Privacy Policy

What we collect

• Account data - your email address and display name when you sign up (email/password or Google sign-in via Firebase Authentication).
• Registry content - the registries, items, funds, event details, notes, and photos you create. Anyone who has your registry link can see the page, so treat everything you put on it as visible to your guests.
• Guest interactions - when a guest claims a gift, reserves an item, or contributes to a fund, we store the name, optional email address, optional gift message, and amount they choose to provide, so the host knows who to thank.
• Guest lists, invitations, and RSVPs - hosts can add their guests' names and email addresses, send e-invitations, and collect RSVP replies including party size, meal choice, and dietary needs. This is information about people other than the account holder; hosts are responsible for having a reasonable basis to share it with us, and we use it only to run that host's event (never for our own marketing).
• Shipping address - a host can save a delivery address for their registry. It is shown only to guests who have claimed or reserved a gift (or to everyone with the link, if the host explicitly chooses that).
• Offline gift records - hosts can log gifts received outside the platform (for example cash envelopes), including giver names and amounts. Only the host and their co-hosts can see these.
• Optional surveys - after an event, hosts may fill in a spending recap (categories, guest count, city/province). We use these answers only in aggregate to improve our planning guides; they are never shown with your name or your registry.
• Support email - if you write to us, we keep the correspondence so we can fix the issue and follow up.

Children

• GetJoyBox accounts are for adults. Children are never the users: parents and hosts enter information about a child (a first name, an age, a birthday, photos) to build a registry. We have no child accounts and no features that ask children for input.
• Information about a child serves the host - age-appropriate checklists and gift suggestions. We never use it for advertising or profiling.
• Registries are unlisted by default: the link is the only way in, and unlisted pages ask search engines not to index them. Listing a registry in the public directory is an explicit host choice.
• Photos are uploaded and deletable by the host, and are removed when the registry or account is deleted. If any trace of your child's information remains anywhere after you delete something, email hello@getjoybox.com and we will remove it.

Who can see what

• Anyone with your registry link can see the registry page: its name, event details, items, funds, photos, and notes you wrote for guests. If you enable fund contributions by e-Transfer, the e-Transfer address you provide is shown to guests so they can send the gift.
• Guests can see some claim activity - for example that an item is already purchased or reserved, and (unless the host turns it off) the first names of fund contributors. A short "recent activity" strip shows first names only - never amounts, messages, or email addresses.
• Only the host and co-hosts can see guest email addresses, gift messages, gift amounts, the guest list, RSVP replies, dietary notes, and analytics.
• The public directory ("find a registry") shows a registry only when the host has turned listing on.

Analytics & tracking

• We use Google Analytics (GA4), which sets its own cookies, for aggregate usage statistics. We do not use third-party advertising cookies and we do not sell or share data with advertising networks.
• For registry owners, we keep a first-party record of product events tied to your account (pages you visit within GetJoyBox, features you use) in our own database, so we can see where the product falls short. It is visible only to us.
• For guests viewing a registry, we count page views and engagement events (a photo gallery opened, a gift search made). These carry no name and no account. Page-view counts use a random identifier stored in your browser so a host sees "12 visitors" instead of raw hits; it identifies a browser, not a person, and we never use it to profile guests across other websites.
• When a host sends e-invitations, the host can see whether an invitation was opened (a standard email open-tracking image) and, for registries with verified guest access, when a guest last used their access pass. This is shown only to the host running the event.
• If a page crashes, the error report our server logs includes your IP address and browser version. We use these logs only to fix bugs, and they expire with our normal operational log retention.
• Questions about how any of this works? Email hello@getjoybox.com.

Email

• Service email - things you'd expect: welcome notes, claim and contribution notifications, RSVP confirmations, invitations you ask us to send, and receipts. These are part of running the product.
• Optional email - reminders, tips, event countdowns, and a weekly activity digest. Every such email has a working one-click unsubscribe, and you can manage preferences anytime in Account settings. We comply with Canada's anti-spam law (CASL).
• When you unsubscribe, your address goes on a permanent do-not-email list. That list deliberately survives account deletion - it is how we remember not to contact you again.

Money, payments, and affiliate links

• Cash gifts move directly between guests and hosts (for example Interac e-Transfer). GetJoyBox never receives, holds, or processes that money and never sees banking details - we only record what hosts and guests tell us so the host can keep track.
• Optional paid upgrades and tips are processed by Stripe. Your card details go to Stripe, not to us; we keep a record of what was purchased, for which registry, and the amount, as a payment record.
• As an Amazon Associate, GetJoyBox earns from qualifying purchases made through outbound retailer links - at no extra cost to you. When you click one, Amazon knows the click came from GetJoyBox (we tag which page type, never who you are).

AI features

• Some features send data to AI providers to work: registry generation sends your event details and anything you type in the request box (plus, for kids' registries, the age and gender you enter) to Anthropic; the thank-you note drafter sends the guest's name, gift, and gift message to Anthropic; the translate button sends our published article text to Google Gemini.
• We send only what the feature needs, and we do not permit these providers to use your data to train their models under the API terms we use. AI features run only when you invoke them.

The Chrome extension

• The extension reads the address of your current tab only when you click it (or use its right-click menu) to detect the product on that page. It does not track your browsing history and has no access to other tabs.
• If you connect the extension to your account, a scoped access token is stored in your browser's local extension storage. It can only add items to your own registries, and you can revoke it anytime with the extension's Disconnect button.
• The extension sends data only to getjoybox.com - never to third parties.

Service providers

We never sell your data. We share it only with the processors that run the service, each receiving only what its job requires:

• Google Firebase / Google Cloud - authentication, database, file storage, and hosting. Our infrastructure runs in Google Cloud data centres in the United States.
• Google Analytics - aggregate usage statistics.
• Resend - delivers our email (so it processes recipient addresses and message contents).
• Stripe - payment processing for upgrades and tips.
• Anthropic and Google Gemini - the AI features described above, only when you use them.
• Trustpilot - the review widget on our feedback pages loads from Trustpilot (standard web-request data such as IP address applies on those pages).
• Amazon - receives standard click data when you follow an affiliate link.

GetJoyBox is operated from Canada; because our providers run in the United States, your information is processed there. Wherever it is processed, it is protected by this policy.

How long we keep things

• Account and registry data - kept while your account exists; deleted when you delete the registry or the account.
• Analytics and logs - owner dashboards show the last 90 days; operational logs and counters are kept only for product and security purposes.
• Payment records - retained as financial records after account deletion, as the law expects.
• The do-not-email list - permanent by design (see Email above).
• Survey answers - kept in aggregate form to power our planning guides; never tied back to you publicly.

Your rights and choices

• Edit or delete your registries and items anytime from your account.
• Unlisted registries never appear in the public directory - the link is the only way in.
• Delete your account yourself from Account settings (Danger zone): this removes your profile, your registries and everything in them, and your sign-in. Payment records and the do-not-email list are retained as described above. If you want us to double-check that nothing was left behind - including uploaded photos - email hello@getjoybox.com and we will sweep it manually.
• Access and correction - email hello@getjoybox.com to ask what information we hold about you, to receive a copy, or to correct it. This applies to guests too: if you claimed a gift or RSVP'd on someone's registry and want your name or email removed, write to us and we will erase it.
• Complaints - we answer privacy questions at hello@getjoybox.com. If you are not satisfied, you have the right to complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).