Privacy Policy

1. Data we collect

Account data: name, email, phone number, country, password (hashed), Google/Apple sign-in identifiers. Verification data: government ID documents, only when required by our AML/KYC Policy. Transaction data: orders, cards submitted for sale, wallet ledger, withdrawal details (crypto addresses, bank details), blockchain transaction IDs. Technical data: IP address, device and browser information, cookies, activity logs. Communications: support messages and dispute records.

2. Why we use it

To provide the service (deliver codes, process sales and withdrawals), prevent fraud and abuse, comply with legal obligations (AML/KYC, tax, sanctions screening), secure accounts, and respond to support requests.

3. Sharing

We share data only with payment and blockchain infrastructure providers, SMS and email providers, identity verification providers, banking and payout partners, professional advisers, and authorities where legally required. We never sell personal data.

4. Retention

Account and transaction records are retained while your account is active and thereafter as required by anti-money-laundering and tax laws (typically 5–8 years). Fraud-related records may be retained longer to protect the Platform and its users.

5. Security

TLS encryption in transit; gift card codes encrypted at rest with AES-256; hashed passwords; access controls and audit logging on all sensitive data.

6. Your rights

Depending on your location: access, correction, deletion (subject to legal retention), portability, and objection. Requests: support@giftinzo.com.

7. Cookies

We use essential cookies for sessions and security. Analytics, if enabled, is anonymized.

8. International transfers & children

Data may be processed in countries other than yours with appropriate safeguards. The Platform is not for anyone under 18; accounts of minors are deleted when identified.