Overview

Pippy Post is operated by Zebbly LLC ("we," "us," or "our"). This policy explains what information we collect when you use the Pippy Post greeting delivery service, how we use it, and your rights regarding that information. By using Pippy Post, you agree to the practices described here.

Information we collect

Account information

When you register, we collect your name, email address, and password (stored as a secure hash). You may optionally provide a phone number; it is stored but not currently used for messaging.

Contact information you provide

To use the greeting delivery service, you add contacts with their names, email addresses, and birthday or anniversary dates. This information is stored securely and used only to schedule and deliver greetings on your behalf.

Payment information

Subscription billing and artist payouts are handled by Stripe. We do not store your full card number or CVV. Stripe's privacy policy applies to payment data: stripe.com/privacy.

Usage data and cookies

We collect standard server logs (IP address, browser type, pages visited, timestamps) to operate and improve the service. We use Plausible Analytics, a privacy-friendly tool that does not place tracking cookies and does not identify you across sites.

We also use session cookies to keep you signed in. These are strictly necessary to operate the service and are not used for advertising or cross-site tracking.

Consent records

We record when accounts are created and when recipients unsubscribe, and retain these records for legal compliance purposes.

How we use your information

• Deliver greeting messages to your contacts via email on scheduled dates
• Send you preview notifications before a greeting is delivered
• Process subscription payments and artist payouts
• Provide customer support
• Improve and maintain the service
• Comply with legal obligations

We do not sell your personal information or your contacts' information to third parties. We do not use your contacts' data for any purpose other than delivering greetings you schedule.

Greeting delivery and recipient choices

Pippy Post delivers greeting messages to your contacts' email addresses using our email provider (Resend). Adding a contact sends them nothing, the only email they ever receive is a greeting you schedule, and it identifies you as the sender.

Message frequency: Contacts receive one greeting per scheduled occasion per year, plus any one-time greetings you initiate. To opt out: every email a contact receives contains a one-click unsubscribe link. Clicking it immediately stops greetings from that sender and cancels anything scheduled. The page it lands on lists every Pippy Post member who sends that address greetings, so the recipient can unsubscribe from any of them individually or stop all greetings through Pippy Post in a single click, which also blocks anyone who adds them in future. Contacts can also email us at hello@pippypost.com.

Email addresses and phone numbers are not shared with third parties or affiliates for marketing purposes. We do not sell, share, or rent contact information or message content; it is shared with our delivery provider solely to deliver messages you schedule.

You (as the account holder) receive preview emails before a greeting is delivered. You can adjust these in Settings → Notification preferences.

Sharing with third parties

We share information only as necessary to operate the service:

• Resend: email delivery (receives recipient email addresses and message content)
• Stripe: payment processing and artist payouts
• Cloudinary: image storage and delivery (stores artist-uploaded artwork)
• Anthropic: AI-assisted greeting selection (receives non-personally-identifying metadata such as a contact's first name, relationship label, and occasion type, never phone numbers)
• Neon: database hosting
• Heroku: application hosting and infrastructure

All third-party providers are bound by data processing agreements and their own privacy policies. We do not share your data with advertisers or data brokers.

Data retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal information and your contacts within 30 days, except where we are required by law to retain it (for example, billing records for tax purposes, which we retain for 7 years).

Delivery logs (which contacts received which messages and when) are retained for 90 days for troubleshooting and compliance purposes, then deleted.

Consent and unsubscribe records are retained for the life of the account plus 4 years after deletion, for compliance documentation.

Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable format
• Opt out of marketing communications at any time

To exercise these rights, email us at hello@pippypost.com. We will respond within 30 days.

California residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: you may request a report of the personal information we have collected about you in the past 12 months
• Right to delete: you may request deletion of your personal information, subject to certain legal exceptions
• Right to opt out of sale: we do not sell personal information, so there is nothing to opt out of, but you have this right
• Right to non-discrimination: we will not discriminate against you for exercising your privacy rights

To submit a California privacy request, email hello@pippypost.com with "California Privacy Request" in the subject line. We will respond within 45 days.

Security

We use industry-standard security practices: HTTPS for all connections, bcrypt password hashing, environment-variable secret management, and role-based access controls on our database. No system is perfectly secure. If you discover a security vulnerability, please report it responsibly to hello@pippypost.com before public disclosure.

Children

Pippy Post is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, contact us at hello@pippypost.com and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. We will notify registered users by email for material changes at least 14 days before they take effect. The effective date shown at the top of this page reflects the most recent revision.

Contact us

Pippy Post (operated by Zebbly LLC) hello@pippypost.com