Privacy Policy

Last updated: September 10, 2026

1. About this policy

This policy explains what we do with the personal information you give us when you use DearYou to create personalized birthday invitations, at us.dearyou.ai and dearyou.ai.

The company behind DearYou is DearYou (dearyou.ai), a business based in Spain. That means your information is handled in Europe — see section 8. You can reach us about anything in this policy at hello@dearyou.ai.

2. What information we collect

• The photo you upload. The image of the person the invitation is for — usually your child. This is what we use to create the design.
• Your delivery email address. Where we send the finished invitations.
• What you tell us in the chat. The details you give us so we can personalize the design: the name that will appear, the theme, colors, the date of the party, and anything else you ask for.
• Payment information. Payments are handled directly by Stripe. We do not store your card details.
• Measurement and advertising data. Only if you accept the corresponding cookies — see section 10.

In the vocabulary used by California and other state privacy laws, that breaks down as follows. This is also the list of what we have collected and disclosed over the past twelve months:

We use the photo only to create the invitations you ordered, and we delete the original after delivery.

3. How we collect it

Almost all of it comes straight from you: you upload the photo, you type the details into the chat, and you give us the email address you want the invitations sent to. Payment details go directly to Stripe and never reach us.

Measurement and advertising data is collected automatically by the providers listed in section 6, and only after you have accepted that category in the cookie banner.

4. What we use it for

• Creating and delivering the personalized invitations you ask for.
• Taking payment for your order.
• Emailing you the result and answering your questions.
• Meeting our legal obligations around invoicing and tax.
• With your consent, measuring how the site is used and showing you our advertising.

5. What we don't do with it

• We don't sell your personal information.
• We don't store your card details.
• We don't create accounts or profiles for children.
• We don't keep the original photo once your order has been delivered.

6. Who we share it with

To run the service we work with providers who handle information on our behalf. Each one only handles what it needs to do its job:

We do not sell your personal information, and we have not sold it in the past twelve months.

One point worth being straight about: if you accept advertising cookies, the advertising services above receive information about your visit so that we can measure and target our ads. Several state privacy laws treat that as "sharing" for cross-context behavioral advertising, or as "targeted advertising". You control it: those cookies are off until you accept them, and you can turn them off again at any time from the cookie banner. See section 10.

We may also disclose information where the law requires it, or to establish or defend legal claims.

7. How long we keep it

• The original photo: we delete it from our servers once your order has been delivered, and in any case within 24 hours.
• Billing records: we are a Spanish business, and Spanish law generally requires invoices and tax records to be kept for 4 years for tax purposes and 6 years under commercial law. In some cases the period can be longer.
• Your email address and order details: for as long as you are a customer, and afterwards for as long as we need them to meet the legal periods above.

8. Where your information is processed

DearYou is based in Spain and our main hosting is in Germany, in the European Union. If you use the service from the United States, the information described in this policy is transferred to and processed in the European Union, and it is protected there by European data protection law.

Some of our providers (Stripe, Google, Meta, TikTok) may process information in other countries, including the United States. Where that happens, those transfers are covered by adequacy decisions of the European Commission and/or by standard contractual clauses that are designed to keep the level of protection intact.

9. Children's privacy

Our invitations usually feature a child, so it is worth being precise about how that works.

DearYou is a service for adults. It is not directed to children, and children cannot use it on their own. The person who orders the invitations and uploads the photo must be an adult who is the parent or legal guardian of the child, and confirms when ordering that they have the authority to let us use that image.

We do not create accounts or profiles for children, and we do not knowingly collect personal information directly from anyone under 13. The photo is used only to generate the design and is deleted after delivery, as set out in section 7.

If you are a parent or guardian and you believe a child has given us personal information without your involvement, write to hello@dearyou.ai and we will delete it.

10. Cookies and your choices

We use cookies and storage that are necessary for the site and the chat to work and, with your consent, cookies for measurement and advertising. Measurement and advertising cookies are off until you turn them on.

You can accept them, reject them or change your mind at any time from the cookie banner (the "Customize" button). Rejecting them does not limit your access to the service in any way.

11. Your privacy rights

Depending on where you live, state privacy law — California's CCPA as amended by the CPRA, and the comprehensive privacy laws of states such as Virginia, Colorado, Connecticut, Texas, Oregon and others — gives you the following rights. We extend them to every customer in the United States, wherever you live:

• Know and access. Ask us what personal information we have about you, where we got it, what we use it for, who we disclose it to, and get a copy of it.
• Delete. Ask us to delete the personal information we hold about you.
• Correct. Ask us to fix anything that is wrong.
• Portability. Receive your information in a portable format.
• Opt out. Tell us not to share your information for targeted advertising. You can do this yourself at any time by rejecting advertising cookies in the cookie banner.
• No retaliation. We will not deny you the service, charge you a different price or give you a worse result for exercising any of these rights.

How to exercise them: write to hello@dearyou.ai from the email address you used to place your order, and tell us what you would like us to do. That email address is how we confirm the request is really yours; if we cannot match it to an order, we may ask you for something else that helps us verify it, and we will not use what you send us for anything but that. It costs nothing, and we will respond within the time the applicable law allows.

You can also have an authorized agent make a request on your behalf. We will ask for proof that you gave them permission.

12. Security

We apply reasonable technical and organizational measures to protect your information: an encrypted connection, restricted access, and deletion of the original photo after delivery. No system is infallible, but we work to keep the risk as low as we can.

13. Changes to this policy

If we change how we handle your information, we will update this page and change the date at the top. If the change is significant, we will tell you before it takes effect.

14. Contact us

For anything to do with your privacy, including any of the rights in section 11, write to hello@dearyou.ai.