Privacy policy

Information we collect

Senders provide recipient names and contact details, gift, card, or message selections, messages, sender names, visibility preferences, and receipt email addresses. Recipients may provide their name, delivery address, delivery instructions, and a phone number when needed for fulfillment. We also record invitation responses, consent timestamps, order status, and payment references.

If you create an account, the service processes account and authentication information. Hosting and service providers may process device, browser, network, and usage information needed to operate and protect the service.

How information is used

Information is used to create and manage gifts, cards, and messages, deliver invitations, process payments, coordinate recipient acceptance and delivery, provide status updates, respond to problems, and prevent abuse. Recipient contact information supplied by a sender is not itself permission to enroll that recipient in marketing.

Recipient delivery details

The intended service design keeps delivery addresses out of sender-facing order views. Authorized operational staff and fulfillment providers may need access to delivery information. Access controls must be validated before launch; this draft does not certify that the current test application meets all privacy or security requirements.

Claim links grant access to a specific invitation. Keep them private and do not post or forward them to people who are not the intended recipient.

Optional writing assistance

When you choose Create a draft in Help me write, the ideas you submit are processed by Base44’s AI service to suggest wording. Include only information you want processed for that purpose. Recipient contact fields are not automatically included in writing requests. Voice input uses your browser’s speech service, which may process audio. You can review and edit the suggestion before choosing Use this message; generating a draft does not send a gift or message.

Service providers and disclosures

Thoughtsent uses Base44 for application infrastructure and Stripe for payment processing. Communications may be processed through Twilio and configured email delivery services. The planned flower collection is fulfilled through manual 1-800-Flowers orders. Authorized Thoughtsent staff and 1-800-Flowers receive the recipient details needed to arrange and support delivery after acceptance; the sender does not receive the delivery address. Other gift and card providers receive relevant details when their services are enabled.

Payment card details entered at Stripe checkout are processed by Stripe rather than stored in Thoughtsent order records. Information may also be disclosed where legally required or reasonably necessary to protect users, investigate abuse, or resolve a transaction dispute. Provider processing may occur outside your country.

Website measurement

We use Base44 analytics to understand visits, writing-helper use, steps in the sending flow, and checkout confirmations. Our custom event properties use page categories and broad referral sources, not your message text, recipient names, contact details, delivery addresses, or payment information. The platform may also process device and session information. These custom events respect browser Do Not Track and Global Privacy Control signals.

Storage and retention

The sender flow and public thank-you writer store drafts in your browser session so you can continue writing and move through checkout. Authentication uses browser storage to maintain sessions. Clearing browser storage may remove an unfinished draft.

Order, delivery, communication, and account records may need to be retained for fulfillment, support, fraud prevention, accounting, or legal requirements. A documented retention and deletion schedule must be finalized before launch; claim expiration does not automatically mean the underlying records have been deleted.

Your choices and rights

You may decline a gift or card without providing a delivery address. Depending on your location, you may have rights to request access, correction, deletion, or limits on processing, subject to identity verification and lawful exceptions. A monitored privacy contact and request process must be supplied before this policy becomes final.

Children and sensitive information

Do not include payment card numbers, government identifiers, medical records, or other unnecessary sensitive information in messages or delivery notes. The proposed service is for adults; age eligibility and any legally required protections must be confirmed before launch.

Policy updates and contact

Material changes will be reflected in the published policy and its effective date. The operating legal entity, business address, and privacy contact are not yet confirmed and must be added to the final policy.