Privacy policy
Effective
Accurate Services Plus LLC, a Texas limited liability company that operates Personalized Gifts Delivered ("we" or "us"), is responsible for the personal information described here. This policy explains what we collect when you visit the site, order gift boxes or email us; what we use it for; who else handles it; how long we keep it; and what you can ask us to do. "You" means the person visiting or ordering, and the business they order for. Questions or requests: hello@personalizedgiftsdelivered.com.
The short version
- We collect what we need to make and deliver your order: your logo (or the photo or words for a personal gift), your recipient list, your card message, and the payment record Stripe sends us. We never see your full card number.
- We use your recipients' names and addresses only to print their cards, deliver their gifts and fix problems with our order page, where our session recordings can show them on screen.
- We don't sell or rent personal information, and we don't use it for advertising.
- We count visits and order steps with a tool that uses no cookies. We also record how visitors use our pages with Microsoft Clarity, which uses cookies, including Microsoft's own, so we can find and fix problems.
- We delete your recipients' addresses within 150 days after the boxes ship, and the rest of an order's files later, on the schedule below.
- Email hello@personalizedgiftsdelivered.com to see, correct or delete what we hold about you or your recipients.
What we collect
When you order:
- Your logo, or for a personal gift the photo, design or words you give us: the file you upload or paste, the words you type, or the image you pick from your website if you ask us to look for it there. We keep the print-ready version the order page makes from it in the look you choose, and a copy of the file you gave when it's small enough to send with the order. We remove location and camera data from photos before they're stored. A business logo sent as a PDF or an Illustrator (.ai) file is kept as you sent it. One sent as an SVG is kept as you sent it, except that photos inside it are cleaned (or the logo is redrawn as a picture when they can't be) and Illustrator's private editing data is removed.
- The mug preview you approve.
- Your recipient list: the rows you approve on the order page, in our template's columns (First Name, Last Name, Company, Address Line 1, Address Line 2, City, State and ZIP). You can type rows, paste them, upload a file or link a Google Sheet; the order page reads what you give it in your browser, and we keep only the rows you approve, saved with your order when you press Pay.
- Your card message and sign-off (one of each for the whole order; if the message includes {first name}, each card fills in that person's first name from your list), and the occasion you pick.
- The order number we give your order, and a short summary of it: the number of boxes, the total, how many go to each state, the look, size and placement you choose for your logo, and where the logo came from.
- A record of what you agreed to: which versions of our terms, returns policy and privacy policy are in force when you press Pay, the words beside the checkbox on Stripe's page, and Stripe's record that you ticked it.
- Photos we may take of boxes we pack, as our record of what we shipped.
When you pay: you pay on Stripe's checkout page, not ours. There you give Stripe your card (or use Apple Pay or Google Pay), your email address and billing address, and your business name if you choose to. Stripe sends us a payment record: your name, email address, billing address and business name, the amount and date, and limited card details such as the brand and last four digits. We never see or store your full card number or its security code.
When you email us: your email address, your name as your email shows it, your message and anything you attach, such as a photo of a box that arrived broken.
When you visit: our host, Vercel, receives the technical details every request carries, such as your IP address, your browser and the page you asked for, to serve the page and protect the site from abuse. We count visits with Vercel Web Analytics, which uses no cookies. It records each page view with the page, the site that sent you, your general location (country, region and city), and your browser, operating system and type of device. It also counts a few steps of an order, such as starting one, adding a logo or addresses, pressing Pay and a paid order, and a few clicks, such as a start button on the home page. Like a page view, each count made in your browser records the page you were on, the site that sent you, your general location and your browser and device; the count of a paid order is made by our server when the order's email goes, and holds nothing about you. Beyond that, a count carries only words from a fixed list we set, such as how a step was done (upload or paste), the kind of gift, the holiday or kind of link that brought you to the order page, and a rough number of boxes (such as "10-24"). These counts never include your name, your recipients' names or addresses, your logo or photo, a website you type, your card message or your order number. The page addresses we count leave out anything you typed into them. It isn't used to identify you, and it doesn't follow you to other sites.
