Last updated August 8, 2026

Privacy, in plain language.

MessageFold stores the information needed to create, sign, deliver, and manage a group card. We do not sell personal information or use private card messages to train generative AI models.

Information we collect

Organizers provide their email, the recipient’s name and email, event timing, and optionally an invite roster. Signers provide a display name, message, optional image or GIF, and optionally an email for a delivery confirmation. We also collect basic security and product analytics such as IP-derived rate-limit keys, device identifiers, referral source, and interaction events.

How we use it

• To render and deliver the card.
• To send invitations, requested confirmations, and automated reminders to non-signers.
• To process one-time payments and prevent abuse.
• To understand whether MessageFold works and improve the product.

Sharing and processors

MessageFold uses infrastructure and service providers including Vercel, Supabase, Resend, Stripe, Giphy, and PostHog. Each receives only the information needed to provide its part of the service. Card pages are private by unguessable link and carry noindex directives, but anyone with the link may view them.

Retention and choices

Reminder emails include one-click opt-out. You may request access or deletion by emailing privacy@messagefold.com. Transaction and abuse-prevention records may be retained where law or security requires it.

Contact

Questions or requests: privacy@messagefold.com.