Cart 0
Cart 0

Privacy policy

Effective Date: August 3, 2026

This Privacy Policy explains how GR8FL LLC, doing business as GR8FL GOODs (“GR8FL,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information.

This Privacy Policy applies to:

  • Our online store at gr8flgoods.com;

  • The GR8FL GIFTS™ Creation Studio at gifts.gr8flgoods.com;

  • GR8FL questionnaires, authorization forms, and related Google Workspace records;

  • Customer-support and transactional communications;

  • The GR8FL 4EVR WALL™, GR8FL GLORY™, and other optional public features; and

  • Other GR8FL services that link to this Privacy Policy.

This Privacy Policy should be read with our Terms of Service, GR8FL GIFTS™ Digital Products and Services Terms, Refund, Exchange and Return Policy, Shipping Policy, and other applicable terms.

1. Current Geographic Availability

GR8FL GOODs currently offers purchases and the GR8FL GIFTS Creation Studio only to customers located in and purchasing from the United States.

Visitors outside the United States may be able to view portions of our website, but they are not currently eligible to purchase or participate in GR8FL GIFTS.

2. GR8FL GIFTS Definitions

For purposes of the GR8FL GIFTS experience:

  • A Giver is the purchaser or person creating the gift.

  • A Gifted is the adult who receives or is recognized through the gift.

  • A private gift is content created for personal delivery and not authorized for public display, broadcast, social-media use, or promotion.

  • A public feature includes the GR8FL 4EVR WALL, a GR8FL GLORY livestream recognition, a recording or replay, social-media publication, advertising, or promotional use.

Both the Giver and Gifted must be at least 18 years old.

Private creation does not automatically authorize public use.

3. Personal Information We Collect

The information we collect depends on how you interact with us.

A. Shopify Store Information

When you browse or purchase through our Shopify store, we or Shopify may collect:

  • Name;

  • Email address;

  • Telephone number;

  • Billing and shipping address;

  • Order number and purchase history;

  • Products viewed, added to a cart, or purchased;

  • Product-personalization or engraving information;

  • Payment and transaction information;

  • Customer-service communications;

  • Reviews, ratings, or review photographs;

  • IP address;

  • Browser and device information;

  • Cookie, advertising, and online identifiers;

  • Referral and campaign information; and

  • Website interaction and analytics information.

Payment card information is processed by Shopify and the applicable payment provider. GR8FL does not receive complete payment-card credentials.

B. GR8FL GIFTS Onboarding Information

Before receiving access to the GR8FL GIFTS Creation Studio, the Giver must complete the required Google Forms onboarding process.

The onboarding form may collect:

  • Giver’s name and email address;

  • Shopify order number;

  • Confirmation that the Giver is located in and purchasing from the United States;

  • Confirmation that the Giver is at least 18 years old;

  • Required acknowledgments;

  • Privacy Policy and terms versions;

  • Completion date and timestamp; and

  • Other information reasonably necessary to confirm eligibility and activate access.

Google Forms and related Google Workspace records serve as GR8FL’s official record of required onboarding acknowledgments and authorizations.

C. GR8FL GIFTS Creation Studio Information

When a Giver uses the Creation Studio, we may collect:

  • Giver’s name and email address;

  • Shopify order number;

  • Gifted’s first name and last initial;

  • Relationship between the Giver and Gifted;

  • Memories, gratitude statements, personal qualities, desired feelings, and special occasions;

  • Personal narrative responses;

  • AI-generated and customer-edited letters, scripts, shoutouts, and tribute drafts;

  • Submission status and administrative notes;

  • Creation and review timestamps; and

  • Purchase and access-verification information.

The Creation Studio does not currently require a customer account.

The main GR8FL GRAM letter and optional video script are not ordinarily stored in the Creation Studio’s application database. They may be transmitted through our email provider when the Giver requests delivery.

Shoutout and Wall tribute drafts submitted for administrative review may be stored in the application database.

D. Information About the Gifted

A Giver may provide limited information about the Gifted so that GR8FL can create the requested private gift.

This information may include:

  • First name and last initial;

  • Relationship to the Giver;

  • Shared memories;

  • Personal qualities;

  • Life events;

  • Health, caregiving, grief, or relationship circumstances voluntarily described by the Giver; and

  • Draft language for an optional public feature.

The Giver should provide only information reasonably necessary to create the gift and should not submit information the Giver is not permitted to provide.

If you provide personal information about another person, you represent that you are permitted to provide it for the private gift-creation purpose and will direct that person to this Privacy Policy when appropriate.

