🔒 Privacy Policy

1. Information We Collect

A. Account Information:

• Email address (required for account creation)
• Name (optional, can be set in profile)
• Password (securely hashed using bcrypt, never stored in plain text)
• Phone number (optional, for enhanced account recovery and contact features)
• Account tier (Ruby/Emerald) and subscription status

B. Gift Profile Information: clothing sizes, favorite colors and style preferences, allergies and dietary restrictions, hobbies, interests, favorite stores, gift preferences, and biographical notes you choose to provide.

C. Wishlist Data: items you add (names, descriptions, prices, URLs, images), wishlist titles and occasions, privacy settings, gift memories and photos you upload, item reservation/purchase status, and Chip In group-gifting coordination data.

D. Contact Information: names, email addresses, and phone numbers of contacts you add, sharing permissions, and user search queries.

E. Usage Data and Analytics: product searches, AI assistant (Marks) conversations, feature usage patterns, store preferences, device information, IP address and general location, and session data.

F. Communication Data: email delivery status, web push notification subscriptions, in-app notification preferences, and SMS invitation history (sent through your device).

G. Payment Information: subscription tier and billing status. Payment details are processed and stored by Stripe — we never store credit card numbers.

2. How We Use Your Information

• Service Delivery: to provide, maintain, and improve the Trezure platform
• Account Management: to create and manage your account, authenticate logins, and maintain security
• Wishlist Features: to enable wishlist creation, sharing, and gift coordination
• Gift Profile: to display your preferences to people you share wishlists with
• AI Recommendations: to power the Marks AI assistant with personalized gift suggestions
• Notifications: to send you wishlist activity, gift coordination, and service updates via email, in-app messages, and web push
• Payment Processing: to process subscription payments and manage Emerald tier benefits
• Personalization & Analytics: to remember your preferences and improve features
• Advertising: to display relevant advertisements to free tier (Ruby) users
• Legal Compliance: to comply with legal obligations, prevent fraud, and protect user safety

3. Information Sharing and Disclosure

We DO NOT sell your personal information to third parties. We share information only in these limited circumstances:

A. With Other Users (as you direct): shared wishlists show item details and your Gift Profile (if enabled). Recipients cannot see which items have been reserved or purchased by others (Anti-Spoiler Protection). Chip In group members can see your pledge amount.

B. With Service Providers:

• Stripe — payment processing (stripe.com/privacy)
• Resend — transactional email delivery
• MongoDB Atlas — secure cloud database storage
• Google AdSense — advertisement delivery for free tier users (policies.google.com/privacy)
• Google Analytics — anonymized usage analytics
• AI Providers (OpenAI, Google Gemini, Anthropic) — processing queries for the Marks AI assistant; only necessary data is shared
• Web Push Providers — delivery of browser push notifications
• CJ Affiliate and Affiliate Networks — anonymized, aggregated click and purchase tracking

C. For Legal Reasons: to comply with laws or legal process, enforce our Terms, protect rights and safety, or investigate fraud and security issues.

D. Business Transfers: in a merger, acquisition, or sale of assets, user information may be transferred; we will notify you of any ownership change.

4. Cookies, Tracking, and Analytics

• Essential Cookies: required for the Service to function (session, authentication, security)
• Functional Cookies: remember your preferences and settings
• Analytics Cookies: anonymized usage data via Google Analytics
• Advertising Cookies: used by Google AdSense for free tier users

We provide a cookie consent banner on your first visit; manage preferences anytime via Settings → Privacy Controls. We may use web beacons in emails to measure engagement. We do not currently respond to "Do Not Track" browser signals.

5. Data Retention and Deletion

• Your data is retained while your account is active
• Delete your account anytime via Settings → Delete Account — this permanently removes your account, Gift Profile, wishlists, contacts, gift memories, and settings
• Backups may persist up to 30 days after deletion for disaster recovery
• We may retain certain data where required by law (fraud prevention, dispute resolution)
• Aggregated, anonymized analytics may be retained indefinitely

6. Your Privacy Rights

• Access — view and download data associated with your account
• Correction — update your personal information and Gift Profile
• Deletion — request deletion of your account and all associated data
• Export — request a machine-readable copy of your data
• Opt-Out — unsubscribe from marketing and non-essential notifications
• Cookie Control — manage cookies through our consent tool
• Limit Use / Object — restrict Gift Profile sharing or object to certain processing

European Users (GDPR): if you are in the EEA, UK, or Switzerland, you have the right to access, rectify, or erase your data; restrict or object to processing; data portability; withdraw consent; and lodge a complaint with a supervisory authority.

Exercising Your Rights: contact support@strezfree.com or use the in-app Settings menu. We respond within 30 days (45 for complex requests) and may verify your identity first.

7. Browser Extension

The Trezure browser extension (Chrome, Edge, Firefox) collects and transmits only the data needed to save items to your wishlists:

• Authentication: your email address and password are transmitted securely (HTTPS) to our servers when you sign in. A login token is then stored locally in your browser for up to 30 days. Passwords are never stored by the extension.
• Website content you choose to save: when you click the extension icon, it reads the current page's product information (page URL, title, image, price, description) and transmits it to our servers only if you save the item to a wishlist.
• No browsing history: the extension does not track, log, or transmit your browsing history. It can only access the single page you are viewing at the moment you click the extension, using your browser's activeTab permission.
• No tracking: the extension contains no analytics, advertising, keystroke logging, or activity monitoring, and executes no remotely hosted code.
• No sale of data: extension data is sent only to Trezure's own servers and is never sold or transferred to third parties. It is used solely to provide the wishlist service, consistent with the Chrome Web Store User Data Policy, including its Limited Use requirements.

8. Data Security

We implement industry-standard measures including encrypted transmission (HTTPS), secure password hashing (bcrypt), and regular security audits.

9. Children's Privacy

Trezure is not intended for users under 13. We do not knowingly collect information from children under 13 and will promptly delete any such data discovered. Users 13–18 should use the Service with parental consent. Parents: contact support@strezfree.com.

10. International Data Transfers

Trezure operates in the United States. By using the Service you consent to transfer, storage, and processing of your information in the U.S. We use appropriate safeguards including standard contractual clauses and data protection agreements with providers.

11. Affiliate Disclosure

Trezure participates in affiliate marketing programs, including CJ Affiliate and other networks. When you click product links and make purchases, we may earn commissions — this never affects the price you pay or our recommendations. Only anonymized, aggregated click data is shared with affiliate networks.

12. Changes to This Policy

We may update this policy periodically and will notify users of significant changes via email or in-app notification.

13. Contact Us

For privacy questions or to exercise your rights: support@strezfree.com
Strez Free Solutions LLC, Illinois, USA