GIFTS AI DATA RETENTION POLICY
Effective Date: August 12, 2026
Last Updated: August 12, 2026
1. Purpose and Scope
GIFTS AI, Inc. (“GIFTS AI,” “we,” “our,” or “us”) retains personal information only for as long as reasonably necessary to provide and improve our website, mobile application, AI-powered gifting marketplace, and related services (collectively, the “Service”); fulfill purchases; maintain security; prevent fraud; comply with legal obligations; resolve disputes; and enforce our agreements.
This Data Retention Policy supplements the GIFTS AI Privacy Policy. If there is a conflict between this Policy and applicable law, applicable law controls.
2. Retention Principles
We apply the following principles when determining how long to retain information:
- Necessity: We retain information only for a legitimate business, legal, security, or operational purpose.
- Minimization: We limit retention to information that is relevant and reasonably necessary for the purpose for which it was collected.
- Security: Retained information is protected using reasonable administrative, technical, and physical safeguards.
- Deletion or De-identification: When information is no longer needed, we delete it, de-identify it, or aggregate it in a manner that no longer reasonably identifies an individual, unless retention is required or permitted by law.
3. Retention Periods
The periods below are generally applicable. Actual retention may be longer where required or permitted by law, or where necessary for security, fraud prevention, dispute resolution, accounting, tax, audit, or enforcement purposes.
Account and Profile Information
We retain account registration information, contact details, saved recipient information, preference information, wishlists, and other account-profile data while your account is active. After a verified account-deletion request, we will delete or de-identify applicable account data within 30 days, unless a legal or other permitted exception applies.
Orders, Transactions, and Commercial Information
We retain order records, purchase history, invoices, transaction details, customer-service records, and related identifiers for up to 7 years. We retain this information to fulfill orders, process returns or disputes, comply with tax and accounting obligations, prevent fraud, and support legal claims.
GIFTS AI does not store full payment-card numbers. Payment transactions are processed by third-party payment providers, which retain payment information under their own policies and legal obligations.
AI Personalization and Recommendation Data
We retain the preference inputs, gifting context, and inferences used to provide personalized recommendations while they are needed to provide the Service or maintain an active account. Where this information is deleted, we may retain de-identified or aggregated information that cannot reasonably be linked to you for analytics, product improvement, and service performance purposes.
Cookies, Device, and Usage Information
We retain cookie, device, browser, IP-address, analytics, and usage information for up to 2 years, unless a shorter retention period is required by law or configured through a service provider. You may be able to manage certain cookies through your browser settings or our cookie controls.
Security, Fraud, and Compliance Records
We may retain security logs, fraud-prevention records, consent records, privacy-request records, and audit records for as long as reasonably necessary to protect the Service, investigate incidents, comply with law, and establish, exercise, or defend legal claims.
Communications
We retain communications with us, including support requests, feedback, and correspondence, for as long as necessary to respond to the request, improve support, resolve disputes, and meet legal or compliance obligations.
4. Meta Platform Data
If you choose to connect a Meta account or otherwise authorize GIFTS AI to access data made available through Meta Platforms, we use that data only to provide the functionality you requested and as described in our Privacy Policy.
We retain Meta Platform data only for as long as it is necessary for that functionality, our legitimate security and compliance purposes, or as otherwise permitted by applicable law and Meta’s platform requirements. We delete Meta Platform data when it is no longer needed, when you disconnect the applicable Meta account, or following a verified deletion request, subject to any permitted legal, security, fraud-prevention, accounting, or dispute-resolution exceptions.
5. Account and Data Deletion Requests
You may request deletion of your GIFTS AI account or personal information by emailing info@giftsai.com with the subject line “Data Deletion Request.” Please include the email address associated with your account and sufficient information for us to verify your identity.
We will confirm receipt of a verifiable request within 10 business days and generally respond within 45 days. If more time is reasonably necessary, we will notify you as required by applicable law. Deleting personal information may limit or prevent your use of certain features of the Service.
Certain information may be retained after a deletion request where necessary or permitted to:
- Complete transactions or fulfill obligations related to an order.
- Detect, investigate, or prevent security incidents, fraud, abuse, or illegal activity.
- Exercise or defend legal claims.
- Comply with tax, accounting, consumer-protection, recordkeeping, or other legal obligations.
- Maintain de-identified or aggregated information that does not reasonably identify you.
6. Backups and Service Providers
Deleted information may remain in secure backup systems for a limited period before being overwritten in the ordinary backup lifecycle. Backup information is not used to restore a deleted account except where necessary for disaster recovery or legal, security, or compliance purposes.
We may use service providers, including payment processors, marketplace partners, shipping and logistics providers, cloud infrastructure providers, analytics providers, and customer-support providers. These providers may retain information in accordance with their contracts with us, their own policies, and applicable law.
7. Changes to This Policy
We may update this Data Retention Policy to reflect changes in our practices, technology, legal obligations, or the Service. We will post the updated Policy on this page and revise the “Last Updated” date. Material changes may also be communicated through the Service or by email where appropriate.