Gia’s Giraffes, operated by Boggs Holdings LLC, helps people send gifts with just an email address or a link. This policy explains what we collect from senders and recipients, why, and the choices you have. The short version: we use your information to deliver gifts, we keep recipients’ addresses private, and we never sell personal information.
1.Who we are and what this covers
Gia’s Giraffes is a gifting service operated by Boggs Holdings LLC (“Gia’s Giraffes,” “we,” “us”). You can reach us at hello@giasgiraffes.com.
This policy covers every part of Gia’s Giraffes:
- our website at giasgiraffes.com;
- the signed-in app used by people who send gifts (“senders”);
- gift pages that people receiving a gift (“recipients”) open to accept it; and
- GG Links, which let a sender share a gift or booking link that anyone with the link can open.
It explains what information we collect, how we use it, who we share it with and the choices you have. Our Terms of Service govern your use of the service.
2.Information we collect from senders
- Account information: your name, email address, and, if you add them, your phone number, company and profile picture.
- Billing information: your plan, subscription status and payment history. Card payments are processed by Stripe (for Pro subscriptions and gifts; see Payments & security). We never receive or store your full card number or security code; we only see limited details such as card brand, last four digits and expiry date.
- Contacts you add or import: names, email addresses, phone numbers, companies, job titles, birthdays, anniversaries and notes for the people you send gifts to, whether you type them in, upload a CSV or vCard file, or import them from a connected service.
- Gifts, messages and notes: the gifts you send, notes you write, occasions you tag, budgets you set and your GG Link settings.
- Usage data: pages you visit in the app, actions you take, device and browser type, IP address and timestamps, which we use to run, secure and improve the service.
3.Information about gift recipients
When someone sends you a gift, we handle the following information about you:
- Provided by the sender: your name and, depending on how they deliver the gift, your email address or mobile number, so we can deliver the gift link (by text only after you reply YES; see Text messages), and any note they write to you.
- Provided by you: the shipping address you enter when you accept a gift, the gift you choose, any thank-you note you send back, and, if you choose to share it, your birthday.
- Gift page activity: whether you opened the gift and which step you reached, which we show to the sender so they know the gift arrived.
Your address stays private
By default, the address you enter goes only to the brand that ships your gift (through our Shopify store) so it can be delivered. We do not show your address to the sender unless you explicitly agree to share it. We don’t put your email address on the shipping order, and you never see what the sender spent.
4.Video messages
If you add a video message to a gift, or send a thank-you video back, we collect the video and its audio, an automatically generated transcript used for captions, basic details such as its length and when it was made, and the consent wording you agreed to with the time you agreed. For a thank-you video we also keep a one-way hash of the network address it came from, to limit abuse.
We use them only to show the video to the people it was sent to, to show captions, and to keep the service safe (automated checks and, when needed, review by a person).
- No face or voice recognition. We don’t use face recognition, face scans or voiceprints, and we don’t use your video to identify you or anyone in it. Captions turn speech into text; they don’t recognize who is speaking.
- No advertising or AI training by us. We don’t use your video for advertising, and we don’t use it to train AI models.
- Our video provider. Mux hosts and processes videos for us. Mux uses other companies for captions and automated checks; they’re named in Mux’s list of sub-processors. Mux doesn’t run face detection or measure face geometry on our videos, and its contracts bar those companies from training AI on Mux data. Mux’s terms let it use data to improve its own AI models only if that data contains no personal information or has been anonymized.
Recipients can report a video. A reported video, or one the automated check flags, is hidden right away while a person on our team reviews it.
How long we keep it. Videos are deleted on the schedule in our Terms (“Video messages”): 90 days after the gift is accepted or expires (sooner if the sender deletes the video or the gift is cancelled), and after 24 hours if never used. Moderation records (the automated check’s scores, reports, the decision and who made it, but not the video) are kept for 12 months after the decision. If we report a video to NCMEC, we keep the video and related records securely for 1 year after the report, as US law requires, and longer only if law enforcement asks us to or a legal claim needs them.
Video messages must not include anyone under 18 without their parent’s or guardian’s permission. If we learn a video breaks this rule, we remove it.
5.Text messages
We send transactional text messages, never marketing texts. You get them only after you agree for your own mobile number, in one of two ways: by ticking an unchecked box (senders with “Text me gift updates” when they sign up or in Settings, recipients with “Text me updates about my gift” on the gift page), or by replying YES to the one consent request we send when a sender asks us to text you a gift (below). That consent request is the only text we send to a number someone else gave us before the person with that number says yes. We never text a gift link to a number someone else gave us unless that person replies YES first.
If a sender chooses “Text from my phone”, the text comes from the sender’s own phone, not from our number: we only prepare the message and link for them to send.
