Privacy Policy

What we collect

From the sender: your name and your email address. Your email is required to send a card — it sets the Reply-To on the card email, so replies from the recipient reach you directly, and it is how we track your usage against your plan's monthly card limit.

If you create a Zovwy account: your email address (magic link) or, if you choose "Continue with Google," the name, email address, and profile picture Google shares with us. We use this only to create and identify your account — we never see or store your Google password. Signing up also lets us attach cards you previously sent anonymously (by matching your verified email) to your new account.

From the card: the recipient's name and email, the message you write (or generate with AI), the occasion, and the language you choose.

From group signing: each signer's name, an optional email, their message, and — for abuse prevention — the IP address the signature was submitted from.

From delivery: whether and when a card was delivered and viewed.

Why we collect it

To create and deliver your card by email, to route replies back to you, to track your usage against your plan's monthly card limit, to let group signers add their message to the right card, to let you sign in to and manage your account, and to prevent abuse of the signing link (the IP address on a signature exists solely for this purpose).

Who we share it with

We use a small number of service providers to run Zovwy, each with a specific, limited role:

• Supabase — hosts our database (PostgreSQL, in the western United States) where card, signature, and account data lives, and handles account sign-in (magic link and Google OAuth) on our behalf.

• Google — if you choose "Continue with Google" to sign in, Google authenticates you and shares your name, email, and profile picture with us; we never see your Google password.

• Resend — delivers the card, notification, and sign-in emails on our behalf.

• Anthropic (Claude API) — when you use AI message writing or translation, your message text is sent to Anthropic to generate or translate it. It is not used by Zovwy or Anthropic to train AI models.

We do not sell your data, and we do not share it with anyone beyond these processors.

How long we keep it

A card and its data are kept until the sender deletes it. If you would like a card, or all data associated with you, deleted sooner, contact us and we will take care of it.

Your rights

Wherever you are, you can ask us what data we hold about you and ask us to delete it — email cards@zovwy.com and we will respond promptly. If you are in the EU/UK or California, this covers the access and deletion rights GDPR and CCPA give you; we intend to honor the same standard for everyone, not just where required to.

Children

Zovwy is not directed at, and is not knowingly used to collect data from, children under 13.

Changes to this policy

If this policy changes, we will update the "Last updated" date below and, for material changes, make a reasonable effort to let existing users know.

This page is a plain-language template and not legal advice. It will be reviewed by a qualified professional before commercial launch.

Last updated: September 5, 2026