Privacy Policy

This Privacy Policy explains how Gifmailer ("we", "us", "our") collects, uses, discloses, and safeguards information when you use gifmailer.com and related services (the "Service"). This page is maintained by Gifmailer to answer common privacy questions; it is not an independent certification or legal advice.

By creating an account or using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

Information we collect

Information you provide

• Account data: email address, name, and authentication identifiers when you register or sign in.
• Content you upload: photos, videos, prompts, brand guides, and any other materials you submit for GIF generation.
• Profile & brand settings: brand colors, logos, and preferences you save to your account.
• Support communications: information you share when you contact us for help.

Information collected automatically

• Usage data: pages visited, features used, generation history, and timestamps needed to operate and improve the Service.
• Device & technical data: IP address, browser type, operating system, and similar information collected from server logs.
• Analytics data: aggregate metrics about product usage, collected only with your consent per our Cookie Policy.

Gmail data (with your consent)

When you connect Gmail via Google OAuth, we use scoped tokens to create email drafts on your behalf. We request only the permissions necessary to insert GIFs into drafts. We do not read, store, or analyse the contents of your inbox. You can revoke Gmail access at any time from your account settings or Google security settings, and the token is deleted immediately.

Billing data

Payment information is handled by our payment processors (e.g. Paddle, Paystack). We receive a transaction reference and plan status — never your full card number or banking credentials.

How we use your information

• To provide, operate, and maintain the Service.
• To process your generations and deliver GIFs, videos, and email templates.
• To process payments and manage your subscription.
• To communicate with you about your account, security alerts, and service updates.
• To provide customer support and respond to inquiries.
• To monitor for abuse, fraud, and security threats.
• To improve and develop new features based on aggregate usage.
• To comply with legal obligations.

We do not sell your personal data. We do not use your uploaded content to train AI models. Your generated GIFs are yours to use as you see fit.

Legal basis for processing (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Performance of a contract (Art. 6(1)(b)) — to deliver the Service you signed up for, including GIF generation and email integration.
• Legitimate interests (Art. 6(1)(f)) — to prevent fraud, ensure security, and improve the Service, subject to your rights to object.
• Consent (Art. 6(1)(a)) — for optional analytics, marketing communications, and Gmail integration. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)) — to comply with applicable laws such as tax and anti-money-laundering regulations.

Data sharing & subprocessors

We share data with the following categories of service providers strictly to operate the Service. Each provider is bound by appropriate data protection terms:

• Cloud hosting & database: Lovable Cloud (Supabase) and Cloudflare for infrastructure, storage, and content delivery.
• AI generation providers: Lovable AI Gateway, Black Forest Labs (Flux), Replicate, and Google Gemini for image, video, and text generation.
• Google: Gmail API and OAuth for email draft creation and sign-in.
• Payment processors: Paddle and Paystack for subscription billing and credit purchases.
• GIF library: Klipy for GIF search results when you browse the GIF picker.

We may also disclose information when required by law, court order, or to protect our rights, property, or safety.

Data retention

• Account data: retained while your account is active.
• Uploads & generated content: stored until you delete them from your library or your account is closed.
• Usage logs: retained for up to 12 months for security and analytics, then aggregated or deleted.
• Billing records: retained as required by tax law (typically 5–7 years).
• Account deletion: on account deletion, we remove your personal data within 30 days, except where retention is required by law.

Your privacy rights

Depending on your jurisdiction (e.g. GDPR/UK GDPR, CCPA/CPRA, PIPEDA), you may have the following rights:

• Access: request a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your personal data ("right to be forgotten").
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests or for direct marketing.
• Restriction: request that we limit processing in certain circumstances.
• Withdraw consent: withdraw consent for processing that relies on it, including analytics cookies and Gmail access.

To exercise any of these rights, email support@gifmailer.com from the address associated with your account. We respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Cookies

We use essential cookies for authentication, session management, and core functionality — these cannot be disabled. We offer optional analytics and marketing cookies, which are off by default and require your consent. See our Cookie Policy for full details and to manage your preferences at any time.

Security

We use industry-standard measures to protect your data:

• TLS encryption for all data in transit.
• Encryption at rest for stored content and database records.
• Row-level security (RLS) on our database to isolate user data.
• Scoped, revocable OAuth tokens for Gmail and Google sign-in.
• Regular access reviews and least-privilege access controls.

No method of transmission or storage is fully secure. If you believe your account has been compromised, contact us immediately.

International data transfers

Our infrastructure and providers operate globally. By using the Service, you acknowledge that your data may be transferred to and processed in countries outside your residence, including the United States and European Union. We rely on Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement, and other appropriate safeguards for such transfers.

Children's privacy

The Service is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced via email or in-app notice at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.

Contact

Privacy questions, data requests, or complaints? Email support@gifmailer.com or write to:

Gifmailer — Privacy
support@gifmailer.com