Privacy Policy

1. Introduction

Merry Magic Mail ("we," "our," or "us") is operated by Droidsize Technologies Pvt. Ltd., a company registered in India. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website merrymagicmail.com and use our services.

Company Details:
Droidsize Technologies Pvt. Ltd.
WeWork Berger One, Sector 16B
Noida, Uttar Pradesh 201301, India
Email: support@merrymagicmail.com

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address when you create an account or sign up for our newsletter
• Letter Content: Child's name, age, interests, and letter content you provide to create personalized Santa letters
• Shipping Information: Physical address if you order printed letters
• Payment Information: Processed securely through Polar; we do not store credit card details
• Voice Recordings: Audio from Santa calls (processed in real-time, not permanently stored)
• Wishlist Data: Product preferences and wishlist items

2.2 Automatically Collected Information

• Device information (browser type, operating system)
• IP address and approximate location
• Usage data (pages visited, time spent, interactions)
• Cookies and similar tracking technologies

3. How We Use Your Information

• To provide and personalize our Santa letter and voice call services
• To process and fulfill orders for printed letters
• To send transactional emails (order confirmations, letter delivery)
• To send marketing communications (with your consent)
• To improve our services and user experience
• To detect and prevent fraud or abuse
• To comply with legal obligations

4. AI-Generated Content

Our service uses artificial intelligence (OpenAI) to generate personalized Santa responses. The information you provide (child's name, interests, letter content) is sent to OpenAI's API to generate responses. This data is processed according to OpenAI's privacy policy and data processing terms. We do not use your data to train AI models.

5. Data Sharing

We may share your information with:

• Service Providers: Payment processors (Polar), AI services (OpenAI, ElevenLabs), email services, hosting (Vercel)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger or acquisition

We do not sell your personal information to third parties.

6. Children's Privacy (COPPA Compliance)

Our service is designed for use by parents and guardians on behalf of children. We do not knowingly collect personal information directly from children under 13 without parental consent.

• Parents/guardians must create accounts and provide information on behalf of children
• We collect only information necessary to provide the service
• Parents can review, delete, or refuse further collection of their child's information by contacting us
• We do not condition a child's participation on disclosure of more information than necessary

7. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specifically:

• Account data: Until you request deletion
• Letter content: 1 year after creation (or until deleted by you)
• Voice call data: Processed in real-time, not permanently stored
• Transaction records: 7 years (as required by law)

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your personal information
• Opt out of marketing communications
• Data portability
• Withdraw consent

To exercise these rights, contact us at support@merrymagicmail.com

9. Cookies

We use cookies and similar technologies to enhance your experience. See our Cookie Policy for details. You can manage cookie preferences through your browser settings.

10. Security

We implement appropriate technical and organizational measures to protect your information, including:

• HTTPS encryption for all data transmission
• Secure payment processing through PCI-compliant providers
• Regular security audits and monitoring
• Access controls and authentication

11. International Transfers

Your information may be transferred to and processed in countries other than India, including the United States (where our service providers like Vercel, OpenAI are located). We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or our practices, please contact us:

Droidsize Technologies Pvt. Ltd.
WeWork Berger One, Sector 16B
Noida, Uttar Pradesh 201301, India
Email: support@merrymagicmail.com