Introduction

Warmly Labs LLC ("Warmly," "we," "our," or "us"), operator of Warmly.cards, respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our digital card creation service. Warmly Labs LLC is the data controller for personal data processed through the Service.

Legal Basis for Processing

Where applicable law (such as the GDPR or UK GDPR) requires us to identify a lawful basis for processing your personal data, we rely on the following:

Performance of a contract: to create your account, deliver cards, and provide the Service.
Legitimate interests: to improve and secure the Service, prevent fraud and abuse, and communicate with you about your account.
Consent: for optional features such as marketing communications, where required.
Legal obligation: to comply with tax, accounting, and other legal requirements.

Information We Collect

We collect information you provide directly to us, including:

Account information (name, email address) when you sign up
Card content you create (messages, photos, captions)
Recipient information (names, email addresses, and phone numbers) for card delivery
Address book contacts you choose to save

How We Use Your Information

We use the information we collect to:

Provide and maintain our card creation and delivery service
Send cards to your designated recipients
Notify you when recipients view your cards
Improve and personalize your experience
Communicate with you about service updates

SMS Communications

Warmly Cards may allow registered users to send digital greeting cards through a one-time SMS notification. When a sender selects SMS delivery, the sender will provide the recipient’s mobile phone number and must affirmatively confirm that they have the recipient’s permission to receive a one-time text message from Warmly Cards containing the card.

The message will identify Warmly Cards and the individual sender and contain a secure link to view the card. Warmly sends one SMS per specifically authorized card. These messages are transactional and are not recurring, marketing, or promotional messages.

Recipient phone numbers are used to deliver requested card notifications, to administer opt-out requests, and to prevent abuse. We do not share, sell, or provide mobile phone numbers or messaging consent data to third parties or affiliates for marketing or promotional purposes. We may share this information with service providers, such as our SMS delivery provider, only as necessary to deliver and support the messaging service.

Recipients may reply STOP to opt out or HELP for assistance. After a recipient opts out, Warmly Cards will not send additional messages to that number unless the recipient subsequently provides valid consent. Recipients may also contact feedback@warmly.cards. Message and data rates may apply.

Data Storage and Security

Your data is stored securely using industry-standard encryption and security practices. Photos and card content are stored in secure cloud storage. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, or destruction.

Data Sharing

We do not sell your personal information. We share your information only in the following circumstances:

With recipients when you send them a card (they see your card content and signature).
With Stripe, Inc. ("Stripe"), our payment processor, who handles all payment transactions, subscriptions, and refunds on our behalf. When you purchase Warmly Plus, your billing details (name, email, billing address, and payment method) are collected and processed by Stripe in accordance with Stripe's Privacy Policy.
With service providers who assist in operating our Service, including cloud hosting (Supabase), email delivery (Resend), and SMS delivery providers.
With professional advisers (legal, accounting) as needed.
When required by law or to protect our rights, safety, or property.

Data Retention

We retain your personal data only for as long as necessary to provide the Service and comply with our legal obligations:

Account data: kept while your account is active and for up to 90 days after deletion to allow recovery and resolve disputes.
Card content and recipients: kept while your account is active so that you and recipients can view delivered cards. Deleted along with your account.
Billing records: retained for up to 7 years to meet tax and accounting obligations (held by us and by Stripe).
Support communications: retained for up to 3 years.
Logs and analytics: retained for up to 24 months in identifiable form, then anonymized or deleted.

International Transfers

Your personal data may be transferred to and processed in countries outside your own, including the United States and the United Kingdom, where our service providers (such as Stripe, Supabase, and Resend) operate. Where required by law, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to protect your data during these transfers.

Your Rights

You have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your account and associated data
Unsubscribe from marketing communications

Cookies and Analytics

We use essential cookies to maintain your session and preferences. We may use analytics to understand how our service is used and to improve it. You can control cookie preferences through your browser settings.

Third-Party Services

Our service integrates with third-party services including Google (for authentication), email delivery services, and cloud storage providers. These services have their own privacy policies governing their use of your data.

Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this privacy policy or our data practices, please contact Warmly Labs LLC at feedback@warmly.cards. For payment- or billing-related questions, please contact us at the email above.

Privacy Policy