Privacy Policy

1. Who we are

AllHands is a service that allows users to create and share group greeting cards. We are the data controller for the personal data we collect through this service.

2. What data we collect

We collect only the data necessary to provide the service:

• Account information: your name and email address when you sign up.
• Card content: messages, images, and other content you add to greeting cards.
• Usage data: basic technical data such as browser type and pages visited, collected automatically to keep the service running.

3. How we use your data

We use your data solely to provide and improve the AllHands service:

• To create and manage your account.
• To enable the creation, sharing, and delivery of greeting cards.
• To communicate with you about your account or the service.
• To maintain and improve the service.

4. What we do not do with your data

• We do not sell your personal data to third parties.
• We do not use your data for advertising or marketing purposes.
• We do not share your data with third parties for their own purposes.
• We do not use your data for profiling or automated decision-making.

5. Legal basis for processing

We process your data on the following bases:

• Contract: processing necessary to provide you with the service you signed up for.
• Legitimate interests: processing necessary to maintain and improve the service, where those interests are not overridden by your rights.

6. Data sharing

We may share data with service providers who help us operate the service (e.g. hosting, authentication). These providers process data only on our behalf and under our instructions. We do not share your data with any third parties for their own independent use.

7. Data retention

We retain your data for as long as your account is active or as needed to provide the service. If you delete your account, we will delete your personal data within a reasonable timeframe, except where we are required by law to retain it.

8. Your rights

Under applicable data protection law, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate data.
• Erasure: request deletion of your data.
• Restriction: request that we limit how we use your data.
• Portability: request your data in a portable format.
• Objection: object to our processing of your data.

To exercise any of these rights, please contact us using the details below. We will respond within one month as required by law.

9. Cookies

We use essential cookies required for the service to function (e.g. authentication). We do not use tracking cookies, advertising cookies, or analytics cookies that identify individual users.

10. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by posting a notice on the website. Continued use of the service after changes are posted constitutes your acceptance of the revised policy.

11. Contact

If you have questions about this privacy policy or wish to exercise your data rights, please contact us at the email address provided on the website.