Last updated: December 11, 2025
We respect your privacy and strive to be as transparent as possible about how we process your data. This Privacy Policy («Policy») describes what data we collect, why we do it, and how we protect your information when using the GiftPool service («GiftPool», «we»). If you have questions — contact us: support@grader.work
⚡TL;DR — Quick Summary
- We collect minimal data: your email, name/nickname, data about created pools and contribution marks.
- We do not collect or store banking details, card numbers, or financial transactions.
- All real transfers occur outside GiftPool, through banks and P2P services.
- We use data to keep the service stable, send notifications, and improve it.
- We share data only with technology providers — and only for GiftPool's operation.
- You can find out what data we store about you and, upon request, receive a copy of it, update it, or have it deleted.
1. About GiftPool and Our Approach to Privacy
GiftPool is a service for coordinating and tracking gift fundraisers.
GiftPool is not a payment service, bank, or electronic money operator.
All money transfers between participants are executed in third-party applications, and we do not see or process your financial transactions.
We adhere to data minimization principles: we collect only what is truly necessary for the service to operate.
2. What Data We Collect
2.1. Account Data
When you create an account in GiftPool, we collect a minimal set of information necessary for your identification and access to the service. Usually, this is your email address and name or display nickname. This data is needed for registration, authorization, and sending service notifications (for example, magic-link sign-in or important messages about service operation).
2.2. Pool Data
When creating or participating in pools, you provide information related to organizing the pool. This may include the pool name and description, its completion deadline, intended purpose of the pool, or gift amount. If you indicate your contribution, only the amount you manually enter is recorded in the service.
It's important to understand that such amounts are informational fields that users mark themselves. GiftPool does not process real transactions and cannot confirm their execution.
2.3. Technical Data
- IP address
- device and browser type
- operating system
- interface language
- dates and times of visits
- pages you visit
Used only for:
- ensuring GiftPool's operation,
- preventing abuse,
- analytics and improvements.
2.4. Cookies and Similar Technologies
- Session cookies — necessary for authorization.
- Analytics cookies — help us understand how users use the service.
You can disable cookies, but the service may not work correctly.
3. What We Absolutely DO NOT Collect
- bank card numbers,
- account details,
- banking operation logs,
- transfer results,
- passwords or access to banks/wallets.
⚠️ If someone asks you for such data «for GiftPool» — it's fraud.
4. How We Use Data
4.1. Service Operation
- creating and displaying pools;
- storing contribution information;
- authorization and account management.
4.2. Communication with You
- sending service notifications (for example, magic-link sign-in or pool updates);
- responding to support questions.
4.3. Analytics and Improvements
- studying user behavior in anonymized form,
- improving interface and functionality.
4.4. Protection Against Abuse and Attacks
- analyzing technical logs,
- preventing hacking attempts.
✓ We do not use your data for advertising or selling to third parties.
5. Who We May Share Data With
5.1. With Technology Providers (Processors)
These are companies that help us:
- host and maintain servers,
- send emails,
- provide analytics,
- ensure security.
They cannot use data for their own purposes.
5.2. If Required by Law
We may disclose data upon lawful request from government authorities.
5.3. In Case of GiftPool Reorganization
If GiftPool is sold or merged with another company, data may be transferred to the successor — strictly within the framework of this Policy.
✓ We never sell data to advertising networks or data brokers.
6. How Long We Store Data
- Account data — while your account is active.
- Pool data — until you delete it or while your pools exist.
- Technical logs — limited time necessary for security.
- Anonymized analytics — may be stored longer, as it does not identify the user.
When deleting an account:
- personal data is deleted or anonymized;
- some technical logs may be temporarily retained for security requirements.
7. Your Rights
- obtain a copy of your data,
- correct inaccurate information,
- delete your account and data,
- restrict certain types of processing,
- opt out of non-service notifications.
To do this, write to us: support@grader.work
We may request identity verification before processing a request.
8. How We Protect Your Data
- end-to-end encryption of data in transit,
- secure servers and storage environment,
- action auditing to detect suspicious activity,
- limiting employee access to data (only «as needed»).
But it's important to understand: no online service can guarantee absolute data security.
9. International Data Transfer
Some of our service providers may be located outside your country.
In such cases, we take measures to ensure an adequate level of data protection in accordance with applicable legislation.
10. Policy Updates
We may periodically update this Policy.
We will notify users of material changes through the service or email.
The date of the last update is always indicated at the beginning of the document.
11. Contact
If you have questions about your privacy or data processing, contact us: support@grader.work