Privacy Policy
The short version: We store contact details (names, phone numbers, emails, birthdays, anniversaries) only to send wishes on your behalf. We never sell this data, never share it with advertisers, and delete it when you ask.
1. Who we are
WishEveryone ("we", "us", "our") is a service that helps you automatically send personalized birthday and anniversary wishes to the people you care about. Our platform is operated by WishEveryone and accessible at wisheveryone.com.
For privacy questions, contact us at privacy@wisheveryone.com.
2. What we collect
About you (account holder):
- Full name and email address (used to create your account)
- Password (stored as a secure one-way hash — we cannot read it)
- Account preferences (send time, message style, delivery channels)
- Push notification token (to send you reminders on your device)
About your contacts:
- Full name
- Phone number (optional — only used for WhatsApp delivery)
- Email address (optional — only used for email delivery)
- Birthday (day, month, and optionally year)
- Anniversary date (optional)
- Relationship type (friend, family, colleague, client)
Usage data:
- Wish send history (what was sent, when, and via which channel)
- Delivery status (sent, partial, failed)
3. Why we collect it
- Contact details — to send birthday and anniversary wishes on your behalf via email and WhatsApp
- Your account details — to authenticate you and maintain your preferences
- Push tokens — to send you reminders about upcoming occasions
- Wish history — to show you what was sent and avoid duplicate sends
We do not use your data or your contacts' data for advertising, profiling, or any purpose other than operating the service you signed up for.
4. Who we share data with
We share data only with the third-party services necessary to deliver the product:
- Supabase — database storage (contact details, wish history, account info). Data is stored in the US. Supabase Privacy Policy
- Resend — email delivery. Only the recipient's name and email address are passed. Resend Privacy Policy
- Twilio — WhatsApp and SMS delivery. Only the recipient's phone number and message text are passed. Twilio Privacy Policy
- Google Gemini AI — message generation. We pass the contact's name, relationship, and occasion type. We do not pass phone numbers or email addresses to Gemini. Google Privacy Policy
- Render — backend hosting. No data is stored on Render directly; it processes requests and passes them to Supabase. Render Privacy Policy
We do not sell data to any third party. Ever.
5. Your contacts' rights
Your contacts did not sign up for WishEveryone directly. They receive messages because you chose to add them. We take this seriously:
- WhatsApp messages include a way to opt out (reply STOP)
- Any contact can request deletion of their details via our data deletion page
- You can delete any contact from your account at any time, which removes their data from our system
6. Data retention
- Contact details are retained as long as your account is active
- Wish history is retained for 12 months, then automatically deleted
- If you delete your account, all associated data (contacts, history, settings) is permanently deleted within 30 days
- Deletion requests from contacts are processed within 7 days
7. Security
- All data is transmitted over HTTPS/TLS
- Passwords are hashed using bcrypt — we cannot recover them
- API access is protected by JWT authentication with 30-day expiry
- Database access is restricted to our backend service only
8. Your rights
Depending on where you live, you may have rights including:
- Access to the data we hold about you
- Correction of inaccurate data
- Deletion of your account and all associated data
- Export of your data in a readable format
To exercise any of these rights, email us at privacy@wisheveryone.com. We'll respond within 7 days.
9. Children
WishEveryone is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child's data has been collected in error, contact us and we will delete it promptly.
10. Changes to this policy
We'll notify registered users by email if we make material changes to this policy. The "last updated" date at the top reflects the most recent revision.
Contact
Questions about this policy? Email privacy@wisheveryone.com — we're a small team and we read every message.