Privacy Policy

1. Introduction

WishfulMail ("we," "us," or "our"), operated by Taskavel LLC, operates the WishfulMail website and service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

We are committed to protecting the privacy of children and complying with the Children's Online Privacy Protection Act (COPPA), the General Data Protection Regulation (GDPR), and other applicable privacy laws.

By using our Service, you consent to the data practices described in this Privacy Policy.

2. Children's Privacy (COPPA Compliance)

Our Service is designed for use by children under the age of 13 with parental supervision. We strictly comply with COPPA requirements:

• Parental Consent: We require verifiable parental consent before collecting any personal information from children under 13.
• Limited Collection: We only collect information necessary for the Service to function.
• No Advertising: We do not serve behavioral advertising to children.
• Parental Rights: Parents have the right to review, delete, and refuse further collection of their child's information.
• Data Minimization: We collect only the minimum information necessary to provide our Service.

Parents may contact us at any time to review, modify, or delete their child's information by emailing privacy@codingwisely.com.

3. Information We Collect

3.1 Parent/Guardian Information

• Email address (for account creation and message delivery)
• Name (for account identification)
• Payment information (processed securely through Stripe)
• Account preferences and settings

3.2 Children's Information

• Messages and drawings created by the child (sent to parent's email)
• Character preferences (which magical characters they choose to write to)
• Usage data (how the child interacts with our Service, aggregated and anonymized)

3.3 Technical Information

• IP address (for security and geographical compliance)
• Browser type and version
• Device information
• Usage analytics (anonymized)

4. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To deliver messages from children to their parents
• Account Management: To create and maintain user accounts
• Payment Processing: To process payments for additional message slots and donations
• Communication: To send service-related notifications to parents
• Security: To protect against fraud and ensure platform security
• Legal Compliance: To comply with applicable laws and regulations
• Service Improvement: To analyze usage patterns and improve our Service (using anonymized data only)

5. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except as described below:

5.1 Service Providers

• Stripe: For secure payment processing (subject to Stripe's privacy policy)
• Email Services: For delivering messages to parents
• Cloud Hosting: For secure data storage and Service delivery

5.2 Legal Requirements

We may disclose information when required by law, court order, or government request, or to protect our rights, property, or safety.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred, subject to the same privacy protections.

6. Data Security

We implement industry-standard security measures to protect your information:

• SSL/TLS encryption for data transmission
• Encrypted data storage
• Regular security audits and updates
• Limited access to personal information on a need-to-know basis
• Secure payment processing through PCI-compliant providers

However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal information only as long as necessary for the purposes outlined in this Privacy Policy:

• Account Information: Until account deletion is requested
• Children's Messages: Messages are immediately forwarded to parents and deleted from our servers within 30 days
• Payment Information: Retained for legal and tax compliance (typically 7 years)
• Analytics Data: Anonymized data may be retained indefinitely for service improvement

8. Your Rights (GDPR Compliance)

If you are in the European Union, you have the following rights under GDPR:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to data processing in certain circumstances
• Right to Withdraw Consent: Withdraw consent for data processing

To exercise these rights, contact us at privacy@codingwisely.com. We will respond within 30 days.

9. Cookies and Tracking Technologies

We use minimal cookies and tracking technologies:

• Essential Cookies: Required for basic Service functionality
• Session Cookies: To maintain login sessions
• Security Cookies: To prevent fraud and ensure security

We do not use advertising cookies or track users across other websites.

10. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage users to review the privacy policies of any third-party sites they visit.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequacy decisions where applicable.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by email and by posting the new Privacy Policy on our website. Continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us: