Privacy Policy

WishPort ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and related services (collectively, the "Service"). Please read this policy carefully.

1. Information We Collect

1.1 Information You Provide

• Account information: Name, email address, and password when you create an account
• Profile information: Optional profile photo, display name, and locale preference
• Wishlist content: Wishlist names, descriptions, wish items, product URLs, images, prices, and notes
• Communications: Messages you send to us through the contact form or support channels
• Gift exchange data: Exchange names, participant information, budget preferences, and assignments

1.2 Information Collected Automatically

• Usage data: Pages visited, features used, actions taken, and time spent on the Service
• Device information: Browser type, operating system, device type, and screen resolution
• Log data: IP address, access times, referring URLs, and error logs
• Cookies: Essential cookies for authentication and session management (see Section 6)

1.3 Information from Third Parties

• Product data: When you add a wish via URL, we automatically extract publicly available product information (title, description, images, price) from third-party websites. This data is associated with your wishlist.
• Social login: If you sign in using a social provider (Google, Apple, Facebook), we receive your name and email address from that provider. We do not access your contacts, posts, or other social data.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Display your wishlists according to your privacy settings
• Process gift reservations and notify relevant parties
• Track product prices and send price drop notifications
• Organize and manage gift exchange events
• Send important service notifications (security alerts, policy changes)
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve the Service and fix bugs
• Prevent fraud, abuse, and unauthorized access

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We share your data only in the following circumstances:

• With your consent: When you set a wishlist to "Shared" or "Public," the wishlist content becomes visible to others according to your settings
• Reservation privacy: When someone reserves a gift on your wishlist, the reservation is hidden from you (the wishlist owner) to preserve the surprise. The reserving user's identity is never shared with the owner.
• Service providers: We may share data with trusted third-party services that help us operate the Service (hosting, email delivery, analytics), subject to confidentiality agreements
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights, safety, or property of WishPort, our users, or the public
• Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained until you delete your account
• Wishlist and wish data: Retained until you delete the item or your account
• Price history: Retained for up to 12 months for tracking purposes
• Server logs: Retained for up to 90 days for security and debugging
• Deleted accounts: All personal data is permanently deleted within 30 days of account deletion

5. Data Security

We implement industry-standard security measures to protect your data:

• All data is transmitted over HTTPS (TLS 1.2+)
• Passwords are hashed using bcrypt with salting
• Authentication uses JWT tokens with short expiration times
• Database access is restricted and encrypted at rest
• Regular security audits and dependency vulnerability scanning

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Cookies and Tracking

WishPort uses only essential cookies required for the Service to function:

• Authentication cookies: To keep you signed in and maintain your session
• Preference cookies: To remember your language and display preferences

We do not use third-party tracking cookies, advertising cookies, or analytics cookies that track you across other websites. We do not participate in ad networks or sell data to advertisers.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate personal data via your account settings
• Deletion: Delete your account and all associated data at any time from Settings
• Export: Request a machine-readable export of your data
• Restriction: Request that we limit the processing of your personal data
• Objection: Object to processing of your personal data for specific purposes
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, visit your account settings or contact us. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will take steps to delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us.

9. International Data Transfers

Your information may be stored and processed in countries other than your country of residence. By using the Service, you consent to the transfer of your data to these countries, which may have different data protection laws. We take appropriate safeguards to ensure your data remains protected.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page and notify you through the Service or by email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please visit our Contact page.