Privacy Policy
What information is needed, where it goes and the choices you have.
Version 2026-10-03-draft-2 · reviewed 3 October 2026. These are proposed policies, not an active contract. Seller details, effective dates and marked business decisions must be confirmed before launch.
Accounts, drafts and site measurement
Base44 manages email/password authentication and private account records. Anonymous text drafts recover in this browser for up to 7 days after the latest save. Separate tab copies are retained when edits conflict; account backup is confirmed only after the server saves a signed-in draft. Browser preferences remember the shopping region and optional analytics/marketing choices. Google Analytics and Meta Pixel use location-aware choices on the approved production domain: opt-out defaults in the US, and opt-in elsewhere or when location is uncertain. Payment and song-generation services are not open yet. Seller details and the remaining policy decisions must be completed before launch.
Collection and purposes
| Category & source | Purpose | Retention decision |
|---|---|---|
| Account/contact details · you | Authentication, order delivery and support | Account life and deletion window — to confirm |
| Recipient names, story, lyrics and preferences · you | Create the requested song | Draft, production and deletion periods — to confirm |
| Photos and optional pronunciation audio · you | Requested visual formats and pronunciation help | File and backup deletion periods — to confirm |
| Order, license, transaction and tax references · processor/you | Fulfillment, accounting and dispute handling | By seller jurisdiction and record type — to confirm |
| Support and privacy requests · you | Resolve issues and fulfill rights requests | Closure and audit retention — to confirm |
| IP/device/security logs · browser/server | Security, fraud prevention and consent evidence | Minimum justified period — to confirm |
| Region and privacy choices · this browser | Remember requested settings | Until changed, cleared or a policy version requires a fresh choice |
Who receives information
Planned providers include Base44 for hosting, authentication and private data storage; Google for the song brief and lyrics needed for Lyria generation; Stripe or Razorpay for payment processing; and Creatomate or the selected renderer for requested card/video formats. Optional measurement uses Google Analytics for public browsing/sample listening and Meta Pixel for advertising measurement, under the applicable location default or your saved browser choice. Passwords, email addresses, recipient names, stories, private uploads and gift tokens are excluded from these event payloads. Native confirmed-sign-in and registration activity goes to Base44, separate from advertising. Confirm the full vendor contracts before launch. Do not send unnecessary memories or photos to a payment processor.
AI provider handling
The live collection notice must identify which details go to Google, why, where they are processed and the applicable retention/training controls. No promise that a provider never trains on data is made until the contracted endpoint and account settings have been verified.
Sale, sharing and optional tools
Analytics and marketing are separate optional choices. Meta advertising measurement can involve sharing browsing/device information with Meta. A same-domain CDN lookup supplies only a country code for privacy settings; The privacy-setting code keeps only the country code in memory; it does not store the IP address or full lookup response. The shopping currency does not set privacy rules. In the US, Analytics and Marketing start by default unless you have opted out. Other locations, or an unavailable location, require opt-in. Existing saved choices override defaults. Global Privacy Control keeps marketing off. Song forms, sign-in, account, checkout, order and private gift pages do not load third-party scripts. When Analytics is permitted, Wishly records anonymous journey stages such as completing a step, confirmed login and successful account saving. These events use a random tab-session identifier and fixed stage labels, without names, emails, stories, photos, payment details or private links. They may be relayed to Google Analytics through our server when configured. Private gift listening is not tracked. Turning a category off reloads the page to remove its loaded scripts. Manage them through Your Privacy Choices.
Global Privacy Control
When your browser sends a GPC opt-out signal, marketing/targeted-advertising integrations remain disabled automatically, including when Allow optional is selected. Analytics is separately controlled and must not be misclassified to bypass a sale/sharing opt-out. GPC does not sign you out or stop essential checkout functions.
Rights and appeals
Depending on applicable law, you may request access, deletion, correction, portability, limitation of sensitive-data use or an opt-out of sale/sharing without discrimination. An authorized agent may make a request subject to lawful verification. Privacy Requests includes an appeal option. The production workflow must apply the relevant deadline; 45 days is a common US response period, not a universal deadline.
Security, verification and retention
The production design requires private storage, access limits, encrypted transport and server-side secrets. No system is perfectly secure. Verify requesters proportionately without requesting passwords, card details or government ID by default. Legal recordkeeping may limit deletion of some records; explain the relevant exception and erase unrelated data on schedule. Exact retention windows are launch blockers.
Children
Purchasers and account holders must be at least 18. Wishly is not directed to children under 13. If a child’s personal information is submitted, minimise it and ensure the relevant permissions; suspected inappropriate collection must be reviewed and removed or handled as required by law.
International processing
The seller’s country and provider processing locations are not yet confirmed. If information is processed in India or another country, the published policy must identify that fact and the applicable transfer safeguards. Customer-facing promises must match the contracted regions.
Effective date and contact
This version is a draft reviewed 3 October 2026, with no active effective date. Use Seller & Contact Details for the future privacy contact and Policy Versions for archived terms.