Last Updated: November 22, 2021
Here at EcardWidget, our goal is to empower you to easily build powerful solutions using the best ecard widget in the world! We do not sell or mine your data for any reason.
We collect the bare minimum of personal data necessary to create and administer accounts. The ecards you build and the entries you collect using EcardWidget are yours alone.
Personal Data We Collect
We collect the minimum amount of personal data required to provide ecard services.
When you sign up to use EcardWidget, you provide:
- your first and last name,
- your email address,
- the name of your organization,
- a password for your account, and your IP address.
We also collect some of this information when you contact us for more information, such as through email, chat, or support requests. Additionally, your email address may be provided to us by someone you know when they configure notification emails for their ecards.
When you upgrade your organization to a paid plan, we collect for your organization:
- the billing contact first and last name,
- the billing contact email address,
- the billing address, and
- the credit card to charge.
All of this information must be accurately provided to use EcardWidget. If you are unable or unwilling to provide this information, you will not be able to sign up for an account or upgrade to a paid plan.
We record information about how and when you use EcardWidget, including, for example, your IP address, time, date, browser used, and actions you have taken within the application. This information helps us to improve our services both for you and for all our users.
How We Use Personal Data
We use this personal information to provide ecard services, not to mine or sell your data.
We use your personal information to provide services to you and to communicate with you:
- We show your first and last name in EcardWidget when you log in.
- We use your email address as your username when you log in. We also use your email address to send notification emails from EcardWidget, including announcements about new product features.
- We use your organization name throughout EcardWidget so that you and your customers know which organization you are interacting with.
- We use your password solely to verify access to your account. We do not store your actual password, just an undecipherable representation (encrypted hash).
- We use your IP address to personalize EcardWidget based on where you are located and to help prevent fraud or abuse of our service.
We use your billing information solely to communicate with you about your paid subscription and charge your credit card for services. EcardWidget does not capture, process, store or transmit credit card information. Stripe, a third-party PCI compliant payment processor, handles all interactions with credit card information on our behalf.
We use personal information for auditing, research and analysis to operate and improve EcardWidget. We may use certain other information collected from you to help diagnose technical problems, administer EcardWidget, and improve the quality and types of services delivered.
Reasons We Share Personal Data
We share information with authorized third parties to provide ecard services, and with authorities to reduce crime and abuse.
Personal information we gather is for internal use only and we will not authorize the release of this information to anyone outside EcardWidget, except as clearly described below.
Should you breach our Terms of Service, or if we are under a duty to disclose or share your personal data in order to comply with any legal obligations, we may disclose your information to a relevant authority. This may include exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction. Specifically, we may release the information we collect to third parties when we believe it is appropriate to comply with the law, to enforce our legal rights, to protect the rights and safety of others, or to assist with industry efforts to control fraud, spam or other undesirable conduct.
How to Access & Control Your Personal Data
You can access, download, update or remove your information at any time by logging in to your account.
You can opt out of marketing emails by clicking the link at the bottom of each email.
You can easily access or modify your personal information in EcardWidget at any time:
- You can access and modify your personal information by logging into EcardWidget using your email address and password and going to https://ecardwidget.com/dashboard. On this page you can edit your name and email address and change your password.
- If you have forgotten your password, you can reset your password by going to https://ecardwidget.com/main/recover.
When you change your personal information, we make every effort to update this information in all of our systems. However, some historical data, like previous support requests you submitted, may reflect the information provided at the time the information was initially recorded. This historical data will not affect your future use of EcardWidget or new communications with us.
You can easily opt out or remove your personal information from EcardWidget at any time:
- You can opt out of receiving marketing emails from EcardWidget by clicking the “unsubscribe from this list” link included in every email. This will opt you out of receiving any notifications not specifically related to your account, so you will only learn about new features, changes to our terms, etc. by logging in to EcardWidget.
- You can also permanently delete your user account by going to submitting a support ticket.
Opting out of receiving marketing emails will not affect your ability to use EcardWidget. Conversely, deleting your account will not affect your ability to receive marketing emails and become aware of future product features you may be interested in.
When you delete your account, we make every effort to remove your personal information from all of our systems. However, some historical data, like previous support requests you submitted, will be retained for customer support purposes. After deleting your account, your organization, forms and entries will no longer be accessible or recoverable, and you will no longer receive notifications from EcardWidget about your account.
Authorized organization users can export all entry data and uploaded files from EcardWidget at any time for any reason.
Data Collected by You
You are responsible for obtaining consent and maintaining any personal information you collect with your ecards.