Gift links a sender asks us to text you
A signed-in sender can choose “Text from Gia’s Giraffes” to have us text you their gift from our number, using a mobile number they give us (typed in, or from their own contacts). For each number, they must tick an unchecked box confirming “I know this person and they’d expect to hear from me.” We store that confirmation for that sender and that number: the sender’s account, the number, the time and the exact wording. It covers only that number, and the sender can withdraw it in Settings. Without it we send no text to the number for that sender. Your number comes from the sender and is their information about you: we use it only to ask you about that gift and, if you say yes, to text you about that gift. We keep it with that gift and never add it to a marketing list.
First we send you one text asking whether you’d like it by text. It has no link and no price, and doesn’t say what the gift is: “Gia’s Giraffes: [sender’s first name] sent you a gift! Reply YES to receive gift texts, or STOP to opt out. Msg & data rates may apply.”
Only if you reply YES (or Y) do we text you the gift link: “[Sender’s name] sent you a gift from Gia’s Giraffes: [link]. Reply STOP to opt out.” Your YES also covers texts about that one gift: when it’s confirmed, shipped and delivered. When you reply YES we keep your reply, its time, the request it answered and the exact wording of that request as proof of consent.
If you reply NO (or N) or STOP, or don’t reply, we send nothing more about that gift: no reminder text and no second request for it. The gift can still reach you another way (by email, if the sender chose it, or a link the sender shares).
- Both texts go only between 8am and 9pm your local time (we go by your number’s area code; if we can’t tell from it, we use Pacific time or the sender’s time zone). One that would fall at night waits until morning.
- At most one such request goes to a number every 30 days, across all senders, and never more than one for the same gift. We check and record each request in a single step, so two senders at the same moment can’t both send one.
- Each sender can cause at most 10 such requests in any 24 hours (including ones waiting for morning). After that, the option isn’t available to them until the 24 hours have passed, and their gifts go by email or a link instead.
- We never send one to a number that has replied STOP.
- A YES covers only that gift. It doesn’t sign you up for texts about other gifts or for anything else; you can opt in to gift updates yourself on a gift page.
- Replying STOP blocks every text from our number to you, whoever the sender is, until you reply START.
This option is rolling out gradually and may not be available yet.
Sending gifts by text
If you have an account, you can turn on “Send gifts by texting Gia’s Giraffes” in Settings. It starts unchecked. To turn it on you enter your own mobile number and the one-time 6-digit code we text to it (it expires in 10 minutes); we keep the exact wording you agreed to, the time, the page, your IP address and the code check as proof of consent. A number can be on one account only. We ask you to confirm your number again every 6 months, and the option pauses until you do.
Then you can text our number what you’d like to send, like “Send Sarah a $50 thank-you gift”. We reply only to your verified number, and only to texts you send us: we may ask up to two short questions, and we always text back a summary first; nothing is sent until you reply SEND (SKIP cancels it, and an unanswered summary expires after 30 minutes). If it’s not clear, or it’s over the limits for gifts by text, we text you a one-time link to finish it in the app instead. Reply STATUS for your last gifts.
To read your texts and fill in the gift, we send the text of the messages you send us, and nothing else (not your number), to an AI service, Anthropic, only to process them. Its answer is only a suggestion: we check every detail, and the people, amounts and limits always come from your account. We keep your texts and our replies with your account, like your other gift records.
- Reply STOP to turn it off (and stop all texts from our number); START doesn’t turn it back on; you do that in Settings with a new code. Unticking it in Settings, or changing the number, turns it off too.
- Reply HELP for help. Message and data rates may apply; message frequency depends on how many texts you send us.
- The people you send gifts to are never texted by this option itself; a gift texted to them follows the rules above.
This option is rolling out gradually and may not be available yet.
Senders get texts about their gifts (accepted, shipped, delivered, a thank-you, a declined card). Recipients get texts about that one gift (confirmed, shipped, delivered) after they tick the box on the gift page or reply YES. When you opt in by ticking a box we keep a record of your number, the time, the page, your IP address and the exact wording you agreed to as proof of consent. Texts are sent through Telnyx.
- Message frequency varies with your gifts (usually a few texts per gift). Message and data rates may apply.
- Reply STOP (or UNSUBSCRIBE, CANCEL, END or QUIT) to stop all texts from us; you’ll get no more texts unless you opt in again or reply START. You can also untick the box in Settings.
- Reply HELP for help, or email hello@giasgiraffes.com.
- Texts come from our toll-free number, (866) 830-0008, only between 8am and 9pm your local time. The only exceptions are instant answers to a text you send us (HELP, STOP or START, or a Text-to-Gift message), a code you ask for in Settings, and the confirmation right after you opt in.
- Carriers aren’t liable for delayed or undelivered messages.
