Privacy policy
Last updated: 25 July 2026
aigifted.store collects your email address, your order details, a salted hash of your IP address and your country code. We never store raw IP addresses, never ask for your name or physical address, and never sell data. Order records are kept for five years for tax and dispute purposes; delivered codes are deleted after 60 days.
What we collect and why
| Data | Why | Retention |
|---|---|---|
| Email address | To deliver your code and support your order | 5 years (tax and dispute records) |
| Order details and product snapshot | To fulfil the order and honour the refund policy | 5 years |
| Delivered code (encrypted) | So you can re-read it on your order page | 60 days after fulfilment, then deleted |
| Salted hash of your IP address | Rate limiting and fraud prevention | 5 years; the raw IP is never written to disk |
| Country code and user agent | Sanctions compliance and debugging | 5 years |
| Terms acceptance timestamp and version | To evidence the consent you gave at checkout | 5 years |
| Marketing consent flag | Only to decide whether we may email you offers | Until you withdraw it |
What we do not collect
We do not collect your name, postal address, phone number, date of birth or any government identifier. We do not ask for account credentials for any AI provider, ever. We do not run advertising trackers or third-party marketing pixels, and the site sets no advertising cookies.
Sub-processors
- Supabase — hosts the database holding orders, email logs and encrypted codes.
- NOWPayments — processes cryptocurrency payments and receives your order number and amount.
- Resend — sends transactional email and receives your email address and message content.
- Vercel — hosts the site and processes request metadata in transit.
- Cloudflare Turnstile — anti-bot check on the checkout form, where enabled.
Payment data
We never see or store your wallet keys, and we do not receive card data because we do not accept cards. NOWPayments handles the payment leg and applies its own compliance screening.
Your rights
Write to support@aigifted.store to request a copy of the data attached to your email address, to correct it, or to ask for erasure. We honour erasure requests except where we are required to retain order and payment records for tax and legal defence — in that case we tell you exactly what we are keeping and why.
Marketing email
We send marketing email only if you ticked the optional box at checkout. Every such email carries an unsubscribe link, and unsubscribing never affects transactional email about an order you placed.
Security
Delivered codes are encrypted with AES-256-GCM before storage, with the key held only in server-side environment variables. The database denies all access to anonymous clients; every read and write goes through server-side code. Admin access is restricted to an allowlist and uses single-use sign-in links.
Changes
Material changes to this policy are reflected in the “last updated” date above. Contact support@aigifted.store with any question about it.