Privacy

The short version

We collect the minimum needed to run a send-off: names, email addresses, the messages and videos people choose to add, and payment records. We never sell data, never run ads, and never analyze anyone's face or voice.

Reaction recordings

If a recipient chooses to record their reaction, we record their camera and microphone only while their send-off video plays — never before, never after, and only after they explicitly opt in on a screen that explains exactly this.

What's captured: one video of them watching, plus the timing information needed to sync it with the film. Nothing else.

Retention: the recording is kept privately for the recipient alone until they delete it. Deleting it — a single tap, available at the moment of recording and forever afterwards in their portal — permanently removes the original recording, the polished keepsake version, and every copy we hold. This is a hard delete, not a flag.

We never analyze recordings biometrically. No face recognition, no emotion detection, no machine learning of any kind touches them. They are played back to the recipient and to nobody else unless the recipient themselves shares the file.

Recording is entirely optional and declining changes nothing about the experience.

Contributors

Contributors never need an account. We collect a name (shown with your message) and an email address, used for exactly two things: sending you your private edit link, and delivering the recipient's thank-you if they send one. The thank-you email's footer mentions Gratillo; we don't email you otherwise.

Individual contribution amounts are private to each person and shown to no one else — not other contributors, not the recipient, and not the organiser. You see your own amount on your receipt; everyone sees only the pooled total and who took part. The organiser's view is enforced server-side: per-person amounts are never sent to their device.

Money

Each contribution carries an all-in 5.5% fee, shown at checkout, which covers card processing and Gratillo. A £10 contribution adds £9.45 to the gift.

The pooled amount is a personal gift from colleagues, given freely — it is not wages, not a bonus, and not paid by any employer. Payments are processed by Stripe; gift money flows directly to an account in the recipient's name and never sits with Gratillo.

Your rights

Under UK GDPR you can ask us for a copy of your data, ask us to correct it, or ask us to erase it. Erasure of media (videos, recordings) is built into the product as described above; for anything else, email privacy@gratillo.com and we'll act within 30 days.

Data is stored in the UK/EU. We use Supabase (database, file storage), Stripe (payments), Resend (email) and Cloudflare (video delivery) as processors.