Session recordings: we also use Microsoft Clarity to record how visitors use our pages: the pages you open, where you move, click, tap and scroll, and what each page shows as you use it. On the order page that includes your design and the preview, your card message, and your recipients' names and addresses once the page shows them. Clarity doesn't record what you type into a box or pick from a list, only what the page then shows. Clarity also gets the order steps we count in your browser, and when you press Pay we add your order number to the recording, so we can find it if something goes wrong with your order. We watch these recordings only to find and fix problems and to improve the site. Microsoft keeps a recording for 30 days, or up to 9 months if we mark it or Clarity keeps it in a sample, and handles what Clarity collects under the Microsoft Privacy Statement. If your browser sends a Global Privacy Control signal, our pages don't load Clarity.
The copy of your order in your browser
When you press Pay, the order page keeps a copy of your order (your logo, or the photo or words you chose; the preview; your address list, card message and sign-off; and the id of your Stripe checkout) in your browser's own storage, so that if you leave Stripe's page without paying, you can pick up where you left off, and so the page can check with Stripe whether that checkout was paid. It keeps the same copy, without a checkout id, just before the page reloads, to pick up a newer version of the site or when you choose a reload it offers, so the reload doesn't lose your order. The copy stays on your device. It's deleted when our thanks page confirms your payment, when you choose Start over, or the next time you open the order page more than 24 hours later. It's never restored after 24 hours. You can also delete it at any time by clearing this site's data in your browser. On a shared computer, choose Start over or clear the site's data when you're done.
When the page reloads, to pick up a newer version of the site or because you chose a reload it offers, it leaves a small marker in that browser tab so it can tell you why. The marker holds nothing about you, and it's gone once the page has read it.
The order page also notes in that browser tab when you started your order, so our thanks page can tell you how long it took. The time you took to order is saved with your order, to help us make ordering faster.
Your recipients' information
An address list holds other people's names and addresses (often home addresses), and each of them gets a card with the message you write. When you give it to us, you confirm, as our terms say, that you're allowed to share it with us for this purpose and that it's accurate.
- We use it only to print their cards, ship their gifts, sort out delivery problems and fix problems with our order page, where our session recordings can show it. We don't contact your recipients to market anything, and we don't give their information to anyone for marketing.
- From your list we use only names, company and address. If your file or sheet has other columns, such as phone numbers, email addresses or notes, the order page leaves them out of your order, so we never store them. The one exception is a list the page asks AI to help read: up to 5 of its rows pass through, with email addresses and phone numbers masked; when none of a list's columns match, the rows it can't read pass through as text, up to 100, with their email and phone cells left out and their other cells, notes too, as they are; and so do any blocks of pasted text it couldn't read, or could read two ways, which aren't masked (see below).
- We print your card message as you write it, with each person's first name where you use the field for it, and the people who pack your boxes read it. Don't put anything in it you wouldn't want printed and read, such as account numbers or health details.
- The return address shows PersonalizedGiftsDelivered.com, never your name; your name appears only on the card inside.
- A recipient can ask us what we hold about them, or ask us to correct or delete it, the same way you can (see Your requests).
Lists we read with the help of AI
The order page reads most lists with ordinary code. When it can't place everything, for example a spreadsheet with unfamiliar column names or addresses pasted from an email, it asks an AI model, through our server, about only the part it couldn't read: the column names and up to 5 rows, so the model can say which column is which, with any cell that holds an email address or is a phone number masked before anything leaves your browser; a list whose columns it can't match to a name or an address at all (pasted, uploaded or linked from a Google Sheet), row by row as lines of text, with its email and phone cells left out and every other cell, a notes column too, sent as it is; or the blocks of text it couldn't sort, or could read two ways, which aren't masked. The column check sends its rows, up to 5, whether or not they read; in the last two cases, only the rows and blocks it couldn't read go, 100 at most, the most addresses one order takes. The model is Google's Gemini, reached through Vercel's AI Gateway. What we send can include names, addresses and anything else in those rows, such as notes or a column of card messages, but never your design, the card message you write on the order page, or payment details. We ask the gateway for no training: under Vercel's and the model provider's terms, what we send isn't used to train AI models. The gateway itself doesn't keep it; Google, which runs the model, may keep it for a limited time under its own terms and then deletes it. Any value the AI gives back that isn't in your own text is dropped, so it can sort your words but not add new ones. It can still sort them wrongly, so check the rows the order page shows you before you pay. The list you approve there is the list we ship.
