Privacy Policy
This explains what Enclosed collects when you make or open a card, what we do with it, and who else touches it. Short version: we collect what it takes to make and host your card, we don't sell it, and you can ask us to delete it.
What we collect
- Card content: the names, message, photos, captions and gift details you put in a card.
- Reference photos for AI scenes: sent to the image model to make the scene, then discarded. We store the generated scene, not the references.
- Payment details: handled by Stripe. We receive your email address and a payment confirmation, never your full card number.
- Technical data: your IP address (stored only as a one-way hash for abuse limits), browser type, and basic request logs kept by our hosting provider.
- Nothing more. We don't run advertising trackers and we don't require an account.
How we use it
- To build your card, host it at its link, and show it to whoever opens the link.
- To generate the AI scenes and caption suggestions you ask for.
- To take payment and send you a receipt.
- To prevent abuse, such as limiting how many AI scenes one network can make in a day.
- To answer your emails.
Who else sees it
We use a small number of service providers, each only for the job named:
- Stripe, for payments.
- OpenAI, to generate AI scenes and caption suggestions from the photos and text you submit. Data sent through OpenAI's API is not used to train their models.
- Supabase, to store cards and photos, and Vercel, to run the website. Both are hosted in the United States.
- A gift-card provider, if you choose a gift we sell, to issue the gift.
We don't sell your data and we don't share it with anyone else, unless the law requires it.
Recipients
If someone sends you a card, the sender chose what goes in it. We hold that content on their behalf. If a card about you contains something you want removed, email us and we'll help.
How long we keep it
Cards and their photos stay online so recipients can revisit them, until you ask us to delete them or we retire old, unopened cards with notice on the site. Reference photos for AI scenes are not kept. Payment records are kept as long as tax and accounting rules require.
Your choices
To delete a card, its photos, or anything else we hold about you, email hello@enclosedgifts.com with the card link. We'll confirm when it's done. You can also ask us what we hold about you.
The site uses browser storage on your own device to remember drafts and reference photos while you build a card. Clearing your browser data removes it.
Children
The service is for adults. We don't knowingly collect information from children under 13, and cards must not be made by them.
Changes
We'll update this page when our practices change and update the date at the top.
Contact
Privacy questions or deletion requests: hello@enclosedgifts.com.