our email delivery provider (Resend). We track delivery and open status for this channel.

WhatsApp & SMS Delivery (Sender sends directly):

Everwish does not send WhatsApp or SMS messages on your behalf. Instead, we pre-fill a message with your card link that you send directly from your own device using your personal WhatsApp or SMS app. Because this delivery is performed entirely by you using third-party applications (WhatsApp, your carrier's SMS service), Everwish has no responsibility for:

• Privacy issues arising from WhatsApp or SMS transmission
• Delivery failures caused by the recipient's carrier or device
• Any permissions, policies, or terms of service of WhatsApp or SMS carriers
• Any content shared beyond the pre-filled card link

By using the WhatsApp or SMS share feature, you acknowledge that you are solely responsible for that transmission and agree to comply with WhatsApp's and your carrier's terms of service.

Pre-filled Recipient Data:

If you provided a recipient's phone number at checkout, the WhatsApp and SMS share buttons will be pre-filled with that number. This pre-fill is a convenience feature — you retain full control over whether and how to send the message.

6. Bulk Sending & Monthly Credits

• Credit Allocation: Active members receive 500 bulk credits per calendar month. Credits reset at the start of each billing cycle.
• Credit Usage: One credit is deducted per recipient in a bulk send. Credits are only deducted for email-channel bulk sends processed through Everwish.
• Gmail Contact Import: When you connect your Google account, we import your contacts to populate the bulk recipient list. You select which contacts to include — we never auto-send to your entire contact list.
• No Credit Refunds: Credits consumed for a bulk send are not refunded if a recipient does not open the card.

7. Where We Store Your Data

• PostgreSQL Database (Neon): User accounts, orders, tracking data, and metadata
• Cloudinary: Card videos and uploaded photos
• Cloud Infrastructure: Hosted on Vercel with SSL/TLS encryption

Google tokens (access and refresh) are stored securely in our database solely to enable Gmail contact import and calendar reminders. They are never exposed to third parties.

8. Who We Share Your Data With

We do not sell, rent, or trade your personal information. We only share data with trusted service providers necessary to operate our Service:

These providers are bound by confidentiality agreements and may only use your data to perform services on our behalf.

9. How Long We Keep Your Data

• Card History: Stored indefinitely in your "My Space" for sentimental value
• Account Data: Retained as long as your account is active
• Payment Records: Kept for 7 years for tax and accounting purposes
• Google Tokens: Stored until you disconnect your Google account

You can request deletion of your account and data at any time by contacting us at support@everwish.cards.

10. Your Privacy Rights

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a structured, machine-readable format
• Disconnect Google: Revoke Google access at any time from your account settings or at myaccount.google.com/permissions
• Withdrawal: Withdraw consent for data processing at any time

11. Cookies and Tracking

We use cookies to keep you logged in, remember preferences, analyze usage, and track card delivery status. You can control cookies through your browser settings, but disabling them may limit some features.

12. Children's Privacy

Everwish is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13.

13. Data Security

We use SSL/TLS encryption, encrypted storage, secure cloud infrastructure, and access controls to protect your data. No method of internet transmission is 100% secure — we cannot guarantee absolute security.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be notified via email or a prominent notice on our website.

Contact Us