Privacy Policy

We collect only the data needed to create and deliver your gift:

• Account data: name and email of the person creating the gift.
• Uploaded content: photos, messages, music selection, and gift settings.
• Payment data: processed by payment partners; we do not store full card details.
• Technical data: IP address, device, and browser, for security and operation.

We use the data to create and host the digital gift, process payment, generate and deliver the link to the recipient, send transactional emails (such as the purchase confirmation), provide support, and comply with legal obligations. We do not sell your data or use it for third-party targeted advertising.

Data processing is based on two legal bases set out in the LGPD:

• Consent: by uploading photos and content, you consent to processing for the purpose of the gift (art. 7, I).
• Performance of a contract: processing is necessary to provide the service you purchased (art. 7, V).

To operate the service, we share only the strictly necessary data with processors acting on our behalf, under security and confidentiality obligations:

• Stripe and AbacatePay: processing of card and Pix payments. We do not store full card details.
• Cloudflare R2: storage of the uploaded photos and media.
• Resend: sending transactional emails, such as confirmations and notifications.
• Spotify: searching for and displaying the songs chosen for the gift's soundtrack.

These partners process the data only for the purposes above and in accordance with their own privacy policies.

Media and content are stored in cloud infrastructure with encryption in transit and at rest. We adopt technical and organizational measures to protect data against unauthorized access, loss, or alteration, including access control and the use of recognized providers. Access to the gift depends on the unique link, whose confidentiality is the responsibility of whoever shares it.

We keep data only for as long as necessary for its purpose and according to the plan purchased:

• Basic plan: gift and media retained for 7 days after payment confirmation; afterwards, they may be removed.
• Premium plan: gift retained for an indefinite period, for as long as the service exists and the account remains active.
• Account data and tax records: kept for the applicable legal periods, even after the gift has expired.

Part of the content and infrastructure services (such as storage on Cloudflare R2 and the processing of emails and music) may involve servers located outside Brazil. In these cases, the international transfer follows the safeguards required by the LGPD (arts. 33 to 36), ensuring an adequate level of protection for your data.

Under the LGPD, you may at any time exercise the rights of:

• Access: confirm the existence of processing and access your data.
• Correction: update incomplete or outdated data.
• Deletion: request the erasure of data processed based on consent.
• Portability and information about data sharing.

To exercise your rights, contact us through the form available in the Contact section of our home page. We will respond within the legal timeframe.

We use cookies and similar technologies that are essential to the platform's operation, such as keeping your session active while you create a gift. Analytics cookies, when used, serve only to improve the experience and can be managed in your browser's settings. Tellin does not use cookies for third-party targeted advertising.

We use your IP address momentarily to infer the country of access and set the site's initial language (Portuguese for Brazil, English for everyone else). This processing is done locally on our servers, based on legitimate interest (art. 7, IX, of the LGPD), and the IP is neither stored nor logged for this purpose. You can change the language at any time using the site's selector, and your choice is remembered.