Privacy Policy

Last updated: June 5, 2026

This policy explains how Jen Built It LLC ("we") handles data for account holders of the Giveaway Widget service. It is about your account with us. It is not the privacy notice your giveaway shows entrants — you provide that to your own entrants (set your Privacy Policy URL in your Brand profile).

1. What we collect

• Account details — your email address and a securely hashed password (PBKDF2; we never store your password in plain text).
• Your giveaway configuration — names, prizes, dates, brand colors, logo and social handles you enter, and the entry data your giveaways collect on your behalf.
• Operational data — IP address and request metadata used for rate limiting, bot protection (Cloudflare Turnstile), and security.
• Billing — if you subscribe to a paid plan, payments are processed by Stripe. We do not see or store your full card number.

2. Where it is stored

Account and giveaway data are stored in a Cloudflare D1 database on Cloudflare's edge network. Transactional emails (verification codes, notifications) are sent via Resend. We do not sell, rent, or share your personal data for advertising.

3. Lawful basis

We process your account and giveaway data to perform our contract with you (providing the service). Any marketing email from us is sent only with your separate, explicit consent and you can opt out at any time.

4. Entrant data

Entry data your giveaways collect (entrant emails, names, actions, referrals) is processed by us on your behalf as your service provider. You are the controller of that data and are responsible for the privacy notice and lawful basis you present to your entrants.

5. Retention

We keep your account data while your account is active. Delete your account from the dashboard to remove your account and associated giveaway data, subject to any retention we are legally required to keep.

6. Your rights

You may access, correct, export, or delete your account data. Email hello@jenbuiltit.com and we will respond. California (CCPA/CPRA) and EU/UK (GDPR) residents have additional rights, including the right not to have personal information sold — we do not sell personal information.

7. Security

Passwords are hashed with PBKDF2 and a per-user salt; sessions use signed, HttpOnly cookies; all traffic is served over HTTPS. No system is perfectly secure, but we build for it from the start.

8. Changes & contact

We will update this page and the "last updated" date when this policy changes. Questions: hello@jenbuiltit.com, Jen Built It LLC, 10800 S Lloyd Dr, Worth, IL 60482.