Google Sheet links and your website
- If you give us a link to a Google Sheet, our server downloads that sheet the way anyone with the link could and passes it to your browser, which reads it like a pasted list. We don't save the sheet, and we get no access to your Google account or to any other file. A sheet shared with "anyone with the link" can be opened by anyone who has the link, so turn sharing off when you no longer need it.
- If you give us your website's address, our server visits the public page at that address (usually your home page), fetches a few of the logo images it names and shows them to you. We keep only the logo you choose, and the website's address, with your order.
How we use it
- To make and deliver your order: show the preview, print your logo and cards, pack and ship each box, and send you the tracking email.
- To take payment, and to handle refunds, reships and payment disputes.
- To answer your questions and sort out delivery problems.
- To keep the records our business needs and the law requires, such as for taxes and accounting.
- To prevent fraud and abuse, keep the site working and secure, and enforce our terms.
- To see, in total, how many people visit which pages, so we can improve the site.
- To find and fix problems on our pages, by watching recordings of how visitors use them.
We don't sell or rent personal information. We don't share it for targeted advertising, or with anyone for their own marketing; the cookies Microsoft sets through Clarity are described under Cookies and tracking below. We don't use your logo, lists or messages to train AI models, and we don't show your logo or order publicly without your permission.
Who else handles it
We share personal information only as this policy describes:
- Stripe, which takes payments. What you enter on Stripe's page is also covered by Stripe's privacy policy, and Stripe uses some of it for its own purposes, such as preventing fraud. If you dispute a charge, we send Stripe and the card network the order's records they need to decide it, such as your acceptance of our terms, the preview you approved and the tracking.
- Vercel, which hosts the site, stores your order's files, counts page views and order steps, and runs the AI Gateway.
- Microsoft, whose Clarity tool records how visitors use our pages (see Session recordings above), under the Microsoft Privacy Statement.
- Resend, which delivers our order emails: the confirmation we send you, with your order number, card message and order summary, and the email our site sends us for each paid order. That second email carries the order's details and files: the recipient list with each card's text, your design, the preview you approved and the order summary, with your name, business name and email address from the payment.
- The company that builds and runs our site for us, which manages our hosting, file-storage and email accounts. It opens your order's files and our emails only to keep the site working and to help us fill orders.
- Google, whose Gemini model helps read the parts of address lists our code can't, through Vercel's AI Gateway (see above).
- Our fulfillment partner, an independent company in New York that prints, packs and ships the boxes. It gets the recipient list with each card's text, your logo and the preview you approved.
- USPS and UPS, which get each recipient's name and address to deliver the box.
- Cloudflare, which runs our domain's records and forwards email sent to our address, and Google, whose Gmail holds our email and sends our replies, and which serves any Google Sheet you link.
- Our professional advisers, such as accountants and lawyers, when they need it to advise us.
- Others when the law requires it, such as to answer a subpoena or court order, or when we believe in good faith that it's needed to protect the rights, property or safety of our customers, the public or our company, including to prevent fraud.
- A new owner of our business: if our company or this business is sold, merged or reorganized, the information may pass to the new owner, who must handle it as this policy says.
- Anyone else, with your permission or at your direction.
Cookies and tracking
Our site sets no advertising cookies of its own. Microsoft Clarity, which records how visitors use our pages, sets two cookies on our site: one ties the pages of a visit into one recording, and one recognizes a browser that comes back. Its script also lets Microsoft set its own cookies, which Microsoft says it uses for purposes including advertising and site analytics. You can opt out of Clarity at optout.aboutads.info or block cookies in your browser. Stripe's checkout page is Stripe's own site and uses cookies under Stripe's cookie policy.
