Last updated: April 13, 2025
Togather is a digital greeting card platform. When we say "Togather", "we", "us", or "our" in this policy, we mean the company that operates togathercards.com. This policy explains how we collect, use, and protect information about people who use our service — including card creators, signers, and recipients.
When you create an account, we collect:
When someone signs a card, they must be signed in with a Togather account. We collect the name and email address associated with their account. These are stored as a snapshot on the signature at the time of signing.
Recipients open cards via a private delivery link. We may log their IP address and user agent when they view the card, for security and analytics purposes. Recipients don't need an account.
We store the messages, photos, and notes that users submit as part of cards. This content is private until the card creator chooses to deliver it.
We collect standard server logs including IP addresses, browser types, pages visited, and timestamps. We use this for debugging, security, and understanding how people use the product.
We use the information we collect to:
We do not sell your personal information. We do not use your information to serve third-party advertising.
We share your information only in these circumstances:
Photos uploaded as part of card signatures or cover images are stored in AWS S3. They are private by default and accessible only to the card creator and, after delivery, the recipient.
We do not use uploaded photos for any purpose other than displaying them within the card experience.
We retain your account information for as long as your account is active. If you delete your account, we delete your personal information within 30 days, except where we are required to retain it for legal or financial purposes (such as payment records, which we retain for 7 years).
Cards and their contents are retained indefinitely after purchase — they don't expire. If you want a specific card deleted, contact us and we'll remove it.
We use cookies and similar technologies to keep you logged in and to understand how people use Togather. We do not use third-party advertising cookies.
You can control cookies through your browser settings. Disabling cookies may affect your ability to use parts of the service.
Depending on where you live, you may have the right to:
To exercise any of these rights, email us at privacy@togathercards.com. We'll respond within 30 days.
If you're in the European Economic Area or the UK, you have the right to lodge a complaint with your local data protection authority.
Togather is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have, we'll delete it promptly. If you believe a child has provided us with personal information, please contact us.
We take reasonable technical and organisational measures to protect your information — including encryption in transit (TLS) and at rest, access controls, and regular security reviews.
No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it responsibly to privacy@togathercards.com.
Togather integrates with the following third-party services, each with their own privacy policies:
We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by email or by displaying a notice in the service before the changes take effect.
Questions, concerns, or requests about your privacy can be sent to privacy@togathercards.com. We aim to respond within 5 business days.