Privacy Policy
Last updated: March 2025
1. Introduction
Gumptious ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our viral giveaway platform and related services.
2. Information We Collect
2a. Information You Provide
- Account data: Name, email address, and password when you register
- Campaign data: Giveaway titles, prize descriptions, and configuration settings you create
- Entrant data: Name and email addresses of your giveaway participants
- Payment data: Processed securely via Stripe; we never store your full card details
- UGC uploads: Images and videos submitted by entrants for UGC actions
2b. Information Collected Automatically
- Usage data: Pages visited, features used, and time spent on the platform
- Device data: Browser type, IP address, and operating system
- Analytics: Aggregated campaign performance metrics
3. How We Use Your Information
- Providing, operating, and improving the Platform
- Processing payments and managing your subscription or credits
- Sending transactional emails (campaign confirmations, winner notifications)
- Responding to support requests
- Preventing fraud and ensuring platform security
- Complying with legal obligations
4. Sharing Your Information
We do not sell your personal data. We may share data with:
- Service providers: Stripe (payments), Resend (email), Vercel/AWS (hosting/storage)
- Campaign operators: Entrant names and emails are visible to the brand operator who owns the giveaway
- Legal authorities: When required by law or to protect our legal rights
5. Data Retention
We retain your account data for as long as your account is active. Entrant data is retained for the duration of the campaign plus 90 days. You may request deletion of your data at any time by contacting us.
6. Cookies
We use essential session cookies required for authentication. We do not use third-party advertising cookies. Optional analytics cookies (e.g., Google Analytics) are only placed with your consent.
7. Your Rights (GDPR & CCPA)
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict processing of your data
- Data portability (receive your data in a machine-readable format)
- Withdraw consent at any time without affecting prior processing
To exercise any of these rights, email us at admin@gumptious.net.
8. Security
We implement industry-standard security measures including TLS encryption in transit, hashed passwords, and access controls. However, no transmission over the internet is 100% secure.
9. Children's Privacy
Gumptious is not directed to children under 13. We do not knowingly collect data from minors. If you believe a child has provided us with personal information, contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. Your continued use after changes constitutes acceptance.
11. Contact Us
Privacy questions or requests: admin@gumptious.net