Please let us know if your personal information was improperly collected by our users.
While EcardWidget only collects the personal information necessary to provide ecard services, you may collect a wide variety of information from your customers using the ecards you create with our service.
We have no direct relationship with your customers, so you are responsible for making sure you have obtained the appropriate permission for us to collect and process information about these individuals. We may share information you collect via EcardWidget for the same reasons we share personal data, such as with third parties to provide services on your behalf or with legal authorities when obligated to assist in criminal investigations.
If one of our users has collected your information using a EcardWidget, please contact the form owner directly to assist with obtaining, correcting, or removing this information. If you feel the form has collected information about you in a way that violates our Terms of Service, please submit a ticket.
Authorized Third Parties
We use a number of authorized third-parties to provide ecard services. They are not permitted to use information we share with them for any other purpose.
Secure hosting of EcardWidget is essential to both us and our customers. That is why we entrust Digital Ocean, an industry leader in secure cloud hosting, to protect all of our customer data.
We use Digital Ocean to host our server infrastructure. They have strict security protocols that you can read about on their website: "DigitalOcean is committed to working with third-party data center providers that maintain industry-leading access control, including video surveillance, security, access lists, and exit procedures. We regularly audit our data centers to meet our regulatory requirements and validate proper implementation of our security requirements." Read more on their website.
EcardWidget uses industry leading payment processors for secure PCI-compliant handling of credit card information for our subscription plan payments.
EcardWidget sends thousands of emails each month, both to our customers and to your customers when they fill out your ecards. We use multiple email providers to ensure secure and reliable email delivery.
EcardWidget provides direct one-on-one support to all our customers, not a public forum free-for-all. We leverage Tawk.to to provide email and chat support for our customers.
You may disable cookies within your browser to block this tracking by Google, understanding that doing so may affect your ability to use the full functionality of the EcardWidget. For certain browsers, you can also prevent Google from collecting information (including your IP address) via cookies and processing this information by downloading and installing this browser plug-in: http://tools.google.com/dlpage/gaoptout.
EcardWidget does not include Google Analytics on your public or embedded ecard widgets, and does not track usage by your customers.
EcardWidget does not include Inspectlet on your public or embedded ecard widgets, and does not track usage by your customers.
Safeguarding Your Information
We work hard to keep your information safe and secure. Please do your part and protect your account password.
We take reasonable and appropriate measures to protect personal information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in the processing and the nature of the personal information. We rely on Digital Ocean to safeguard the physical and technical security of your information, and we have documented and enforced organizational controls to limit access to, and to protect your information and the information you collect via your ecard widget.
EcardWidget accounts require an email address and password to log in. You must keep your email address and password secure, and never disclose it to a third party. If you feel like the security of your account has been compromised, you must inform us immediately so we can take protective measures to safeguard your information.
We Operate in the United States
Our servers and data are securely stored in geo-redundant datacenters in the United States.
Our servers and offices are located in the United States, so your information may be transferred, stored, or processed in the United States. While the data protection, privacy, and other laws of the United States might not be as comprehensive as those in your country, we take many steps to protect your privacy. By using EcardWidget, you understand and consent to the collection, storage, processing, and transfer of your information to our facilities in the United States and to those third parties with whom we share it as described in this policy.
We comply with the California Consumer Protection Act.
EcardWidget complies with the provisions of the California Consumer Protection Act, which grants specific data privacy rights to California residents.
If you have a privacy or data use concern related to EcardWidget, please email us at [email protected] so we can promptly address the issue.
Accuracy and Retention of Data
You can easily update your information at any time by logging into your account.
Deleted information may be retained in backups, but if you delete your organization, all of your ecards and entries will be permanently deleted.
We do our best to keep your data accurate and up to date, to the extent that you provide us with the information we need to do so. If your data changes (for example, if you have a new email address), then you are responsible for logging into your account and updating this information, as this is the only way we can verify your identity given the limited amount of personal information we collect.
We will retain your information for as long as your account is active or as long as your information is necessary to provide you with our services. We may also retain and use your information to comply with our legal obligations, resolve disputes, prevent abuse, and enforce our agreements.
Organization information you delete during your use of EcardWidget, such as entries, may be retained in secure backups. However, if you delete your organization, all of the organization’s forms and entries will be permanently deleted and will not be recoverable.
Questions & Concerns
If you have a question or complaint about this Privacy Statement or our information collection practices, please contact [email protected]. We will investigate the matter and are committed to resolving any privacy concerns that you may have.