Last updated: 8 August 2026
sendBoop is operated under the trading name Ahem (ABN 93 633 150 356) (“we”, “us”, “our”). We operate the sendBoop platform at sendboop.com.
This policy explains what personal information we collect, why we collect it, how we use and disclose it, and how you can access or correct it. We manage your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
We only collect personal information that is reasonably necessary for our functions and activities.
| Category | Data | Purpose |
|---|---|---|
| Buyer account | Email address | Authentication, order confirmation and purchase history |
| Product content | Sender name, recipient name and personal message | Creating and displaying the Product |
| Uploaded media | Images and audio recordings, where provided | Personalising the Product as directed by the buyer |
| Payment | Payment details processed by Stripe (we do not store card numbers) | Processing your purchase |
| Referral | Referral code and referring Product URL | Applying referral discounts |
| Marketing preference | Your checkbox selection and related records, including when it was recorded and the version of the wording shown | Recording and managing your marketing preference and demonstrating compliance |
| Category | Data | Purpose |
|---|---|---|
| Analytics | Page views, events, browser type, device type and approximate location derived from IP address | Understanding and improving the platform |
| Error tracking | Error traces and request context | Diagnosing and fixing technical issues |
| Rate limiting | IP address and request timestamps | Preventing abuse |
| Payment fraud prevention | Device and browser signals, IP address and interaction patterns | Stripe uses this information to detect and prevent fraud |
Recipient first names are provided by the buyer as part of the Product creation process. When a recipient or another person views a Product URL, they may generate technical and analytics information such as page views, browser type, device type, approximate location derived from IP address and error traces, among other analytical data.
We do not ask you to provide sensitive information, such as health information, racial or ethnic origin, political opinions or biometric data. If you choose to include sensitive information about yourself or another person, you confirm that you have any necessary consent to do so and understand that it will be used to provide the Product and shared with anyone who has its unique URL.
We use personal information for the purpose for which it was collected, for related purposes you would reasonably expect, and as otherwise permitted or required by law. We use it to:
If you opt in to marketing at checkout, we use the purchaser’s email address and the sender’s first name to send occasional sendBoop news, new Products and offers. You may unsubscribe at any time.
We do not sell, rent or trade personal information. We do not use Product content to train artificial intelligence or machine-learning models, and will not do so without your separate consent. If we materially change how we use personal information, we will update this policy and obtain consent where required by law.
We share personal information with service providers that help us operate the platform. They process it for the purposes described below and under obligations to protect it.
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| Stripe | Payment processing and fraud detection | Email address, transaction details, and device and browser signals | United States |
| Resend | One-time passcodes, confirmations, optional marketing emails and audience management | Email address, sender first name, subscription or unsubscribe status, Product URL and recipient name, as relevant | United States |
| PostHog | Product analytics | Anonymous events; purchaser email on purchase events | United States |
| Sentry | Error tracking | Error traces and request context | United States |
| Cloudflare | File storage | Uploaded images, audio and Product files | United States |
| Neon | Database hosting | Database records | United States |
| Upstash | Rate limiting | IP address and request timestamps | United States |
| Vercel | Application hosting | Data in transit and edge logs | United States |
Stripe may use personal information in accordance with Stripe’s Privacy Policy. During checkout, Stripe collects device and browser data, including device identifiers, connection information and interaction patterns, among other analytical data, to detect and prevent fraudulent transactions. This collection occurs directly by Stripe and is governed by its privacy policy.
We may also disclose personal information where required or authorised by law, including to law-enforcement or regulatory bodies.
As described above, personal information is transferred to and stored in the United States by our service providers; Cloudflare and Vercel also operate global edge networks, so data in transit and cached content may be handled in other countries where their edge servers are located.
When a Product URL is shared through a messaging service, the service may generate a link preview that includes the recipient’s first name in the page title. The Product may be cached or indexed by third parties, and we do not control how long they retain it.
The buyer provides the recipient’s name when creating the Product. If you have received a Product and would like your name removed from its preview, contact us using the details below. We can update the page metadata, although cached previews may remain until the relevant service refreshes them.
| Data | Retention period |
|---|---|
| Buyer account | For as long as reasonably necessary to provide the service, or until deletion is requested, subject to legal retention requirements |
| Purchased Product content | For a reasonable period appropriate to the Product. We do not guarantee indefinite availability. See our Terms & Conditions. |
| Pending, unpurchased Product data | Automatically deleted after a short period |
| Payment records | As required by applicable legal and financial record-keeping obligations |
| Marketing preference and unsubscribe records | While needed to manage marketing preferences, honour unsubscribe requests and demonstrate compliance, including after marketing has stopped where reasonably necessary |
| Analytics data | According to our analytics provider’s retention settings |
| Error logs | According to our error-tracking provider’s retention settings |
| Rate-limiting data | Seconds to minutes |
We periodically review retained personal information and take reasonable steps to delete or de-identify it when it is no longer needed for the purposes described in this policy, unless retention is required or authorised by law.
We use PostHog for product analytics. PostHog sets cookies to distinguish visitors and record page views and events. We do not use advertising cookies or cross-site tracking.
Stripe may set cookies or use local storage during checkout for fraud prevention and payment processing.
sendBoop is not directed at minors. You must be at least 18 years old to make a purchase. We do not knowingly collect personal information from anyone under 18. If we become aware that we have done so, we will take reasonable steps to delete it.
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Our security measures are proportionate to the information we hold and are reviewed from time to time.
Payment card details are processed by Stripe. We do not see or store your card number.
No system is completely secure, and we cannot guarantee absolute security. If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner where required by the Notifiable Data Breaches scheme.
You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Email us using the address below. We will respond within a reasonable period and, if we refuse a request, explain our reasons where required by law.
Because purchased Products may have been shared with recipients who rely on continued access, we assess requests to delete Product content individually. We can deactivate a Product URL so it is no longer accessible. Other personal information can be deleted where appropriate, subject to any records we reasonably need to retain to meet legal obligations, maintain transaction records or honour an unsubscribe request.
If you opt in to marketing at checkout, we record that preference and may send occasional sendBoop news, new Products and offers to the purchaser’s email address. Marketing is optional and you can complete a purchase without opting in.
You may unsubscribe at any time. One-time passcodes, order confirmations and other service messages are not marketing and may still be sent where necessary to provide the service.
If you believe we have mishandled personal information, please contact us first so we can try to resolve the issue.
We may update this policy from time to time. If we make material changes, we will post the updated policy with a revised date. Where practical, we will notify affected users before material changes take effect. The updated policy applies from the date posted, except where further notice or consent is required by law.
For privacy questions, access or correction requests, or complaints:
Privacy contact: privacy@sendboop.com
Business name: Ahem
ABN: 93 633 150 356