Privacy Policy

1. Information We Collect

When you use Dough, we may collect the following information:

• Information you provide: Email address, payment information (processed by Stripe), gift messages, and occasion descriptions
• Voice data: If you optionally record a voice message, your audio is used solely to generate a personalized voice for your gift and is not retained beyond gift delivery
• Usage data: Pages visited, actions taken, and browser/device type for analytics and service improvement
• Gift metadata: Occasion type, gift amount, and GIF selections to improve AI recommendations

2. How We Use Your Information

We use collected information to:

• Deliver gifts and manage Dough Wallet balances
• Generate AI-powered gift messages personalized to your occasion
• Process payments and payouts through our payment partners
• Send transactional emails related to your gifts and wallet
• Improve our AI models and product experience
• Comply with legal obligations and prevent fraud

3. Information Sharing

We do not sell your personal information. We share data only with:

• Stripe: For payment processing. Subject to Stripe's Privacy Policy
• OpenAI / OpenRouter: Gift occasion descriptions are sent to generate personalized messages. No personally identifying information is included
• ElevenLabs: Voice samples you provide are sent to generate synthetic audio. Subject to ElevenLabs' privacy terms
• Klipy: Search queries for GIF content
• Law enforcement: When required by law or to protect our rights

4. Data Retention

Gift records are retained for 7 years for financial compliance purposes. Email addresses linked to Dough Wallets are retained until you request deletion. Voice samples are deleted within 30 days of gift delivery. You may request deletion of your data at any time by contacting us.

5. Cookies and Tracking

We use minimal cookies necessary for the Service to function (e.g., session state). We do not use third-party advertising trackers. We may use anonymous analytics to understand how the product is used.

6. Security

We use industry-standard security practices including encryption in transit (TLS) and at rest. Payment data is never stored on our servers — it is handled entirely by Stripe. However, no system is completely secure and we cannot guarantee absolute security.

7. Children's Privacy

Dough is not directed to children under 13. We do not knowingly collect information from children. If you believe a child has provided us information, please contact us and we will delete it.

8. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, email us at hello@doughcards.com. We will respond within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date above. Continued use of the Service constitutes acceptance of the updated policy.

10. Contact Us

Questions about privacy? Email us at hello@doughcards.com or visit our Support page.