E. Public-Feature Authorizations

Before GR8FL publicly identifies or features a Giver or Gifted, we may collect:

  • Name and email address;

  • Age confirmation;

  • Order or submission identifier;

  • Exact permission selections;

  • Authorization-language version;

  • Date and timestamp;

  • Electronic acknowledgment or signature information;

  • Withdrawal or revocation information; and

  • Information reasonably necessary to match the authorization to the correct submission.

Separate permissions may be requested for:

  • GR8FL 4EVR WALL publication;

  • GR8FL GLORY livestream recognition;

  • Livestream recording or replay;

  • Social-media publication;

  • Advertising or promotional use; and

  • Public use of sensitive personal information.

Permission for one public use does not automatically authorize another.

F. Voice Dictation

The Creation Studio may offer browser-native voice dictation.

The customer’s browser, operating system, or speech-recognition provider may process the customer’s voice to produce text. GR8FL receives the resulting text and does not receive or store the raw audio recording through the Creation Studio.

The browser or device provider’s own privacy practices apply to its speech-recognition service.

G. Images and Files

The Creation Studio does not currently provide a customer workflow for uploading and storing personal photographs, audio recordings, or video files.

A GR8FL GRAM image may be created in the customer’s browser and transmitted through our transactional email provider for delivery without being stored in the application database.

H. Sensitive Personal Information

Free-text responses may reveal sensitive or highly personal information, including information about:

  • Health or illness;

  • Grief or loss;

  • Caregiving;

  • Religious or spiritual beliefs;

  • Relationships;

  • Sexual orientation;

  • Race or ethnicity;

  • Political opinions; or

  • Other private circumstances.

Please do not provide sensitive information unless it is reasonably necessary for the requested GR8FL experience.

GR8FL uses sensitive narrative information only to provide the requested experience, administer authorized public features, protect the service, and comply with law. We do not use private GR8FL GIFTS narrative information for targeted advertising.

4. How We Collect Information

We may collect personal information:

  • Directly from you;

  • From a Giver who provides information about a Gifted;

  • From Shopify when an order is submitted, paid, or verified;

  • Through Google Forms, Google Sheets, Gmail, and other Google Workspace services;

  • Through the Creation Studio;

  • Through service providers that help operate our store and services;

  • Through cookies, pixels, browser storage, and similar technologies; and

  • From communications you send to us.

5. How We Use Personal Information

We may use personal information to:

  • Process, personalize, and fulfill purchases;

  • Verify GR8FL GIFTS eligibility and order access;

  • Confirm completion of required onboarding;

  • Provide and operate the Creation Studio;

  • Generate personalized letters, scripts, shoutouts, and tribute drafts;

  • Deliver completed content by email;

  • Create product-personalization previews;

  • Produce and ship physical products;

  • Provide customer support;

  • Review optional public-feature submissions;

  • Obtain and document public-use permissions;

  • Publish or broadcast content when required permissions have been obtained;

  • Process permission withdrawals and removal requests;

  • Maintain authorization, deletion, and business records;

  • Detect fraud, misuse, security threats, and technical problems;

  • Operate, maintain, personalize, and improve our store and services;

  • Measure store and marketing performance;

  • Optimize operations, marketing, and customer experiences;

  • Comply with legal, tax, accounting, and recordkeeping obligations;

  • Establish, exercise, or defend legal claims; and

  • Enforce our agreements and policies.

6. AI-Generated Content and Anthropic

GR8FL uses the Claude API, a commercial artificial-intelligence service provided by Anthropic PBC, to generate personalized text within the GR8FL GIFTS experience.

This may include:

  • A GR8FL GRAM gratitude letter;

  • An optional video script;

  • An optional livestream shoutout draft; and

  • An optional public tribute draft.

To generate this content, we send Anthropic selected names or name formats and personal narrative details entered during the creation process. These details may include:

  • The relationship between the Giver and Gifted;

  • Shared memories;

  • Personal qualities;

  • Gratitude statements;

  • Desired emotional tone;

  • Special occasions; and

  • Voluntarily provided health, grief, caregiving, or relationship information.

We do not send Anthropic the customer’s:

  • Email address;

  • Shopify order number;

  • Shopify order ID;

  • Payment information;

  • Photographs;

  • Audio files; or

  • Video files

as part of the text-generation request.

GR8FL uses Anthropic’s commercial API through a standard API key. Our Anthropic organization is not enrolled in Anthropic’s Development Partner Program, and our commercial API inputs and outputs are not used to train Anthropic’s models by default.

GR8FL currently uses Anthropic’s standard retention setting, not a Zero Data Retention arrangement. Under the standard setting, ordinary API inputs and outputs are generally deleted from Anthropic’s backend within 30 days.

