WishFlo

Privacy Policy

Last Updated: February 4, 2026

Effective Date: January 30, 2026

This Privacy Policy explains how WishFlo Technologies Ltd. ("WishFlo," "we," "us") collects, uses, shares, and protects information when you use WishFlo.com and related services (the "Service").

This Policy should be read together with our Terms of Service ("TOS") and Cookies Policy. The TOS defines key user roles (e.g., "Creator," "Contributor," "Celebrant") and other capitalized terms used on the Service.

If you do not agree with this Policy, please do not use the Service.

Contact: support@wishflo.com

1. Scope and Who We Are

WishFlo Technologies Ltd. operates WishFlo.com and is responsible for the processing described in this Policy (often called the "controller" in some regions).

This Policy applies to information processed when you:

  • create or manage a celebration page,
  • contribute content to a page,
  • view or interact with pages you have access to, or
  • contact support.

2. Information We Collect

We collect information in three main ways: (a) information you provide, (b) information others provide about you through the Service, and (c) information collected automatically.

A. Information You Provide

  • Account information: email address and authentication information, plus optional profile details you choose to add.
  • Celebration page information: page title, event details you choose to include, and sharing settings/permissions.
  • User Content: text, images, videos, audio, files, links, messages, comments, and other content you upload or post.
  • Digital "Gifts" (user-provided items): if you or others add codes, voucher images, links, or files, we store that content as User Content.

Please do not submit sensitive information (e.g., government IDs, bank details, full payment card details) anywhere on the Service.

  • Support communications: information you include when you contact support@wishflo.com.

B. Information Others Provide Through the Service

If you are a Creator or Celebrant, other users (such as Contributors) may provide information on pages you can access, such as messages, media uploads, or other content that may reference you.

C. Information Collected Automatically

  • Usage data (analytics): interactions with the Service (e.g., page views, feature usage, clicks, and performance events). We use analytics tools to understand and improve the Service.
  • Device and connection data: IP address, device type, browser type, operating system, language settings, and approximate location (derived from IP at a city/region level).
  • Log and security data: timestamps, access logs, error logs, and events used to detect abuse and maintain reliability.
  • Cookies and similar technologies: used for authentication/session management and, where permitted/consented to, analytics and preferences. See Section 7 and our Cookies Policy.

3. How We Use Information

We use the information we collect to:

  • Provide and operate the Service (accounts, page creation, sharing, contributions, media delivery).
  • Host, store, and display User Content to you and the people you authorize to view it.
  • Maintain security, prevent spam/abuse, and protect users and the Service.
  • Improve and troubleshoot features and performance (including via analytics).
  • Communicate with you about the Service (verification, invitations, account notices, security notices, and support responses).
  • Comply with legal obligations and enforce our Terms of Service.

4. Legal Bases (Where Required)

Where applicable (including EU/UK), we rely on the following legal bases:

  • Contract: processing needed to provide the Service you request.
  • Legitimate interests: security, abuse prevention, reliability, and improving the Service.
  • Consent: where required for cookies/analytics and similar technologies.
  • Legal obligation: where we must comply with applicable law or valid legal process.

5. How We Share Information

A. We Do Not Sell Your Data

We do not sell personal information.

B. No Sharing for Third-Party Marketing or Advertising

We do not share personal information with third parties for their own marketing or advertising purposes.

C. Service Providers (Processors)

To operate the Service, we use service providers that process information on our behalf under contractual safeguards and confidentiality obligations. These providers help us provide core functionality such as hosting, database operations, media processing, analytics, and email delivery, including:

  • Cloudinary (media storage/processing for uploads)
  • Mailgun (sending service emails)
  • PostHog (usage analytics)

We may also use additional infrastructure providers for application hosting and database hosting. We do not permit our service providers to use your information for their own independent purposes outside of providing services to us.

D. Legal and Safety

We may disclose information if we believe it is reasonably necessary to:

  • comply with law or valid legal process,
  • protect the rights, property, and safety of WishFlo, our users, or others,
  • investigate and prevent fraud, abuse, or security incidents.

E. Business Transfers

If WishFlo is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate protections.

6. Data Retention and Deletion

We keep personal information only as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining security, and complying with legal obligations.

A. Account and Page Data

  • Account and page data are generally retained while your account is active and your pages remain available.
  • If a user terminates a page, the page data may remain present in our database.
  • You may request deletion of terminated page data by contacting support@wishflo.com. We may need to verify your request before acting.

B. Backups and Logs

We may retain limited data in backups and logs for a reasonable period for operational integrity, security, and dispute resolution. Deleted content may persist temporarily in backups until those backups are overwritten or expire.

C. How to Request Deletion

To request account closure and/or deletion of certain data, email support@wishflo.com.

7. Cookies, Consent, and Analytics

We use cookies and similar technologies:

  • to keep you signed in and maintain secure sessions,
  • to remember preferences, and
  • to measure usage and performance via analytics (where enabled and permitted).

Cookie consent banner: Where required by law (including in certain regions such as the EU/UK), we provide a cookie consent banner and obtain consent before setting non-essential cookies (such as analytics cookies).

For details—including the types of cookies used and how to manage your preferences—please see our Cookies Policy and any cookie preference tools available on the Service.

8. Email Communications (and Future Open/Click Tracking)

We send emails that support the Service (for example: verification, invitations, account notices, and support responses).

We do not currently track email opens. If we add open/click tracking in the future, we will update our disclosures and, where required, offer appropriate controls/consent choices.

9. International Data Transfers

WishFlo may process and store information in countries other than where you live. When we transfer personal data internationally, we use safeguards required by applicable law (such as contractual protections and other measures).

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including (for example) encryption in transit (TLS), access controls, and monitoring for abuse prevention. No system can be guaranteed 100% secure, and you use the Service at your own risk.

11. Your Privacy Rights

Depending on where you live, you may have rights such as:

  • access to your personal information,
  • correction of inaccurate information,
  • deletion,
  • portability,
  • restriction or objection to certain processing,
  • withdrawal of consent (where processing is based on consent).

To exercise your rights, email support@wishflo.com. We may request information to verify your identity.

If you are in certain regions (including EU/UK), you may also have the right to lodge a complaint with your local data protection authority.

12. Children

The Service is not intended for children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, contact support@wishflo.com.

13. Third-Party Links and User Content

Pages may contain third-party links or User Content uploaded by others. We are not responsible for third-party websites or services. If you follow a third-party link, that third party's privacy practices apply.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify you (for example, through the Service or by email). The "Last Updated" date at the top shows when this Policy was most recently revised.

15. Contact Us

For privacy questions, deletion requests, or other inquiries:

Email: support@wishflo.com

••••
•WishFlo company ©2026