Privacy Policy

1. Information We Collect

We collect information to provide better services to all our users. The types of information we collect include:

• Account Information: When you sign up via Google OAuth, we collect your name, email address, and profile picture
• Letter Content: Messages, recipient names, sender names, images, and music selections you include in your letters
• Usage Data: Information about how you use our service, including when letters are opened and read
• Device Information: Browser type, IP address, and other technical information

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our service
• To notify you about changes to our service
• To provide customer support
• To gather analysis or valuable information to improve our service
• To detect, prevent and address technical issues
• To send you notifications when your letters are opened (if enabled)

3. Data Security

The security of your data is important to us. We implement industry-standard security measures:

• All letters are protected with PIN codes that are encrypted using bcrypt
• Data is transmitted over secure HTTPS connections
• We use secure database storage with PostgreSQL
• Regular security audits and updates
• Access controls to limit who can view your data

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

4. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With Your Consent: When you authorize us to share information
• Service Providers: With third-party vendors who help us operate our service (e.g., hosting, authentication)
• Legal Requirements: If required by law or to protect our rights
• Business Transfers: In connection with a merger, sale, or acquisition

5. Your Rights & Choices

You have control over your personal information:

• Access & Update: You can view and update your profile information at any time
• Delete Account: You can request deletion of your account and all associated data
• Notification Settings: Control which notifications you receive in your settings
• Data Export: Request a copy of your data in a portable format
• Opt-Out: Unsubscribe from marketing communications at any time

6. Cookies & Tracking

We use cookies and similar tracking technologies to track activity on our service and hold certain information:

• Session cookies to keep you logged in
• Preference cookies to remember your settings
• Analytics cookies to understand how you use our service

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

7. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us.

8. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ. We ensure appropriate safeguards are in place to protect your data.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@gulalies.com

We will respond to your inquiry within 30 days.