Privacy Policy

Duly Noted (“Duly Noted,” “we,” “us,” or “our”) helps you turn a pile of gifts into real, handwritten thank-you cards. This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and the choices and rights you have — including how to access or delete your data. It applies to our website at dulynoted.ink, our application at app.dulynoted.ink, and related services (together, the “Service”).

1. Information we collect

We collect the following categories of information:

Information you provide

• Contact & waitlist information — your email address (for example, when you join the early-access list) and, if you create an account, your name and password or sign-in credentials.
• Gift photos and event details — photographs of gifts you upload, the event or occasion they relate to, and any notes you add.
• Guest / gift-giver information — the names and mailing addresses of the people you are thanking, which you enter or import so we can attribute gifts and mail cards. See Section 3 for how we treat this third-party information.
• Note content & preferences — the tone you choose, drafts we generate, and your edits and approvals; your selected handwriting style.
• Order & payment information — when you place an order, our payment processor collects your payment details and billing information. We receive limited transaction data (such as a confirmation, the last four digits of a card, and amount) but do not store full card numbers.
• Communications — messages you send us (for example, support requests to hello@dulynoted.ink) and your survey or feedback responses.

Information collected automatically

• Device & usage data — IP address, browser and device type, operating system, pages or screens viewed, referring URLs, and timestamps.
• Cookies & similar technologies — including the Meta Pixel and analytics tools, as described in Section 6.

Information from third parties

• Advertising & analytics partners — such as Meta, which may provide aggregated measurement and audience information related to our ads.
• Service providers — such as our fulfillment and payment partners, which confirm order and delivery status.

2. How we use information

We use the information we collect to:

• Provide the Service — identify gifts from your photos, draft thank-you notes, and produce and mail physical cards;
• Create and manage your account and the early-access waitlist;
• Process orders, payments, and delivery, and send related confirmations;
• Respond to your requests and provide customer support;
• Improve and develop the Service, including the quality of gift identification and note drafting;
• Measure, operate, and optimize our marketing and advertising (see Section 6);
• Maintain the security and integrity of the Service and prevent fraud or abuse; and
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information for money. See Section 9 regarding “sharing” for cross-context behavioral advertising and how to opt out.

3. Gift-giver & recipient information

To attribute gifts and mail cards, the Service uses the names and mailing addresses of the people you are thanking. Because this is information about other people, we want to be clear about how it is handled:

• We use gift-giver information solely to provide the Service to you — matching gifts to givers, drafting notes, and addressing and mailing cards through our fulfillment partner.
• We do not use gift-giver names or addresses for our own marketing, and we do not sell or share them for advertising.
• You are responsible for ensuring you have the right to provide this information to us (see our Terms of Service).
• A gift recipient may contact us at hello@dulynoted.ink to ask what information we hold about them or to request its deletion, as described in Section 8.

4. Legal bases for processing (EEA / UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases:

• Contract — to provide the Service you request (for example, drafting and mailing your cards).
• Consent — for marketing communications and certain cookies and tracking technologies; you may withdraw consent at any time.
• Legitimate interests — to operate, secure, and improve the Service and to understand how it is used, balanced against your rights.
• Legal obligation — to comply with applicable laws.

5. How we share information

We share information only as described here:

• Handwrytten (fulfillment) — to produce and mail your physical cards, we share the note content and the recipient’s name and mailing address with our handwriting and mailing partner, Handwrytten.
• AI processing providers — we use third-party artificial-intelligence services to help identify gifts from your photos and to draft note text. Your photos and prompts may be processed by these providers to deliver these features.
• Payment processor — to take payment for orders, handled by our third-party payment provider.
• Meta (advertising & measurement) — through the Meta Pixel and related tools, we share certain event and device information with Meta to measure and improve our advertising, as described in Section 6.
• Hosting, email, and analytics providers — vendors that host the Service, send transactional and marketing email, and help us understand usage.
• Legal & safety — when required by law, to respond to legal process, to protect our rights and users, or to prevent fraud or harm.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

Our service providers are permitted to use your information only to perform services for us.

6. Cookies, the Meta Pixel & advertising

We and our partners use cookies, pixels, SDKs, and similar technologies to operate the Service, remember your preferences, analyze usage, and deliver and measure advertising.

In particular, we use the Meta Pixel and related Meta business tools (which may include the Conversions API). These tools collect information such as your device and browser data, the actions you take on our site (for example, visiting a page or joining the waitlist), and identifiers, and share that information with Meta. Meta may use this information to measure our ads, build audiences, and show you more relevant advertising. To learn more and manage your choices, see Meta’s Privacy Policy and your Ad Preferences.

You can control cookies through your browser settings and limit interest-based advertising through tools such as the DAA and Your Online Choices (EU). Disabling some cookies may affect how the Service works.

7. How long we keep information

We keep personal information for as long as needed to provide the Service and for the purposes described in this policy — for example, to maintain your account, fulfill and support your orders, and meet legal, accounting, or reporting requirements. When information is no longer needed, we delete or anonymize it. Gift photos, note drafts, and gift-giver details associated with your account are retained while your account is active and deleted on the timeline described in Section 8 when you delete your account or request deletion.

8. How to access or delete your data

You can ask us to access, correct, or delete the personal information we hold about you at any time. This section also serves as our data deletion instructions.

If you connected to our Service using a Meta (Facebook or Instagram) login or interacted with our Meta-connected app, you can also remove our app from the Apps and Websites section of your Facebook or Instagram settings, and then email us as above to request deletion of any data we hold.

9. Your privacy rights

EEA / UK (GDPR)

Subject to applicable law, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, to data portability, and to withdraw consent. You may also lodge a complaint with your local data protection authority.

California (CCPA/CPRA) & other U.S. states

Subject to applicable law, you have the right to know what personal information we collect and how we use and disclose it; to access, correct, and delete it; and to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. We do not sell personal information for money, but our use of advertising tools such as the Meta Pixel may be considered “sharing.” To opt out, adjust the cookie and advertising controls in Section 6 or email us. We will not discriminate against you for exercising your rights.

How to exercise your rights

Email hello@dulynoted.ink or use the deletion instructions in Section 8. You may use an authorized agent where permitted by law. We will verify your request before acting on it.

10. Children’s privacy

The Service is intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us at hello@dulynoted.ink and we will delete it.

11. Security

We use administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

12. International data transfers

We are based in the United States, and our service providers may process information in the United States and other countries. Where required, we use appropriate safeguards (such as standard contractual clauses) for international transfers of personal data.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate. Your continued use of the Service after an update means you accept the revised policy.

14. Contact us

This document is provided as a general template and does not constitute legal advice. Please have it reviewed by qualified counsel before relying on it.