Privacy Policy

WISHLane ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at wishlane.com. Please read this policy carefully. If you disagree with its terms, please discontinue use of the site.

1. Information We Collect

• Account information — When you register, we collect your name, email address, and optionally your phone number and profile photo.
• Wish content — Any wishes, descriptions, images, and updates you publish on the platform.
• Payment information — Donations and item purchases are processed by Stripe. We do not store your full card number, CVV, or billing address. Stripe's privacy policy governs payment data.
• Usage data — We may collect browser type, IP address, pages visited, and referring URLs to improve the service.
• Communications — If you contact us, we retain your messages to resolve your enquiry.

2. How We Use Your Information

• To create and manage your account.
• To display your wishes to other users and process donations.
• To send transactional emails (OTP codes, donation receipts, wish updates).
• To send SMS notifications if you provide a phone number and opt in.
• To enforce our Terms of Service and prevent fraud or abuse.
• To comply with applicable laws and legal obligations.

3. Sharing of Information

• We do not sell your personal data. We may share it with:
• Stripe — for payment processing.
• Resend — to deliver transactional emails.
• Twilio — to deliver SMS messages if you opt in.
• Law enforcement — if required by valid legal process.
• We require all third-party service providers to protect your data in a manner consistent with this policy.

4. Cookies and Tracking

• We use session cookies to keep you signed in (via NextAuth.js). We do not use third-party advertising trackers.
• You may disable cookies in your browser settings, but some features (such as staying signed in) will not function without them.

5. Data Retention

• We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where we are required by law to retain it longer.
• Donated transaction records may be retained for up to 7 years for tax and accounting purposes.

6. Security

• We use industry-standard safeguards including encrypted HTTPS connections, hashed passwords (bcrypt), and short-lived authentication tokens. However, no method of transmission over the internet is 100% secure.
• You are responsible for keeping your account credentials confidential.

7. Children's Privacy

• WISHLane is intended for adults. You must be at least 18 years old to use the platform, and it is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.

8. Your Rights

• Depending on your location, you may have rights under applicable data protection laws (such as GDPR or CCPA) including:
• The right to access the personal data we hold about you.
• The right to correct inaccurate data.
• The right to request deletion of your data.
• The right to object to or restrict certain processing.
• To exercise any of these rights, please contact us at the address below.

9. Third-Party Links

• Our platform may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. Changes to This Policy

• We may update this Privacy Policy from time to time. We will notify registered users by email of material changes. Continued use of WISHLane after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us

• If you have any questions about this Privacy Policy, please contact us:
• 📧 Email: privacy@wishlane.com
• Or use our Contact page.