We do not sell, rent or share mobile phone numbers or SMS opt-in data and consent with third parties or affiliates for their marketing or promotional purposes. Your number and consent are used only to send the texts described in this section. Apart from the providers that host our app and database for us, the only service that receives them is our SMS provider, Telnyx, to deliver those texts. A number a sender gives us is never shared with the brand that ships the gift. (With “Sending gifts by text”, Anthropic receives only the text of the messages you send us, never your number or consent, only to process them.) Nothing in the other sections of this policy permits sharing text-messaging opt-in data or consent.
6.Google and Microsoft account data
Google sign-in
If you sign in with Google, we receive your name, email address and profile picture from your Google account. We use them only to create your Gia’s Giraffes account and sign you in. We don’t request access to your Gmail, Drive or other Google data for sign-in.
Connected Google and Microsoft accounts (Pro)
If you choose to connect your Google account (Google Contacts and Google Calendar) or your Microsoft account (Outlook contacts and calendar, from a work, school or personal account), we use that access only for these features:
- Contacts: we read your contacts so you can import the people you choose as gift recipients, with their names, email addresses, phone numbers, companies, and occasions such as birthdays and anniversaries.
- Calendar events: we read your calendar events to show your meetings in Gia’s Giraffes, who attended, and thank-you gift suggestions, and to trigger the meeting-booked gifts you set up (for example, a gift that unlocks when a meeting with a contact is booked or held). We keep only what those features use: the title, time, location or join link, organizer and attendees, plus a short plain-text description for Google events (we don’t receive the body of Microsoft events), for the past 7 days and next 30. When you look at other dates, we read them from Google or Microsoft at that moment and don’t store them.
Our access is read-only. We never create, change or delete contacts, calendar events or anything else in your Google or Microsoft account, and we don’t access your email, files or other data, except for the limited email information the Gmail add-on uses, described below.
We never sell this data or share it with anyone. It is stored only in our own database (hosted by our infrastructure providers, which process it on our behalf) and used only to provide the features above to you.
You can disconnect at any time, from Settings → Integrations in Gia’s Giraffes or from your Google or Microsoft account’s security settings. When you disconnect, we stop accessing the account and delete the contacts and calendar events we synced from it. For Google we also revoke our access; Microsoft doesn’t offer a way for us to revoke it, so we delete our stored access so it can never be used again, and you can remove Gia’s Giraffes yourself at myapps.microsoft.com (work or school accounts) or account.live.com/consent/Manage (personal accounts).
Gmail add-on (Pro)
If you install the Gia’s Giraffes add-on for Gmail and connect it to your account, it uses only:
- The email you have open: the sender’s and recipients’ names and email addresses (the From, To and Cc lines), and only while the add-on is showing that email. We use them to show whether the person is one of your contacts and the gifts you’ve sent them, and to fill in “Send a gift”. We never read the subject, body or attachments, or any other email, and we don’t store these addresses.
- The email you’re writing: its recipients’ addresses, so the add-on knows who a GG Link is for. When you click Insert GG Link, the add-on adds that link to your draft. It never sends email for you and never changes anything else in Gmail.
- Your Google account’s email address and account ID, stored to remember which Gmail account you connected to your Gia’s Giraffes account.
You can disconnect the add-on at any time from the add-on itself or from Settings → Developers → AI tools in Gia’s Giraffes, and remove it from Gmail in Gmail’s settings or your Google Account’s third-party connections. When you disconnect, we delete the stored link to your Google account.
Google API Services User Data Policy (Limited Use)
Gia’s Giraffes’ use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We do not sell Google user data.
- We do not use Google user data for advertising, including targeted or personalized ads.
- We do not use Google user data to develop, improve or train artificial intelligence or machine learning models.
- People at Gia’s Giraffes do not read Google user data, except with your explicit consent (for example, when you ask us for support), when needed for security purposes such as investigating abuse, or when required by law.
- We transfer Google user data only as needed to provide the features above, for security, or to comply with law.
We apply the same commitments to data from Microsoft accounts.
7.CRM and other connected services
When CRM connections (HubSpot, Salesforce, Pipedrive) are available and you choose to connect one, we read and write data in that service only to sync the gift activity you set up: for example, importing the contacts you select and logging gifts sent, opened, accepted and delivered on the matching contact or deal. We apply the same rules as for Google data: we don’t sell it, use it for ads or use it to train AI models, and people only access it with your consent, for security, or when the law requires.
You can disconnect a service at any time, and we stop syncing when you do.
Slack
When you add Gia’s Giraffes to a Slack workspace, Slack shares with us the workspace’s id and name, the channel you picked (its id and name), a link we use to post to that channel, and an access token for the app. We keep the link and the token encrypted. When someone uses /gift, we look up that one Slack user’s name and email so we can match them to their Gia’s Giraffes account, and we remember the match so the next /gift is quick.
