Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account or otherwise interact with the Site. This may include:

• Account Information: Your name, email address, and password.
• Card Message Content: The text and image you include in the card.
• Payment Information: If you make a purchase, we use a third-party payment processor Stripe. We do not store your credit card information on our servers.

We also collect some information automatically when you visit, such as your IP address, browser type and the pages you view. We use it to run and secure the Site and keep it in server logs. If you allow Analytics & Advertising cookies, we also use analytics and advertising services; see Section 3 and Section 4, "Cookies and Similar Technologies." We never send the text or images in your cards to these services.

2. How We Use Your Information and Lawful Basis

Lawful Basis: We process your data based on Contractual Necessity (to provide the service), Legitimate Interests (to secure the platform) and your Consent (for analytics and advertising, which you can withdraw at any time through Privacy Settings).

We use the information we collect for the following purposes:

• To Provide and Maintain the Service: To store the e-cards you create and to operate and maintain the Site.
• To Improve Our Service: To analyze usage trends, and improve our card design features, and overall user experience.
• To Measure Our Advertising: With your consent, to find out whether our ads on Google and Meta (Facebook and Instagram) lead to visits, sign-ups and purchases.
• To Communicate With You: To send you service-related messages, such as account confirmations, password resets, and updates. We may also send you promotional emails about new features or offers if you have consented to receive them.
• For Security and Fraud Prevention: To protect our service and users from unauthorized access, fraud, and other illegal activities.

3. Sharing Your Information

We will not sell, rent, or trade your personal information. We may share your information with third parties only in the following limited circumstances:

• Photos you upload. We store the photos you upload privately, in our cloud storage, only to make and show your cards. They are never public on their own and never used to train AI models.
  • Holiday Photo Cards: your photos are sent to Google Gemini to design the front of your card, and are kept with your draft so we can design and show its front and back. They are deleted when you share or delete the card.
  • Standard Cards: a reference photo you add is sent to Google Gemini to create your card's artwork. It is kept with your draft and deleted when you share or delete the card.
  • Unfinished drafts: photos on a draft you haven't touched for 30 days are deleted automatically. This includes photos in drafts made without an account, which are deleted 30 days after last use.

  Photos are resized and their location data (EXIF/GPS) is removed when you upload them. Google processes them under its paid Gemini API terms, which do not use them to train its models.

• Service Providers: We may share information with third-party vendors, consultants, and other service providers who perform services on our behalf and need access to this information to carry out their work for us (e.g., our email delivery service or payment processor).
• Analytics and Advertising Partners: If you allow Analytics & Advertising cookies, Google (Google Analytics and Google Ads) and Meta Platforms (Meta Pixel) receive information about your visit. This includes pages viewed, actions such as starting a card, signing up or making a purchase (including the amount), your IP address, and browser and device details. They may use it according to their own privacy policies, including to measure and improve ads. We do not send them your name, email address or card content. If you do not consent, the Meta Pixel does not load and no analytics or advertising cookies are set. Google may still receive basic, cookie-less signals that a page was visited, which do not identify you.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or subpoena).
• To Protect Our Rights: To enforce our Terms and Conditions, or to protect the rights, property, and safety of Bebeh Cards, our users, or others.
• Recipient Information: We do not collect or store information regarding your card recipients.

4. Data Storage and Retention

Data Storage and Retention

• We use Google Cloud Platform (GCP) to provide our services globally. Your data is primarily stored in the United States. To protect your information and comply with GDPR, we rely on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCCs). All data is automatically encrypted at rest and in transit by Google's infrastructure.
• Uploaded photos are kept privately with your draft and deleted when you share or delete the card, or after 30 days without activity. Once you share a card, only the chosen design is saved.
• If you use ‘Help me design it’, the details you enter about your recipient are sent to our AI provider to suggest card ideas, and kept with your unshared card for up to 30 days without activity so you can come back to it. Your answers are deleted when you share or delete the card. An idea you choose becomes part of your card's description and design, which are kept with the card.

Third-Party Sub-processors

We share limited data with the following categories of providers:

• Cloud Infrastructure: Google Cloud Platform (Hosting and AI).
• Authentication: Google OAuth (Sign-in).
• Payments: Stripe (We do not store credit card details).
• Analytics: Google Analytics (only with your consent).
• Advertising measurement: Google Ads and Meta Pixel (only with your consent).

Retention

• We store your account information for as long as your account and bebehcards.com is active.
• Uploaded photos are kept privately with your draft and deleted when you share or delete the card, or after 30 days without activity. Once you share a card, only the chosen design is saved.
• You can delete specific cards directly from your gallery at any time. To request the complete removal of this content from our active servers, please contact support@bebehcards.com.

Cookies and Similar Technologies

• Strictly necessary: your sign-in session, security, and your cookie choice (bebehcards_cookie_consent, kept for 1 year). These are always on.
• Analytics & Advertising (optional): Google Analytics (_ga, _ga_*), Google Ads (_gcl_*) and Meta Pixel (_fbp, _fbc). These are set only if you choose Accept. You can change your choice at any time with the Privacy Settings button at the bottom of every page. If you withdraw consent, we delete these cookies from your browser.
• Server logs: our servers record IP addresses to operate and secure the Site. We keep these logs for 30 days.

5. Your Rights and Choices

You have the right to access, update, or delete your account information at any time.

• Right to Access and Portability: Request a copy of your account data.
• Right to Rectification: Update inaccurate information.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your account and all associated data.

How to exercise your rights: To delete your account or request your data, please contact support@bebehcards.com. We will respond to and fulfill all valid requests within 30 days.

6. Children's Privacy

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under this age. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date at the top. We encourage you to review this policy periodically.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at: support@bebehcards.com