Last updated: 16 July 2026
sendBoop is operated under the trading name Ahem (ABN 93 633 150 356) (“we”, “us”, “our”). We operate the sendBoop platform at sendboop.com.
This policy explains what personal information we collect, why we collect it, how we use and disclose it, and how you can access or correct it. We manage your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
We only collect personal information that is reasonably necessary for our functions and activities.
| Category | Data | Purpose |
|---|---|---|
| Buyer account | Email address | Authentication, order confirmation and purchase history |
| Product content | Sender name, recipient name and personal message | Creating and displaying the Product |
| Uploaded media | Images and audio recordings, where provided | Personalising the Product as directed by the buyer |
| Payment | Payment details processed by Stripe (we do not store card numbers) | Processing your purchase |
| Referral | Referral code and referring Product URL | Applying referral discounts |
| Marketing preference | Your checkbox selection and related records, including when it was recorded and the version of the wording shown | Recording and managing your marketing preference and demonstrating compliance |
| Category | Data | Purpose |
|---|---|---|
| Analytics | Page views, events, browser type, device type and approximate location derived from IP address | Understanding and improving the platform |
| Error tracking | Error traces and request context | Diagnosing and fixing technical issues |
| Rate limiting | IP address and request timestamps | Preventing abuse |
| Payment fraud prevention | Device and browser signals, IP address and interaction patterns | Stripe uses this information to detect and prevent fraud |
Recipient first names are provided by the buyer as part of the Product creation process. When a recipient or another person views a Product URL, they may generate technical and analytics information such as page views, browser type, device type, approximate location derived from IP address and error traces.
We do not ask you to provide sensitive information, such as health information, racial or ethnic origin, political opinions or biometric data. If you choose to include sensitive information about yourself or another person in Product content, you confirm that you have any necessary consent to do so and understand that it will be used to provide the Product and shared with anyone who has its unique URL.
We use personal information for the purpose for which it was collected, for related purposes you would reasonably expect, and as otherwise permitted or required by law. We use it to:
At paid checkout, the optional marketing checkbox is selected by default. If you leave it selected and complete your purchase, we use the purchaser’s email address and the sender’s first name to send occasional sendBoop news, new Products and offers. You may uncheck it before paying without affecting your purchase, and you may unsubscribe at any time.
If a Product is offered free as part of a promotion, you may be required to actively select a separate mailing-list checkbox to claim that offer. This requirement is shown before you submit your details. You may choose not to claim the offer and may unsubscribe at any time.
We do not sell, rent or trade personal information. We do not currently use Product content to train artificial intelligence or machine-learning models. If we materially change how we use personal information, we will update this policy and obtain consent where required by law.
We share personal information with service providers that help us operate the platform. They process it for the purposes described below and under obligations to protect it.
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| Stripe | Payment processing and fraud detection | Email address, transaction details, and device and browser signals | United States |
| Resend | One-time passcodes, confirmations, optional marketing emails and audience management | Email address, sender first name, subscription or unsubscribe status, Product URL and recipient name, as relevant | United States |
| PostHog | Product analytics | Anonymous events; purchaser email on purchase events | United States |
| Sentry | Error tracking | Error traces and request context | United States |
| Cloudflare | File storage | Uploaded images, audio and Product files | United States |
| Neon | Database hosting | Database records | United States |
| Upstash | Rate limiting | IP address and request timestamps | United States |
| Vercel | Application hosting | Data in transit and edge logs | United States |
Stripe may use personal information in accordance with Stripe’s Privacy Policy. During checkout, Stripe collects device and browser data, including device identifiers, connection information and interaction patterns, to detect and prevent fraudulent transactions. This collection occurs directly by Stripe and is governed by its privacy policy.
We may also disclose personal information where required or authorised by law, including to law-enforcement or regulatory bodies.
As described above, personal information is transferred to and stored in the United States by our service providers. Before disclosing personal information overseas, we take reasonable steps to ensure that the overseas recipient handles it in accordance with applicable Australian privacy requirements.
