Privacy Policy

How we collect, use, and protect your personal information.

Last updated: 2026-10-03

GiftMaker.ai is operated by AI Cube, LLC, United States.

Business address: 2810 N Church St STE 88565, Wilmington, DE 19802, US.

Introduction

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.

Information We Collect

We collect the following types of information to provide and improve our service:

Account Information — Your name, email address, and other details you provide when creating an account. Signup records may also include the connection address, language and referral source for account operation and abuse prevention.
Usage Data — Information about how you interact with the service, including features accessed, frequency of use, and interaction patterns.
Device Information — Device type, operating system, and browser type, used to optimize compatibility and performance.
Cookies — Small data files stored on your device to remember preferences and improve your experience.
Photos and Gift Content — Photos you upload, generated artwork, recipient details and messages you choose to provide. Original uploads are stored to support creation and retries; they are not available through the public file endpoint.
Delivery Details — Recipient name, postal address and order details when you order a physical gift.
Payment Information — Billing details handled by trusted third-party payment processors. We do not store full card numbers on our servers.

How We Use Your Information

We use the data we collect to:

Provide, maintain, and improve the service.
Process transactions and send related confirmations.
Send technical notices, security alerts, and support messages.
Respond to your questions, feedback, and support requests.
Detect, prevent, and address fraud and abuse.

GiftMaker.ai sends uploaded images and the relevant gift details to the AI services used for image generation, moderation and optional message drafting. The current integration uses OpenRouter with Google Gemini models for gift generation, safety checks and optional message drafting. Uploaded photos used for AI operations and the relevant prompts are sent to those providers; choosing the original-photo flow avoids AI restyling, but still uses a safety check. These services process the content needed to fulfil your request.

Saved artwork and source photos do not currently have an automatic expiry. They remain in storage for saved gifts and retries, unless removed through a support request or operational maintenance. Replacing artwork may remove superseded files; print-order snapshots are retained for fulfilment. Please download unlocked images you want to keep.

Watermarked previews are accessible to anyone with their image URL. Original-resolution artwork requires owner access, except when you explicitly create a gift link. Anyone with that link can view the selected artwork, message and giver name. Share links only with people you intend to receive them.

A guest cookie links your browser to its preview. To limit abuse, we also store a daily keyed hash derived from the connection address supplied by our reverse proxy. The quota record does not store the raw address.

We do not sell your personal information. We may share data only in these limited cases:

With service providers who help us operate the service, as needed to provide the requested service.
To comply with legal obligations or respond to lawful requests from public authorities.
To protect our rights, property, or safety, or that of our users.

Data Security

We implement industry-standard security measures including encryption in transit, access controls, and regular reviews. No method of transmission over the Internet is 100% secure, but we work continuously to protect your information.

Your Rights

You have the right to access, update, export, or delete your personal information. Use account settings to update available profile details. For access, export or deletion requests, email support@giftmaker.ai, without needing to sign in.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service.

Contact Us

If you have questions about this Privacy Policy, email support@giftmaker.ai.

Providers, essential storage and retention

Cloudflare R2 stores encrypted gift assets where configured; our application also uses private server storage. Stripe processes payments when checkout is enabled. Transactional email is sent through the configured Cloudflare Email Service or Resend provider. A print fulfilment provider receives the artwork and delivery details needed to produce and ship your order. These providers may process data outside your country.

We use account/session cookies for authentication, a guest cookie for preview ownership and abuse prevention, and browser storage for your Studio draft and preferences. Draft images may be stored in your browser's IndexedDB. Clearing browser storage removes those local drafts. We do not currently load third-party advertising or analytics scripts.

Photos may contain faces, but GiftMaker does not build a facial-identification database. Only upload another person's photo with permission, including a parent or guardian's permission for a child. Contact us if a child's data has been uploaded without appropriate permission.

Saved designs currently remain available until removed through support or operational maintenance. Order and payment records may need to be retained for fulfilment, dispute handling or legal obligations. Backups are separate from live storage and may retain removed records until the backup rotation completes. We cannot promise immediate removal from every backup. Ask us about your specific access, export or deletion request by email.

Server backups are hosted separately on Hetzner Storage Box. Backup access is restricted to operational recovery. Contact support for the retention and deletion status of a particular record.

We use Cloudflare Turnstile to protect registration and gift creation against automated abuse. The check sends browser and connection information to Cloudflare for security verification. Our Turnstile verification request does not send your uploaded photos, gift designs or passwords. Learn more in Cloudflare’s privacy policy.