If your browser sends a Global Privacy Control signal, our pages don't load Clarity, so it sets no cookies and records nothing through our site. Our site doesn't respond to "Do Not Track" signals.
How long we keep it
- Your recipient list (the rows you approved, with each card's text): we delete it, including the copy in our order email, within 150 days after the order's boxes ship. Resend, which delivers that email, keeps its copy only for the period its service sets.
- The record of what we made (your design, the preview you approved, your card message and sign-off, the order summary, the record of what you agreed to and any photos of your packed boxes): we keep it for 2 years after the boxes ship, the time our terms allow for claims about an order, then delete it.
- If a question, claim or payment dispute about an order is still open when one of these times is up, we keep what it needs until it's settled.
- Checkouts never paid: we save your files when you press Pay, before you reach Stripe. If that payment is never made, we delete them within 60 days.
- Payment records: Stripe keeps its own under its policy. We keep the record of each sale (name, email, business name, amounts and order number) for as long as tax and accounting rules require.
- Email: we keep our emails with you, including the tracking spreadsheet that lists your recipients, as the record of your orders, and delete them when we no longer need them for that or for legal reasons.
- Visit data: our host's request logs and the page-view and order-step counts are kept for the periods Vercel sets.
- Session recordings: Microsoft keeps them for 30 days, or up to 9 months if we mark one or Clarity keeps it in a sample.
Our fulfillment partner and the carriers keep their own shipping records. Deleted files can stay in our providers' backups for a short time before those are overwritten.
How we protect it
- Your order's files sit in private storage: they have no public link, opening them takes our login, and our storage provider encrypts them on disk. The copies in our order email sit in our own mailbox, which takes our login too. Only the people who handle orders open them.
- The site uses HTTPS, so what you send us is encrypted on the way.
- Stripe handles card numbers; we never store them.
No way of storing or sending information is completely secure, so we can't promise that what you send us will never be reached in a way this policy doesn't allow. If a security breach affects your personal information, we'll tell you as the law requires. If you think something is wrong, email hello@personalizedgiftsdelivered.com right away.
Your requests
You can ask us to:
- tell you what personal information we hold about you or your recipients, and send you a copy;
- correct it;
- delete it.
Email hello@personalizedgiftsdelivered.com from the address you ordered with, and include your order number if you have one. To protect your information, we may ask you to confirm the request is yours before we act on it. We answer within 30 days. A recipient can ask the same way; we'll look them up by name and address.
Some things we can't delete right away: records the law requires us to keep (such as sales records for taxes), files we need for an open question, claim or payment dispute, and the record of what we made for your order, which we keep for the time set out above. If you ask us to delete an order's files before its boxes ship, we can't fill that order. Stripe, the carriers and our email providers hold some information under their own policies; we'll tell you how to reach them. If you disagree with our answer, reply and tell us why, and we'll look at it again. We won't treat you differently for making a request.
Some states' laws give their residents particular privacy rights. We don't sell personal information or use it for targeted advertising, and we answer the requests above for everyone, wherever they live.
Children
This site is for businesses and adults buying gifts. It isn't meant for children under 13, and we don't knowingly collect personal information from them. If you think a child has given us personal information, email hello@personalizedgiftsdelivered.com and we'll delete it.
Where we operate
We run this site from the United States and deliver only inside it. If you use it from another country, you're sending your information to the United States, where privacy laws may differ from yours.
Other websites
Links to other websites, such as Stripe's checkout page, a carrier's tracking page or the sources our guides cite, go to sites we don't run. Their own privacy policies apply there.
Changes to this policy
When we change this policy, we post the new version here and change the date at the top. If a change matters to an order that hasn't shipped yet, we also email that order's buyer. If we ever want to use information we already hold in a way this policy doesn't allow, we'll ask you first.
This policy and our terms
This policy is part of our terms. Those terms, including their limits on our liability and how disputes are resolved, also apply to anything about this policy.
Contact
Email hello@personalizedgiftsdelivered.com, with your order number if you have one.