Privacy Policy

Last Updated: January 2026

Overview

FishJump, Inc. ("we," "us," or "our") operates thoughtfully.cards, an AI-assisted greeting card service. This Privacy Policy explains how we collect, use, and protect your personal information.

Information We Collect

Information You Provide

• Account Information: Name and email address (via Google sign-in)

• Contact Information: Names, mailing addresses, phone numbers, and email addresses of people you want to send cards to

• Event Information: Birthdays, anniversaries, and other occasions you track

• Payment Information: Payment details processed securely by Stripe (we do not store your full card number)

• Communication Preferences: Your notification settings for email and SMS

Information Collected Automatically

• Usage Data: Pages visited, features used, and interactions with our service

• Device Information: Browser type, operating system, and IP address

• Cookies: We use essential cookies to keep you signed in and remember your preferences

How We Use Your Information

We use your information to:

• Send greeting cards on your behalf to your designated recipients

• Process payments for card orders

• Send you notifications about upcoming occasions and card delivery status

• Improve our service and develop new features

• Respond to your questions and support requests

• Comply with legal obligations

Third-Party Services

We share information with trusted third parties who help us operate our service:

| Service | Purpose | Data Shared |

|---------|---------|-------------|

| Stripe | Payment processing | Payment details, billing address |

| Handwrytten | Card printing and mailing | Recipient names, addresses, card messages |

| Google | Authentication | Email address, name |

| Twilio | SMS notifications | Your phone number |

| Resend | Email notifications | Your email address |

| Supabase | Database hosting | All account and contact data (encrypted) |

These services have their own privacy policies and are contractually obligated to protect your data.

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we need to retain it for legal or accounting purposes.

Your Rights

You have the right to:

• Access your personal data

• Correct inaccurate information

• Delete your account and associated data

• Export your contact and event data

• Opt out of marketing communications

To exercise these rights, contact us at support@thoughtfully.cards.

Data Security

We protect your data using:

• Encrypted connections (HTTPS) for all data transmission

• Secure, encrypted database storage

• Limited employee access to personal data

• Regular security reviews

Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through our service.

Contact Us

Questions about this Privacy Policy? Contact us at:

• Email: support@thoughtfully.cards

California Residents

Under the California Consumer Privacy Act (CCPA), California residents have additional rights including the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell your personal information.