Privacy Policy

I Promise To operates the I Promise To website at i-promise-to.com.

This Privacy Policy explains how I Promise To ("we") collects and uses personal data when you use I Promise To. We act as the data controller for the personal data described below.

• Sender details — your name and email, so we can send you a receipt and follow-up emails about your order. Legal basis: performance of a contract.
• Recipient details — the recipient's name and email, so we can deliver the envelope. Legal basis: performance of a contract (with the sender) and our legitimate interest in delivering the ordered product.
• Promise content — the text of the promises and any note. Stored solely to display the envelope to the recipient.
• Order metadata — order ID, delivery choice, timestamps, and email delivery/open logs. Used for support, deliverability, and abuse prevention. Legal basis: legitimate interest.
• Payment data — collected directly by Paddle, our Merchant of Record. We only see the resulting transaction ID and status.
• Analytics — privacy-friendly, cookieless page-view statistics via Plausible Analytics to understand how the site is used. No cross-site advertising profiles are built from this data.

• Paddle — Merchant of Record for all payments, tax compliance and invoicing.
• Supabase — hosted database and email queue.
• Lovable — hosting and email delivery infrastructure.
• Plausible Analytics — privacy-oriented website analytics.
• Professional advisers — legal, accounting, or auditors, only where necessary.
• Authorities — where required by law.

We do not sell or rent your personal data, and we do not use it for cross-site advertising.

Order and promise content is stored for as long as the envelope link is expected to be usable. Successful email logs are deleted after 30 days; failure logs after 180 days. Unused unsubscribe tokens are kept for up to a year. You can request earlier deletion — see below.

Depending on where you live, you have rights to access, correct, delete, restrict or object to processing of your personal data, to portability, and to withdraw consent. You also have the right to complain to your local data protection authority. To exercise a right, email help@i-promise-to.com. We will respond within one month.

Data is stored in a secure hosted database with encryption in transit and at rest, access controls, and audit logs. Envelope links are unguessable — anyone who has the link can view the envelope, so only share it with the intended recipient.

Our infrastructure providers may process data outside the UK/EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses to safeguard your data.

We use strictly necessary storage to run the site and remember your progress through the order flow. We also use Plausible Analytics, which is designed to minimise personal data collection and does not use third-party advertising cookies.

Last updated: 2 August 2026.