Privacy Policy

1. What data we collect and why

We collect only what is necessary to build, deliver, and support the page you create.

• Page content: the couple's names (or the chosen recipient's name), relationship start date, message, list of qualities, love coupons, map pins (coordinates and labels you write), visual theme, and music link. Used exclusively to render your page.
• Photos: up to 6 images you upload, used in the gallery and in the page's video.
• Email: required. Used to send the page link, the edit link, the video when applicable, and messages about your purchase (including reminders about an unfinished page).
• Phone number: optional. Used for support and to auto-fill checkout.
• Device and browsing data: device type (mobile, tablet, computer), browser user agent, IP address, and referring page. Used for security, rate-limiting abusive attempts, and error diagnostics.
• Campaign parameters: utm_source, utm_medium, utm_campaign, utm_content, utm_term, gclid, fbclid, sck, affiliate identifier, and the advertising cookies _fbp and _fbc. Used to measure where visits and sales come from.
• Usage events: views of offer pages, checkout clicks, and funnel progress, always tied to the page created and not to a broad personal profile.
• Payment data: name, email, phone, and the transaction result. Card details are entered and processed directly by the payment provider — we do not receive or store card numbers.

2. Photos: where they're kept and for how long

Uploaded photos are stored in a file bucket on Supabase's infrastructure and served from a public, non-indexed address with a randomized file name. Anyone with the link to your page can view the photos — the link is the access key, so share it only with people you want to.

While the page is active, the photos remain stored. They may also be used to generate the page's video when that feature is purchased.

Pages created but never paid for are treated as drafts and may be deleted, along with their photos, after 90 days of inactivity. Paid pages with limited access (for example, 24 hours) stop being visible once the period ends, but the content is kept for up to 12 months to allow reactivation; after that it may be removed. Pages with lifetime access remain online for as long as the service exists.

You may request immediate deletion at any time, in which case we delete the page and its photos.

3. Third parties that process data

We use the following services, each with its own privacy policy:

• Supabase — database and storage for pages and photos.
• Cloudflare — hosting and delivery of the site.
• Kiwify — payment processing and invoicing in Brazil.
• Efí (Efí Bank) — generating and settling PIX charges in Brazil.
• Hotmart — payment processing for the international operation.
• UTMify — attributing sales to ad campaigns.
• Meta (Facebook/Instagram) — Meta Pixel and Conversions API, for ad measurement. We send cryptographically hashed email and phone, plus IP and user agent.
• Resend — sending transactional emails.
• Creatomate and our video-rendering infrastructure — generating the page's video from your photos and text.
• YouTube / Google — music search and playback on the final page (see section 7).

4. Cookies and tracking

We use browser local storage to save your page draft, the visit's origin, and the price variant shown, and third-party cookies from Meta Pixel (_fbp and _fbc) for ad measurement.

We do not use cookies to build behavioral profiles beyond measuring campaigns and sales. You can block third-party cookies in your browser — the site will keep working.

5. Retention and deletion

• Page content and photos: as described in section 2.
• Order, payment, and sent-email records: kept for the legal tax-retention and dispute-defense period.
• Technical and funnel-event logs: kept for up to 24 months.
• Email unsubscribe requests: kept indefinitely, because they are what ensures you don't receive messages again.

6. How to request deletion or access to your data

Contact us at contato@mimogift.app or via support WhatsApp +44 7862 617057, providing the email used at purchase or the page link. We respond within 7 calendar days and confirm the deletion in writing.

You may also unsubscribe from emails using the link in the footer of any message we send.

7. YouTube API Services

MimoGift uses YouTube API Services for two purposes: searching for songs when you type a song name in the editor, and playing the chosen song on the final page through YouTube's official embedded player.

By using this feature, you agree to the YouTube Terms of Service, available at youtube.com/t/terms.

Google handles the data obtained through these APIs in accordance with the Google Privacy Policy, available at policies.google.com/privacy.

You may revoke this application's access to your data at any time on your Google Account's permissions page, at myaccount.google.com/permissions.

We do not store, download, or redistribute YouTube video or audio content. Playback happens exclusively through the official embedded player, served by YouTube itself.

The data returned by the API — video title, channel name, thumbnail, and identifier — is used only to show you the search results and to save the song you chose on your page. We keep a cache of search results by search term for up to 30 days, with no link to the user who searched, solely to reduce repeated calls to the API.

8. Your rights

You may request at any time: confirmation of processing and access to your data, correction of inaccurate data, deletion, portability, information about who we share it with, and revocation of your consent. All requests can be made through the contact channel in section 6.

9. Minors

The service is not directed at anyone under 18. We do not knowingly collect data from children or teenagers. If we identify such a case, we delete the data.

10. Changes

We may update this policy. The date at the top indicates the latest revision. Significant changes are communicated by email to anyone with an active page.