Privacy Policy

1. Who we are

Giftafari is a product of BrainGrid AI, Inc. (“BrainGrid,” “we,” or “us”). This policy covers giftafari.com, app.giftafari.com, our emails, and any apps or assistant connections we offer. Our Terms of Service at giftafari.com/terms explain the rules for using Giftafari.

2. Information you give us

We collect what you provide when you create an account, set up a group, add people, build a list, save a gift, claim a gift, or invite someone.

• Account details: your name and email address, plus the profile details your sign-in provider shares, such as a profile photo.
• Group details: the group’s name, country, and postal code.
• People: names and dates of birth for the people in your group, including people without an account.
• Lists and gifts: list names, gift links, titles, images, prices, and notes.
• Claims: which gift was claimed, by whom, its status, and when.
• Invitations: the email address or share link you use to invite someone.
• Messages you send us for support or feedback.

3. Information about other people

Giftafari works because people add details about the people they shop for. When you add someone, make sure you have a reasonable basis to share their details. If a group member added information about you and you want it corrected or removed, ask them or write to us and we will help.

4. Information we collect automatically

When you use Giftafari, our systems record basic technical information needed to run and secure the service: IP address, device and browser type, pages requested, timestamps, errors, and sign-in events.

We use cookies only to keep you signed in and to protect your session. Cookieless product events tell us when setup steps succeed or fail. Those events omit gift titles, descriptions, links, names, email addresses, and other customer content. We do not use advertising cookies or cross-site tracking.

5. Information from other sources

If you sign in with Google or Apple, that provider shares your name, email address, and sometimes a profile photo. With Apple, you can hide your email address, and we will use the relay address Apple gives us.

When you save a gift link, we may fetch that page’s public title, description, image, retailer, and price. We store a controlled copy of an imported image and keep source or attribution details when they are available.

6. How we use information

We use information to:

• Run Giftafari: accounts, groups, shared lists, and gift claims.
• Keep claims hidden from the recipient while showing them to other buyers.
• Send sign-in links, invitations, and other service emails.
• Authenticate accounts, prevent abuse, and keep Giftafari secure.
• Answer support requests and feedback.
• Fix problems and improve Giftafari, using aggregated or de-identified information where we can.
• Meet legal obligations and enforce our terms.

7. What we do not do

We do not sell personal information. We do not share it for targeted advertising, and we do not use your lists or personal information to train AI models. We do not show ads based on what is on your lists.

8. Who can see your information

Members of a group can see the people and lists shared with that group. Anyone with a shared list link can view that list. Claim details are hidden from the recipient and visible to the other buyers who can see that list.

We share information with service providers who run Giftafari for us and may use it only to provide their services:

• Supabase, for our database, authentication, and sign-in emails.
• Vercel, for website and application hosting.
• PostHog, for cookieless product events that omit customer content.
• Google and Apple, if you choose to sign in with them.

9. Other disclosures

If you connect an AI assistant or another app to Giftafari, we share the information that app needs to do what you ask. Its provider handles that information under its own privacy policy.

We may disclose information when the law requires it, to protect the safety or rights of people or of Giftafari, or with your consent. If BrainGrid is part of a merger, acquisition, or sale of assets, information may move to the new owner under this policy.

Gift links take you to merchant websites. Those websites have their own privacy practices.

10. Legal bases for processing

If you are in the European Economic Area or the United Kingdom, we process personal information to perform our contract with you, for our legitimate interests in running a safe and useful service, to meet legal obligations, and with your consent where we ask for it. You can withdraw consent at any time.

11. Retention

We keep your information while your account is active. Raw cookieless product events are kept for 90 days, and acquisition attribution expires after 30 days. Account exports expire after 24 hours. When you close your account, active links and credentials are revoked, reserved claims are released, retained purchase history is de-identified, and protected media from deleted sole-member groups is removed. Deleted data leaves provider backups on their backup cycle, targeted within 90 days. We keep request and security logs for up to 12 months, and anything else only as long as the law requires.

12. Security

Information travels over encrypted connections and is encrypted at rest by our hosting providers. Access controls limit each account to the groups and lists it belongs to. No online service is perfectly secure. If a breach affects your personal information, we will notify you as the law requires.

13. Your rights and choices

You can edit or delete your lists, gifts, and the people you added in Giftafari. Account settings lets you download an export and close your account. If you own a group with collaborators, you must transfer ownership first. You can also ask us to access, correct, export, or delete your personal information, to restrict or object to how we use it, or to withdraw consent.

Send requests to legal@braingrid.ai. We will confirm your identity through the email address on your account and answer within 30 days. You can use an authorized agent, and if we deny a request you can appeal by replying to our answer. Exercising these rights never changes how we treat you.

If you are in the European Economic Area or the United Kingdom, you can also complain to your local data protection authority.

14. United States privacy rights

Residents of California and other states with privacy laws have the rights described in section 13. In the past 12 months we collected identifiers (such as name and email), personal records (such as dates of birth and postal codes), and internet activity (such as request logs), from the sources and for the purposes described above. We did not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about anyone.

15. International transfers

BrainGrid is based in the United States, and our service providers process information in the United States and other countries. When we transfer personal information out of the European Economic Area, the United Kingdom, or Switzerland, we rely on Standard Contractual Clauses or another lawful transfer mechanism.

16. Children

Giftafari accounts are for adults 18 and older who can enter a binding contract where they live, and Giftafari is not directed to children. Only a parent or guardian may add a child to their group so family members can see that child’s lists. Those profiles belong to the adult who created them, and the child does not use Giftafari.

If you believe someone under 18 created an account, or that someone other than a child’s parent or guardian added that child, write to legal@braingrid.ai and we will delete the account or the child’s information.

17. Changes to this policy

We will post any update here with a new effective date. For material changes, we will also tell you by email or in the product before they take effect.

18. Contact

Send questions and privacy requests to legal@braingrid.ai, or write to BrainGrid AI, Inc., 1111B S Governors Ave STE 29316, Dover, DE 19904, USA.