Privacy Policy

• About employees, from the company: name, work email, office, birthday as month and day only (never the year), start date, dietary notes and delivery preference.
• About offices: address, delivery contact, phone, hours and delivery notes.
• About the people who use Cheersmith: name and work email of HR staff who sign in, and what you tell us in the Get started or Partner with us forms.
• About orders: which gift went to whom, when, from which shop, the card message and what it cost.

We don't collect home addresses, birth years, government IDs or payment card numbers. The company decides who is in its list and is responsible for having the right to share it with us.

Only to run the service: to work out who is celebrating, order the gift, get it delivered to the office, email HR about problems and a weekly summary, and send the monthly bill. We don't sell personal information, show ads or use it for marketing to employees.

• The bakery or shop making a gift sees what it needs for that one order: the employee's name, the office address and delivery contact, the card message and any dietary notes.
• Your company's HR team sees your company's data. No other company does.
• Services we run on: Fly.io (hosting), Neon (database), WorkOS (sign-in), Resend (order and notification emails) and Zoho (our own email). They keep the data for us and may not use it for anything else.

We may also share information when the law requires it.

We use a cookie to keep HR staff signed in, and your browser remembers the light or dark theme you pick. We don't use advertising or tracking cookies.

We keep a company's data while it uses Cheersmith. HR can remove an employee at any time, and a removed employee gets no more gifts. When a company leaves, or asks us to, we delete its employees, offices, gift settings and order history within 30 days, and its HR staff can no longer sign in. Copies in our database provider's short-term backups expire on their own within 30 days after that.

Employees who want their details changed or removed can ask their HR team or email us, and we'll let their company know.

Data travels over encrypted connections, sign-in is handled by WorkOS, and each company can only see its own data. No system is perfectly secure; if we learn of a breach affecting your data, we'll tell you promptly.

Cheersmith is a service for businesses and isn't meant for anyone under 18.

If we change this policy, we'll update the date above and email signed-in companies about anything that matters. Our Terms of Service cover the rest of how the service works.