Privacy Policy

Introduction

So Surprised ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

Information We Collect

Personal Information

Name, email address, phone number
Payment information (processed securely via Stripe)
Delivery addresses for gift boxes and experiences
Profile information for sellers (business name, credentials)

Surprise Information

Recipient details you provide in surprise briefs
Booking details, preferences, and special requests
Photos uploaded by sellers after experience completion

Automatically Collected Information

Device information and IP address
Usage data and analytics
GPS location data for live tracking (with your consent)

How We Use Your Information

To process bookings and facilitate surprise experiences
To communicate with you about your bookings and account
To process payments and prevent fraud
To verify seller credentials and approve listings
To provide customer support and resolve disputes
To improve our platform and user experience
To send marketing communications (with your consent)

Information Sharing

We do not sell your personal information. We share your information only in the following circumstances:

With Sellers: Recipient details are shared after booking confirmation to enable experience fulfillment
Service Providers: Stripe (payments), AWS (hosting), Twilio (SMS), SendGrid (email)
Legal Requirements: When required by law or to protect our rights
Business Transfers: In the event of a merger or acquisition

Data Security

We implement industry-standard security measures to protect your information:

Encrypted data transmission (SSL/TLS)
Secure payment processing via Stripe (PCI-DSS compliant)
Access controls and authentication requirements
Regular security audits and monitoring

Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@sosurprised.ca