v2026.02.28 Giftpack provides software and related services for incentive programs, gifting, rewards, sourcing, recipient workflows, fulfillment coordination, impact allocation, and related operations. This Privacy Policy explains how Giftpack collects, uses, discloses, and protects personal data when you visit our website, use our platform, interact with our services, approve campaigns, receive gifts, participate in impact options, or otherwise interact with Giftpack.
This Privacy Policy applies to the Giftpack website, platform, and related services. It is a public notice and does not replace more specific privacy, data processing, or security terms that may apply under a separate agreement, order form, or Data Processing Addendum.
Depending on the relationship and service context, Giftpack may collect:
Giftpack may collect personal data directly from users, customers, customer administrators, authorized users, recipients, purchasers, donors, beneficiaries, service providers, integrations, analytics providers, payment processors, logistics providers, suppliers, and publicly or commercially available sources where permitted by law.
Giftpack may process personal data to provide and administer accounts and workspaces, authenticate users, provide the website/platform/services, process orders and redemptions, support gifting workflows and fulfillment, support recipient engagement and communications, process impact allocation and donation workflows, provide customer support, process billing and payment support, secure the platform, prevent fraud and abuse, comply with legal/regulatory/tax/sanctions/contractual obligations, conduct analytics and product improvement, troubleshoot and measure service performance, and send service or marketing communications where permitted.
Giftpack processes personal data in different roles depending on context. When customers provide recipient, employee, campaign, or end-user data for Giftpack to process on their behalf, the customer may act as controller or business and Giftpack may act as processor, service provider, contractor, or similar role. In those contexts, Giftpack’s Data Processing Addendum at https://giftpack.ai/dpa/ may apply unless a signed agreement states otherwise.
Giftpack may also process personal data as an independent controller or business for security, fraud prevention, analytics, service improvement, legal compliance, billing, account management, and internal business operations.
Giftpack may share personal data with service providers and subprocessors that support hosting, cloud infrastructure, data storage, backup, communications, email delivery, analytics, payment processing, billing, customer support, sourcing, manufacturing coordination, logistics coordination, fulfillment, donation or impact remittance support, security, fraud prevention, compliance, and professional services.
Giftpack may also disclose personal data within its corporate group, in connection with corporate transactions, where required by law, to protect rights and safety, or with customer instructions or individual consent.
Giftpack may process personal data in the United States and in other jurisdictions where Giftpack or service providers operate, including Google Cloud Platform infrastructure in Tokyo for disaster recovery purposes. Where required by applicable law, Giftpack implements appropriate safeguards for international transfers.
Giftpack maintains administrative, technical, and organizational measures designed to protect personal data. More information is available on Giftpack’s Security page. No system is perfectly secure, and Giftpack cannot guarantee absolute security.
Giftpack retains personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, the applicable agreement, service delivery, account administration, legal compliance, dispute resolution, tax and accounting records, fraud prevention, security, backup, and legitimate business operations. Retention periods vary based on data type, service context, legal obligations, and customer instructions.
Depending on your jurisdiction and relationship with Giftpack, you may have rights to access, correct, delete, restrict, object to, or receive a copy of certain personal data, and to opt out of certain processing. Where Giftpack processes personal data on behalf of a customer, Giftpack may refer your request to that customer.
Giftpack uses cookies and similar technologies as described in the Cookie Policy. You may manage cookies through browser settings and available privacy choices.
For privacy questions or requests, contact Giftpack at privacy@giftpack.ai or through the contact channels provided on Giftpack’s website.
Giftpack may update this Privacy Policy from time to time. The updated version will be posted with a new effective date or version date. Continued use of the services after an update means the updated policy applies, subject to any separate written agreement.