Privacy
Last updated: June 2026
Hugazo helps a group create one greeting card and send it. We collect as little as possible and never sell your data. This notice explains what we collect and your rights under Canada’s PIPEDA and Quebec’s Law 25.
What we collect
Your email address when you sign in. The card’s details and each signature — the signer’s name, their message, and an optional photo. When you pay to send a card, the payment is processed by Stripe (Canada) or Mercado Pago (Argentina); we never see or store your card number. We briefly log your IP address to prevent spam and abuse.
Cookies
We use a strictly necessary cookie to keep you signed in. We use Google Analytics only if you accept it in the banner; decline and no analytics cookies are set. You can change your choice any time by clearing the cookie.
Who we share it with
Only the service providers that run Hugazo: Supabase (database and sign-in), Stripe and Mercado Pago (payments), Resend (email), Anthropic (to generate the suggested messages you can edit), Google Analytics (only with your consent), and Vercel (hosting). We never sell your data.
How long we keep it
We keep a card and its signatures while your account is active so you can return to it. Ask us to delete a card or your account and we’ll remove it.
Your rights
Under PIPEDA and Quebec’s Law 25 you can ask to see, correct, or delete your personal information, and withdraw a consent you’ve given. We’ll respond within the timelines the law sets.
Contact us
For any privacy question, or to access or delete your data, email hola@hugazo.com.