We use this only to post the gift activity you chose to that one channel and to send gifts you ask for with /gift. We don’t read messages or channels, we don’t send direct messages, and we never email or message anyone because they’re in your Slack workspace.
We keep a 30-day history of what we posted, so you can see that posts were delivered. When you disconnect Slack in Gia’s Giraffes, or remove the app from your Slack workspace, we delete the workspace’s link, token, the remembered /gift users and the post history right away.
Calendly and Cal.com
When you connect Calendly or Cal.com so recipients can book a meeting to claim a gift, we store your access (an encrypted token or API key) and a webhook we create on your account. Calendly or Cal.com then tells us about new, canceled and rescheduled bookings on your account. We use only the ones made through your gifts’ scheduling links (who booked, when, and whether it was canceled or rescheduled) to release the gift once the meeting is booked, and ignore the rest. When you disconnect, we delete the webhook and the stored access.
8.How we use information
- to provide the service: create accounts, deliver gift links, let recipients choose and accept gifts, and have gifts shipped;
- to process subscription and gift payments and keep accurate records of every charge and refund;
- to send transactional messages, such as gift notifications, reminders, delivery updates and receipts;
- to show senders gift status and, for GG Links, booking and claim activity;
- to provide support and respond to your requests;
- to keep the service secure and prevent spam, fraud and abuse; and
- to understand how the service is used so we can improve it.
We do not sell your personal information, and we don’t share it with third parties for their own advertising.
9.Service providers we share data with
We share information only with providers that help us run Gia’s Giraffes, and only as needed for that work:
- Supabase: database and account authentication.
- Vercel: website and app hosting.
- Stripe: Pro subscription billing and gift payments (the sender’s card is saved when they send and charged only when the gift is accepted).
- Shopify and our partner brands: order processing and shipping. Brands receive the recipient’s name and shipping address to fulfil the gift.
- Resend: sending email.
- Telnyx: sending our text messages: the gift update texts people opt in to themselves, and a gift link a sender asks us to text you, sent only after you reply YES to our one request (see Text messages). Telnyx receives the phone number and the message text, only to deliver them; mobile numbers and SMS opt-in data are never shared for marketing.
- Anthropic: an AI service that reads the text of the messages people send us with “Sending gifts by text” (see Text messages), only to process them into a gift for them to confirm. It receives the message text only, never phone numbers or SMS opt-in data.
- Google: sign-in, and read-only access to Google Contacts and Google Calendar if you connect them.
- Microsoft: read-only access to Outlook contacts and calendar if you connect a Microsoft account.
We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.
Mux, Inc. (United States): video hosting, conversion, captions and automated content checks for video messages. It receives the videos people record or upload and returns playback, captions and check results. Videos are deleted from Mux on the schedule above.
11.Retention, deletion and security
How long we keep data
We keep your account information for as long as your account is open. We keep gift, order and payment records for as long as needed to fulfil gifts, handle returns and meet our tax and accounting obligations.
Deleting your account and data
To delete your account, email hello@giasgiraffes.com from the address on your account. We’ll confirm the request and delete your account, contacts and personal information within 30 days, except records we must keep by law (such as payment and tax records). Recipients can ask us to delete their information the same way.
Security
Data is encrypted in transit (HTTPS) and at rest with our hosting and database providers. Access is limited to people who need it to run the service. We never store card numbers, and any passwords are kept only as salted hashes by our authentication provider. Most people sign in with an emailed link or Google, so there is no password at all. No system is perfectly secure, but we work to protect your information and will notify you as required by law if a breach affects it.
12.Your California privacy rights
If you live in California, the California Consumer Privacy Act (CCPA) gives you the right to:
- know what personal information we collect, use and disclose, and get a copy of it;
- correct inaccurate personal information;
- delete your personal information, subject to legal exceptions;
- opt out of the sale or sharing of personal information (we don’t sell or share it for cross-context advertising); and
- not be discriminated against for exercising these rights.
To make a request, email hello@giasgiraffes.com. We’ll verify your identity and respond within 45 days. You may use an authorized agent to make a request on your behalf.
Wherever you live, you can ask us to access, correct or delete your information the same way.
13.Children
Gia’s Giraffes is not intended for anyone under 16, and we don’t knowingly collect information from them. If you believe a child under 16 has given us personal information, contact us and we’ll delete it.
14.International users
Gia’s Giraffes is operated in the United States and your information is stored and processed in the United States. Gifts currently ship within the US only. If you use the service from outside the US, you understand your information will be transferred to the US.
15.Changes to this policy
We may update this policy as the service changes. We’ll post the new version here with a new “Last updated” date, and if the changes are significant we’ll notify you by email or in the app before they take effect.
16.Contact us
Questions or requests about privacy: hello@giasgiraffes.com. Gia’s Giraffes is operated by Boggs Holdings LLC, California, USA.