Privacy Policy

When you create a surprise, we collect the information you choose to submit:

• Recipient name
• Creator name (optional)
• Photos you upload
• The personal message you write
• Birthday date, time, and recipient time zone when you choose to add a countdown

You do not need to create an account to create or open a surprise.

We do not require your email address or phone number to create a surprise.

If you report a surprise, we collect the reason you select and the message you submit with that report.

If you submit feedback or report a technical issue through the service, we may also receive limited technical information associated with that submission, such as the stage of the experience, device/browser information, or screen size where applicable.

We use the information submitted through Surprise From Me to:

• create and provide the personalized surprise experience
• display the photos, message, and other content you provide
• provide the countdown and open the surprise at the time you select
• provide customer support
• review and act on reports or feedback
• diagnose technical issues
• understand how the service is used
• maintain, secure, and improve the service

Photos and messages submitted by users are stored and processed as necessary to provide the personalized surprise experience.

We use Supabase for database and file storage.

Uploaded photos are converted and processed before storage so they can be displayed efficiently in the surprise experience.

Because surprise photos are currently stored using publicly accessible file URLs, anyone who obtains the direct URL to an uploaded photo may be able to access that photo. The surprise itself is accessed through a unique, unlisted link, but direct photo-file URLs are separate from that link.

Do not upload photos or content that you do not have the right to share.

Surprise From Me is currently being prepared for payment processing and payment functionality is not yet live.

When payment processing is enabled, payments may be processed through a third-party payment provider. Payment providers may process payment-related information necessary to complete a transaction.

Surprise From Me does not store card numbers, UPI PINs, or other payment instrument credentials.

We collect limited technical and usage information to understand how Surprise From Me is used and to improve the product.

Depending on how the service is accessed, this may include information such as:

• device type
• browser or user-agent information
• approximate country-level location
• information about how a surprise or other part of the service is used
• anonymous or pseudonymous identifiers used to group visits or sessions
• limited technical information submitted through feedback or technical-issue reporting

These identifiers do not contain your name or other directly identifying information.

We do not use Google Analytics, advertising pixels, or other third-party advertising trackers in the current service.

The following third-party services are currently used to operate Surprise From Me:

• Supabase -- database and file storage
• Vercel -- application hosting

These providers may process information as necessary to provide their respective services and in accordance with their own policies.

When payment processing is enabled, an applicable payment provider will also process payment-related information necessary to complete transactions.

As with other hosted websites, our hosting provider may process standard web request information, including IP address, when delivering pages to your browser. Our application database does not store your IP address.

We retain information for as long as reasonably necessary to provide and support the service, maintain security, resolve payment or support issues, prevent misuse, and meet applicable legal or operational requirements.

When a surprise reaches its expiry time, we mark it as expired and prevent normal recipient access. Expiry does not currently mean that all stored content is immediately deleted.

Information associated with expired surprises may remain stored after expiry.

Clearing the “Your Surprises” history in your browser only removes the local recovery reference from that browser. It does not delete the associated surprise or other server-stored information.

We may delete information when it is no longer reasonably required, subject to legal, security, operational, or support requirements.

We take reasonable measures to protect information submitted to the service.

However, no method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Please do not submit sensitive information such as passwords, OTPs, UPI PINs, or complete card details through Surprise From Me.

A surprise is accessed through a unique, unlisted link. The creator is responsible for deciding who receives that link.

You can choose not to provide optional information, such as a creator name.

If you have a concern about a surprise, its content, or its availability, you can contact us using the details below or use the reporting mechanism available on a surprise page.

If you want to ask about information associated with a surprise or request assistance with stored content, contact us at the email address below.

Questions about this Privacy Policy or your information?

Contact us at support@surprisefromme.com.