Privacy policy

Who handles your information

Veloxa Technologies LLC, a Wyoming limited liability company, United States, operates Gleesome and is responsible for platform data handling described here. Use the contact form’s Privacy category for privacy questions or requests.

Information we collect

Account information includes name, email, password hash, role, language preference and verification/security records. Campaign information includes organizer and beneficiary details, relationships, location, story, images, updates and any supporting documents submitted for review. Support messages include the contact details, category and content you provide, plus handling notes.

Donation records may include donor name, email, optional phone/message, anonymity and contact-sharing choices, amount, currency, status and payment references. We also keep operational financial records, payout wallet details and verification records. Stripe handles full card numbers and card security codes; Gleesome does not store them. Session identifiers, IP addresses, browser/device information and security logs may be processed for service operation and abuse prevention.

How and why we use information

We use information to manage accounts, review and publish campaigns, process and reconcile payments, handle payout requests, send service emails, answer support requests, investigate abuse, protect users and meet applicable recordkeeping or legal obligations. Where applicable law requires a legal basis, these activities rely on performing the service, legitimate operational and security interests, legal obligations or consent for optional sharing.

Public content and donor choices

Published campaign stories, images and updates are public and may be indexed or copied by others. Share only information you have permission to publish, especially health information and children’s details. Private review documents are not public campaign content.

A non-anonymous donation may display the donor’s name, but it does not automatically authorize sharing their email or phone. Organizer access to donor contact details depends on the donor’s explicit contact-sharing choice and applicable anonymity restrictions. Payment and security records remain accessible to authorized platform personnel as needed, including for anonymous donations.

Service providers and disclosures

We use Stripe for payment processing, Brevo for automated service email and Hostinger for hosting. The site also loads fonts from Google Fonts and interface resources from jsDelivr; those requests can disclose your IP address and browser information to the resource providers. Providers may process data in other countries under their terms and applicable safeguards. We may disclose necessary information to comply with law, protect rights or investigate misuse. We do not sell personal information or run advertising trackers in the current site.

Cookies and browser storage

Gleesome uses a session cookie for sign-in, security and form protection, and a language cookie to remember English or Arabic. These are service/security and preference functions. The current application has no analytics or marketing cookie integration, so it does not display a pretend optional-cookie consent banner.

Stripe payment components may use their own cookies and device information for payments and fraud prevention under Stripe’s privacy and cookie information. Browser controls can remove or block cookies, but blocking necessary cookies may prevent sign-in or payments. If optional tracking is introduced, this policy and any required controls must be updated before it is activated.

Retention and protection

We restrict access to private records and use HTTPS, password hashing and access controls. No security measure eliminates all risk. We retain information as needed for the service, financial reconciliation, fraud prevention, disputes, backups and applicable legal obligations. There is no automatic promise to delete all records immediately on account closure. Retention and deletion requests are reviewed according to the record type and applicable obligations.

Your requests and choices

Depending on applicable law, you may request access, correction, deletion where permitted, account closure or information about other privacy rights. Use the Privacy category in the contact form. We may need to verify your identity and explain any lawful limits or retained records. Optional contact-sharing consent may be withdrawn for future sharing by contacting support; this cannot recall information already lawfully disclosed. You may also contact a competent privacy authority where your law provides that right.