Privacy Policy

1. Information We Collect

Card creators: Email address (required to deliver card links and purchase receipts), payment information (processed and stored by Stripe — we never see or store your full card number).

Card signers: Name (as entered in the guestbook), messages, and any media voluntarily uploaded (video, voice notes, photos, GIFs, song links). No account or email is required to sign a card.

Gift senders: Email address (optional, provided at Stripe Checkout), payment information (processed by Stripe).

Gift recipients: Email address (for gift claim notifications), banking information (collected by Stripe Connect during onboarding — Joy Signal never sees or stores bank details).

Automatically collected: Page view counts and signature counts per card (aggregated, non-personal). We do not use cookies for tracking or advertising. We do not use third-party analytics trackers at this time.

2. How We Use Your Information

We use collected information solely to operate the Service: delivering cards, displaying signatures and media, processing payments, facilitating gift transfers, and sending transactional emails (purchase confirmations, gift claim notifications, abandoned card reminders). We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Media Storage

Videos, voice notes, and photos uploaded by card signers are stored on secure servers provided by Supabase (hosted on AWS). Media is stored for the lifetime of the card. Media is publicly accessible via the card URL — anyone with the link can view the media attached to signatures. Do not upload content you wish to keep private.

Videos are compressed client-side before upload and capped at 60 seconds. Voice notes are capped at 30 seconds. Photos are capped at 10MB. We reserve the right to compress or optimize media for performance.

4. Payment Data

All payment processing is handled by Stripe, Inc. Joy Signal does not store credit card numbers, bank account numbers, or other sensitive financial data. Stripe's privacy policy applies to all payment transactions: stripe.com/privacy

5. Children's Privacy

Joy Signal is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information through our Service, please contact us at hello@joysignal.com and we will delete it promptly.

6. Data Retention

Card data and associated signatures/media are retained for the lifetime of the card. Inactive cards (no views for 24+ months) may be archived with 30 days notice. Payment records are retained as required by law and Stripe's policies. You may request deletion of your data by contacting hello@joysignal.com.

7. Third-Party Services

Joy Signal uses the following third-party services that may process your data: Stripe (payments), Supabase (database and file storage), Vercel (hosting), and Giphy (GIF search). Each service has its own privacy policy governing your data.

8. Your Rights

You have the right to request access to, correction of, or deletion of your personal information. You may also request a copy of the data we hold about you. To exercise any of these rights, contact hello@joysignal.com. We will respond within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or a prominent notice on our website.

10. Contact

Questions about this Privacy Policy? Contact us at hello@joysignal.com