When a Product URL is shared through a messaging service, the service may generate a link preview that includes the recipient’s first name in the page title, such as “A card for Alex”. The messaging service may cache that preview, and we do not control how long it retains it.
The buyer provides the recipient’s name when creating the Product. If you have received a Product and would like your name removed from its preview, contact us using the details below. We can update the page metadata, although cached previews may remain until the relevant service refreshes them.
| Data | Retention period |
|---|---|
| Buyer account | For as long as reasonably necessary to provide the service, or until deletion is requested, subject to legal retention requirements |
| Purchased Product content | For a reasonable period appropriate to the Product. We do not guarantee indefinite availability. See our Terms & Conditions. |
| Pending, unpurchased Product data | Automatically deleted after a short period |
| Payment records | As required by applicable legal and financial record-keeping obligations |
| Marketing preference and unsubscribe records | While needed to manage marketing preferences, honour unsubscribe requests and demonstrate compliance, including after marketing has stopped where reasonably necessary |
| Analytics data | According to our analytics provider’s retention settings |
| Error logs | According to our error-tracking provider’s retention settings |
| Rate-limiting data | Seconds to minutes |
We periodically review retained personal information and take reasonable steps to delete or de-identify it when it is no longer needed for the purposes described in this policy, unless retention is required or authorised by law.
We use PostHog for product analytics. PostHog sets cookies to distinguish visitors and record page views and events. We do not use advertising cookies or cross-site tracking.
Buyers who complete a purchase are identified by email in PostHog to help us understand the purchase process. Other visitors remain anonymous.
Stripe may set cookies or use local storage during checkout for fraud prevention and payment processing. The Payload CMS administration area uses a session cookie for administrator authentication. No session cookie is set for buyers or recipients.
Most browsers allow you to manage cookies through their settings. Disabling cookies may prevent some platform features from working as intended.
sendBoop is not directed at children. You must be at least 18 years old to make a purchase. We do not knowingly collect personal information from anyone under 18. If we become aware that we have done so, we will take reasonable steps to delete it.
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Our security measures are proportionate to the information we hold and are reviewed from time to time.
Payment card details are processed by Stripe. We do not see or store your card number.
No system is completely secure, and we cannot guarantee absolute security. If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner where required by the Notifiable Data Breaches scheme.
You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Email us using the address below. We will respond within a reasonable period and, if we refuse a request, explain our reasons where required by law.
Because purchased Products may have been shared with recipients who rely on continued access, we assess requests to delete Product content individually. We can deactivate a Product URL so it is no longer accessible. Other personal information can be deleted where appropriate, subject to any records we reasonably need to retain to meet legal obligations, maintain transaction records or honour an unsubscribe request.
At paid checkout, the optional marketing checkbox is selected by default. If it remains selected and you complete your purchase, we record that preference and may send occasional sendBoop news, new Products and offers to the purchaser’s email address. For paid purchases, marketing is optional and does not affect your ability to purchase: you may uncheck the box before paying.
If a Product is offered free as part of a promotion, you may be required to actively select a separate mailing-list checkbox to claim that offer. This requirement and the kinds of marketing you will receive are displayed before you submit your details. You may choose not to claim the offer and may unsubscribe at any time.
Marketing emails identify sendBoop or Ahem as the sender and include a clear, functioning unsubscribe method. You may unsubscribe at any time, and we will honour that request within the period required by law. One-time passcodes, order confirmations and other service messages are not marketing and may still be sent where necessary to provide the service.
We do not use recipient details supplied for a Product to market to that recipient unless they separately choose to receive marketing.
If you believe we have mishandled personal information, please contact us first so we can try to resolve the issue.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner:
We may update this policy from time to time. If we make material changes, we will post the updated policy with a revised date. Where practicable, we will notify affected users before material changes take effect. The updated policy applies from the date posted, except where further notice or consent is required by law.
For privacy questions, access or correction requests, or complaints:
Privacy contact: privacy@sendboop.com
Business name: Ahem
ABN: 93 633 150 356