1. Introduction
GiftCasher ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information when you use our platform.
By using GiftCasher, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Platform.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, and password when you register
- Gift Card Data: Card type, face value, card code, and optional photos you upload
- Payment Information: PayPal email address, cryptocurrency wallet addresses
- Communications: Messages you send to our support team
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on the Platform
- Device Information: IP address, browser type, operating system, device identifiers
- Transaction Data: Order history, payout amounts, wallet balances
- Cookies: Session cookies and analytics cookies (see our Cookie Policy)
3. How We Use Your Information
We use your information to:
- Create and manage your account
- Process gift card submissions and verify card balances
- Calculate and deliver payouts to your wallet
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations and anti-money laundering (AML) requirements
- Communicate important account updates and transaction notifications
- Improve the Platform through analytics and usage research
- Respond to customer support inquiries
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your data under:
- Contract performance: To fulfill our service to you
- Legal obligation: KYC/AML compliance
- Legitimate interests: Fraud prevention, platform security
- Consent: Marketing communications (where applicable)
5. How We Share Your Information
We do not sell your personal information. We may share your data with:
- Service Providers: Supabase (database hosting), cloud storage providers, and analytics services — bound by data processing agreements
- Payment Processors: When processing withdrawals via PayPal or cryptocurrency networks
- Law Enforcement: When required by law, court order, or to protect rights and safety
- Fraud Prevention Partners: To investigate and prevent fraudulent activity
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. Transaction records are retained for a minimum of 5 years to comply with financial regulations. You may request deletion of your account; however, certain data may be retained for legal compliance purposes.
7. Data Security
We implement industry-standard security measures including:
- TLS/HTTPS encryption for all data in transit
- Encrypted storage of sensitive information
- Row-Level Security (RLS) to ensure users only access their own data
- Regular security audits and access controls
- Hashed passwords — we never store plain-text passwords
No system is 100% secure. In the event of a breach affecting your data, we will notify you as required by applicable law.
8. Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data ("right to be forgotten")
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdrawal of Consent: Withdraw consent for marketing communications at any time
To exercise any of these rights, contact us at privacy@giftcasher.com. We will respond within 30 days.
9. Children's Privacy
GiftCasher is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we discover that a minor has created an account, we will promptly delete the account and associated data.
10. International Transfers
Your information may be transferred to and processed in countries outside your jurisdiction. When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities.
11. Third-Party Links
Our Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal information.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by email or by posting a notice on the Platform. Your continued use after changes are posted constitutes acceptance.
13. Contact Us
For privacy-related inquiries, contact our Data Protection Officer at: privacy@giftcasher.com