Privacy Policy

Last updated September 10, 2026

This policy explains what GFTY collects, why, and the choices you have. It applies to getgfty.com and the GFTY service, operated by GFTY Box, Inc. ("GFTY," "we," "us").

1. What we collect

From you: your name, email address, city and state, and any messages you send us.

About your recipients: a first name or nickname, a date of birth or occasion date, your relationship to them, their interests, a budget, and, if you choose direct shipping, a shipping address.

Automatically: pages and features you use, whether you approve, change, or skip recommendations, clicks on retailer links, and technical data such as IP address, browser, and device type. We use cookies and similar technologies to keep you signed in and understand how GFTY is used.

The people you add haven't signed up for GFTY. Please add only what you're comfortable sharing on their behalf, and only for people you know. If someone asks us to remove their information, we will.

2. How we use it

We use this information to run the service and generate your recommendations, improve future curations based on what you approve, change, or skip, send you notifications and occasional updates (you can opt out of updates), credit purchases made through our links, and protect the service and meet legal obligations. Recommendations are generated with the help of AI, and you decide what, if anything, to buy.

We do not sell your or your recipients' personal information, use it for targeted advertising, or contact the people you add.

3. Who we share it with

Only service providers that help us operate: hosting and database providers, an email provider, and an AI provider that generates recommendations from the recipient details you enter. When you click a retailer link, the affiliate network receives a tracking identifier that doesn't include your name or email, and the retailer or network may set its own cookies. Once you're on a retailer's site, its privacy policy applies.

We may also disclose information if required by law, to protect rights or safety, or as part of a merger or sale of the business, in which case we'll notify you.

4. Retention and security

We keep your information while your account is active and delete it within 30 days of account closure, except records we must keep for legal, tax, or accounting purposes. Aggregated data that can no longer identify you may be kept.

We use encryption in transit and restrict access to your data. No system is perfectly secure. If a breach affects your information, we'll notify you as required by law.

5. Your rights

Depending on where you live, including Texas and California, you may have the right to access, get a copy of, correct, or delete your personal information, and to opt out of sale or targeted advertising (we do neither). We won't treat you differently for exercising these rights. Because we don't sell data or use it for targeted advertising, we don't change our practices in response to browser Do Not Track signals.

To make a request, email hello@getgfty.com. We'll respond within 45 days and may need to verify your identity first. If we deny your request, you can appeal by replying to our response.

6. Children

You must be 18 or older to use GFTY, and we don't knowingly collect information directly from children under 13. If a recipient is a child, please add only a first name, an occasion date, and interests. If you believe a child has created an account, contact us and we'll delete it.

7. Changes and contact

We'll notify you by email or through the service before any material change takes effect. Questions? Email hello@getgfty.com.

GFTY Box, Inc.