Privacy policy

Data controller

Elyes Ben Salem, sole trader, 50 Chemin des Grouettes, 95220 Herblay-sur-Seine, France — site.gratify@gmail.com.

What data is collected

• The information entered to personalize a gift: first names, story, message, and depending on the gift, photos or the date/location of an event.
• The recipient’s email address, only if you choose to send the gift by email.
• Payment information (processed directly by Stripe — Sweetly never has access to your card number).

Why this data is collected

Only to create and deliver the gift ordered, process payment, and — if requested — schedule the email send. No data is used for advertising purposes or resold to third parties.

Who processes this data

These technical providers (processors under the GDPR) act on Sweetly’s behalf:

• Stripe — payment processing.
• Supabase — hosting of the orders database.
• Anthropic — generating the text for certain gifts (letter, poem, book of reasons) from the information you provide.
• Resend — sending emails, if you schedule the gift’s delivery.
• Vercel — hosting of the site.

Retention period

Data linked to an order is kept for as long as needed to deliver the gift, then archived for the legal retention period for commercial and accounting documents.

Your rights

Under the GDPR, you have the right to access, rectify, erase, and object to the processing of your data. To exercise it, write to site.gratify@gmail.com. You may also file a complaint with the French data protection authority, the CNIL (cnil.fr).

Cookies

Sweetly doesn’t use any audience-measurement or advertising cookies. Stripe may set its own technical cookies during payment, on its own page.

Security

Orders containing personal data are stored with restricted access (no public read access possible), and payment is handled entirely by Stripe, which meets banking-industry security standards.