Back to the website

Privacy Policy

Last updated

1. Who we are and what this policy covers

GiftEngine is operated by Dawid Kuprowski, an individual based in Poland. For the processing described in this policy for which GiftEngine determines the purposes and means, Dawid Kuprowski is the data controller. Contact: support@giftengine.net.

This policy covers giftengine.net, app.giftengine.net, the GiftEngine desktop application, and the associated hosted services and widgets. It also explains how information from TikTok LIVE is processed when a streamer uses GiftEngine.

GiftEngine is publicly available for Windows with Free and Pro plans. Pro subscriptions can be purchased only in the desktop application. References to Paddle billing describe processing associated with a purchase or subscription through Paddle.

2. Information we process

  • Account information: account identifiers, email address, display name, profile image, and authentication information. When you sign in with Google, we receive the account information supplied through that sign-in flow, not your Google password.
  • Service information: settings and content you choose to save in GiftEngine, such as presets, integration settings, and uploaded sound files where the feature is available.
  • Live events: relevant usernames, user identifiers, profile images, chat messages, gifts, likes, follows, and other events needed for the enabled stream features. These events are processed to trigger the actions selected by the streamer.
  • Stream history: numeric results linked to the streamer's account, such as total likes, diamonds, peak viewers, and average viewers. This history is not an archive of individual viewers or their chat messages.
  • Support information: messages and any information you choose to provide when contacting us. Please do not send passwords, API keys, or payment card details.
  • Technical information: connection and request information, such as IP addresses, device or browser information, and diagnostic output needed to deliver and secure the services. Diagnostic output can include excerpts of processed content.
  • Billing information: customer and transaction identifiers, purchase and subscription status, and contact or billing details made available by Paddle when you use its checkout or hold a subscription. Payment details are submitted through Paddle's checkout.

3. Why we use information

We use information to create and authenticate accounts, provide the features you request, connect live events to configured actions, display stream history, deliver transactional emails, handle support and deletion requests, maintain security, and administer subscriptions.

Where the GDPR applies, our legal bases are performance of our agreement with you for account and service delivery; legitimate interests in operating, securing, and troubleshooting the service and enabling streamer-selected interactions, subject to the rights and interests of affected people; compliance with applicable legal obligations; and consent where required for optional processing. You may withdraw consent without affecting processing that was lawful before withdrawal.

A streamer's agreement with GiftEngine does not constitute consent on behalf of viewers. Streamers must respect the privacy and rights of people whose content they use and provide any notices required for their own processing.

4. Service providers and other recipients

Information is shared as necessary to provide the relevant service, rather than sending every category of information to every provider:

  • Railway: hosting for the website and hosted GiftEngine services, including backend and widget services.
  • Supabase: account, authentication, and database services. Our Supabase project uses the eu-west-1 region.
  • Google: Google sign-in and speech generation. Text-to-speech is available on both Free and Pro plans. When you use this feature, text selected for audio generation, including eligible live chat messages, is transmitted from the desktop application to Google together with speech settings and technical connection information, such as your IP address. See Google's Privacy Policy.
  • Resend: delivery of transactional emails, such as account verification or password reset messages where applicable.
  • Cloudflare Turnstile: bot detection and protection of the flows in which the verification service is used. It processes technical browser and connection information for that purpose.
  • GitHub: hosting of application installers. Downloading an installer involves a connection to GitHub and its delivery infrastructure.
  • Paddle: sale and billing of subscriptions, payment processing, fraud prevention, tax administration, and payment-related customer support for orders placed through Paddle. For the GDPR data-sharing relationship, Paddle and GiftEngine act as independent controllers. The relevant Paddle entities and their processing are described in Paddle's Privacy Policy.

Google, TikTok, GitHub, and other providers may also process information for their own purposes under their applicable terms and privacy notices. We do not control their independent retention practices. We may disclose information where required by law or where necessary to establish, exercise, or defend legal claims.

5. Storage and international processing

The Supabase project region identifies the location selected for that project, not a guarantee that all processing by every provider occurs exclusively in the European Union. Hosting, support, delivery networks, and external services may involve processing in other countries.

Where the GDPR applies to a transfer outside the European Economic Area, the transfer requires an applicable legal mechanism, such as an adequacy decision or standard contractual clauses with the safeguards required for the transfer. Contact us for information about the locations and safeguards relevant to your data.

6. Retention and account deletion

Account-linked service data and numeric stream history are kept to provide your account and its history. Stream history currently has no automatic age-based expiry. When your account is deleted, we delete its associated data, including stream history, from the active GiftEngine service.

To request account deletion, email support@giftengine.net, preferably from the address associated with your account. There is currently no self-service account deletion control. We may request proportionate information to verify that the request concerns your account.

Support, security, backup, or legally required records may have separate retention requirements. Retention must be limited to what is necessary for the relevant purpose or legal obligation. Records held independently by Paddle or other providers are subject to their own obligations and privacy notices; deleting GiftEngine data does not itself erase those records.

If you have a paid subscription through Paddle, cancellation must also be handled through Paddle. Do not assume that an account deletion request alone stops recurring billing.

7. Cookies, local storage, and analytics

GiftEngine and its service providers use storage or similar technologies where needed for authentication, security, and saved preferences.

We have not integrated Google Analytics into the GiftEngine website or application and do not run advertising in them. This does not mean that hosting, authentication, security, downloads, or other external services receive no technical data. Optional non-essential tracking, if introduced, will require an updated notice and consent where applicable.

8. Your privacy rights

Depending on applicable law, you may request access, correction, deletion, restriction, or portability of your personal data; object to processing based on legitimate interests; and withdraw consent for processing based on consent. These rights are subject to the conditions and exceptions provided by law.

Send requests to support@giftengine.net. If you are a viewer rather than an account holder, tell us which stream or processing your request concerns so we can assess it. Where the GDPR applies, we respond without undue delay and normally within one month, with any permitted extension explained within that period.

You may complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or another competent supervisory authority, including the authority where you live or work.

9. Age requirements

GiftEngine accounts and use of the application are intended for people aged 18 or older. This restriction does not mean that all viewers of a connected live stream are adults. Viewer information remains subject to the protections and rights described above.

If you believe a person under 18 has created a GiftEngine account, contact us so we can investigate and take appropriate action.

10. Changes and contact

We will update this policy when relevant processing changes and provide additional notice or seek consent where required. Questions about this policy or your information can be sent to support@giftengine.net.