Draft: this page is pending legal review and may change before launch.
Privacy Policy
Effective October 3, 2026
This policy explains what information ebuket.link (operated by United Startups LLC, “we”, “us”) collects when you buy or open a digital gift, how we use it, and the choices you have. We keep it short because we collect very little.
1. What we collect
- When you buy a gift:your email address, the recipient's name, your chosen flower, and any greeting, message and sender name you type.
- If you choose scheduled delivery:the recipient's email address too, used only to send the gift to them directly on the date you choose.
- Payment details: payments are handled entirely by Stripe. Your card number never reaches our servers. We receive only the payment status, amount and a reference number, plus your name and email if Stripe provides them.
- When someone opens a gift link: nothing about them is stored by us beyond standard server logs (see below).
- Technical data: like most websites, our servers briefly handle your IP address and browser details to deliver pages, prevent abuse (for example, limiting repeated requests) and keep logs for security and debugging.
2. How we use it
- To create your gift page and give you the link.
- To email you your receipt and gift link, and to tell you about a refund.
- To process payments, refunds and support requests.
- To keep the service secure and prevent fraud and abuse.
- To meet legal, tax and accounting obligations.
We do not use your information for advertising and we do not sell it. We do use a small, first-party analytics system of our own, described in section 7 below — it does not use cookies or an advertising tracker.
3. Who we share it with
Only the service providers we need to run the site, and only for that purpose:
- Stripe, to take payments and issue refunds (see Stripe's privacy policy).
- Resend, to send our emails (receipts, gift links, refund notices).
- Hosting and network providers (our server host and a content-delivery and security provider) that store and deliver the site.
We may also disclose information if the law requires it or to protect our rights and the safety of others.
4. Gift pages are private by link
A gift page has a long, unguessable address and is hidden from search engines. Anyone who has the link can open it, so share it only with the person it is for. The message you write is shown on that page.
5. How long we keep information
- Gift pages and their content: until you ask us to delete them, or until we remove them under our Terms.
- Order records (amount, date, email, payment reference): as long as the law or our accounting needs require, typically up to seven years.
- Abandoned checkouts (started but never paid): deleted automatically after about 48 hours.
- Server logs: kept for a limited period for security and debugging.
6. Cookies
Visitors and buyers receive no tracking or advertising cookies from us. The only cookies are strictly necessary sign-in cookies used by our staff in the admin area. Stripe may set its own cookies on its payment page.
7. Analytics (no cookies, nothing personal)
We keep simple counts of a few things — a page was visited, someone started creating a gift, a checkout began, an order was paid, a gift link was opened — so we can tell whether the site is working. Each count is just an event name, the product involved, and a timestamp. We do not use a cookie, a visitor id, or your IP address to make these counts, and we cannot tell whether two events came from the same person, even internally. We may tag a visit with the campaign that brought it (e.g. a link marked ?utm_source=tiktok), which is just a short label you can see in the link itself, not anything collected separately. No third party receives this data; it is not shared, sold, or used for advertising.
8. Your choices and rights
You can ask us to tell you what we hold about you, correct it, or delete it. If you live in California or another US state with privacy laws, you have these rights under those laws, and we will not discriminate against you for using them. We do not sell or share personal information for advertising. Email us at hello@ebuket.link and we will respond within 45 days. To delete a gift page, send us the link.
We may need to keep some records (such as payment records) where the law requires it.
9. Children
ebuket.link is not directed to children under 13 and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.
10. Security
We use encryption in transit, restrict access to our systems, and rely on Stripe for payment security. No online service can promise perfect security, but we work to protect your information.
11. Where your data is processed
We and our providers may process information in the United States and other countries where they operate.
12. Tips and affiliate links
You may choose to leave us an optional tip; tips are processed by Stripe like any other payment on this site and are not refundable. A gift page may also show a link to buy real flowers from a florist partner, clearly marked “(affiliate link)”. If you click it and buy something, we may earn a commission at no extra cost to you. We do not pass your information to the florist; clicking the link is between you and them.
13. Changes
If we change this policy we will post the new version here and update the date above. If the change is significant we will tell buyers by email.
14. Contact
United Startups LLC, hello@ebuket.link. See also our Terms and Refund Policy.