Who we are
William Alcock, trading as ami, is responsible for your data. Contact: amicardssupport@gmail.com.
What we collect
If you order, your name and email (through Gumroad), and the recipient's name, email and delivery date. If you contribute to a card, your name, answers, message, and any photo or GIF you upload. We also keep the finished card.
Why
To create and deliver the card you ordered, and to keep it online for the recipient. We rely on performing our contract with you and on our legitimate interests. We don't use messages or photos for anything else.
Who sees it
The recipient, and anyone they choose to share their card link with. We use Tally (data stored in the EU) to collect details and contributions, Netlify to host the card, Gumroad for payment, and an AI service to find themes in what people wrote. Gumroad's checkout code is only loaded from gumroad.com when you click to buy. We never sell your data and we don't send marketing emails to contributors.
How long
A delivered card, including the messages, photos and GIFs in it, stays online until the recipient asks us to delete it. We delete it within 30 days of their request, and clear it from our backups within 90 days. We keep the recipient's name and email for as long as the card is online, so we can resend their link. If a card is never delivered, we delete everything for it within 30 days of the planned delivery date. We may remove a card sooner if the law requires it. Gumroad keeps payment records under its own policy.
The recipient
We email the recipient their card once, with a link to it. That email explains how their details were used and that they can ask us to delete their card at any time by replying to it.
Your rights
You can ask to see, correct or delete your data at any time by emailing us. If you wrote in a card, you can ask us to remove your message or photo from it, and we will within 30 days. Once a card has been delivered, the recipient may have saved or shared a copy, and we can't delete copies held on their devices or by people they've sent it to. You can also complain to the Information Commissioner's Office at ico.org.uk.