Anthropic may retain information for longer where necessary to:

  • Enforce its Usage Policy;

  • Investigate abuse or security concerns;

  • Comply with law; or

  • Meet other obligations described in its commercial terms and privacy documentation.

Anthropic may use automated trust-and-safety systems and may permit human review when content is flagged for possible policy violations.

Anthropic acts as a data processor for GR8FL under its commercial Data Processing Addendum.

7. Private and Public Content

Private GR8FL GIFTS content is private by default.

Creating, generating, editing, or submitting a draft in the Creation Studio does not, by itself, authorize GR8FL to:

  • Publish it;

  • Broadcast it;

  • Record or replay it;

  • Post it on social media;

  • Use it in advertising; or

  • Otherwise use it publicly.

Public use requires the applicable separate authorization from each identifiable competent adult whose name, story, likeness, personal information, or protected material would be used.

A Giver cannot authorize public use on behalf of another competent adult unless the Giver has documented legal authority to act for that person.

Authorization allows GR8FL to consider the content for the applicable public feature. It does not guarantee:

  • Selection;

  • Publication;

  • Broadcast;

  • Placement;

  • Timing; or

  • Continued availability.

A person may withdraw permission for future use by contacting GR8FL. We will stop future use and make reasonable efforts to remove content under our control.

Complete removal may not be possible when content has already been:

  • Broadcast;

  • Downloaded;

  • Shared by others;

  • Archived;

  • Distributed; or

  • Incorporated into a completed recording.

8. How We Disclose Personal Information

We may disclose personal information to service providers and other recipients as described below.

A. Shopify

Shopify provides our:

  • Online store;

  • Checkout;

  • Order administration;

  • Customer privacy tools;

  • Analytics;

  • Fraud prevention;

  • Marketing and personalization services; and

  • Related commerce infrastructure.

Shopify order information may be transmitted to the GR8FL GIFTS application to verify a purchase and activate applicable features.

B. Anthropic

Anthropic processes selected names and narrative information to generate personalized text, as described in Section 6.

C. Upstash

Upstash Redis provides the GR8FL GIFTS application database.

It may store:

  • Order-verification records;

  • Names and email addresses;

  • Shoutout submissions;

  • Wall tribute submissions;

  • AI drafts and customer-edited public-feature text;

  • Review status;

  • Consent timestamps maintained by the application; and

  • Related administrative information.

D. Netlify

Netlify hosts the Creation Studio and runs its server-side functions.

Limited identifiers, such as names, role labels, order numbers, record identifiers, and technical error information, may appear in hosting or function logs.

E. Resend

Resend delivers transactional emails that may contain:

  • GR8FL GRAM letters;

  • Video scripts;

  • Shoutout or tribute text;

  • Names;

  • Email addresses;

  • GR8FL GRAM images; and

  • Internal review notifications.

F. Google

We use Google Forms, Google Sheets, Gmail, Google Drive, and related Google Workspace services for activities that may include:

  • Required onboarding;

  • Official authorization records;

  • Customer support;

  • Internal notifications;

  • Public-feature administration;

  • Withdrawal and removal records; and

  • The GR8FL 4EVR WALL workflow.

G. Fulfillment and Personalization Providers

We may use providers such as Shopify, ShineOn, Printful, shipping carriers, and other production partners to create, personalize, package, and deliver physical products.

Personalized merchandise or engraving text may be sent to the applicable provider to create a preview or fulfill the requested order.

H. Payment, Financing, Review, and Commerce Providers

We may disclose information to:

  • Payment processors;

  • Buy-now-pay-later providers;

  • Fraud-prevention services;

  • Product-review services;

  • Customer-chat providers;

  • Shipping services; and

  • Other Shopify applications used to operate the store.

I. Analytics and Marketing Providers

We may disclose online identifiers, device information, website activity, referral information, and commercial activity to Shopify, Google, and other analytics or marketing providers.

We do not intentionally disclose private GR8FL GIFTS letters, narrative questionnaire responses, raw voice recordings, or Giver and Gifted authorization records to advertising providers.

J. Legal and Business Disclosures

We may disclose information:

  • To comply with law, legal process, or governmental requests;

  • To protect GR8FL, our customers, or others;

  • To prevent fraud, abuse, or security incidents;

  • To enforce our agreements;

  • In connection with a merger, financing, acquisition, restructuring, bankruptcy, or transfer of business assets;

  • To professional advisers, such as attorneys, accountants, or insurers; or

  • With your direction or permission.

9. Shopify Network Intelligence

GR8FL participates in Shopify Network Intelligence.

Through Shopify Network Intelligence, we share certain customer and store-interaction information with Shopify so Shopify can use it together with other Shopify data to support:

  • Store operations;

  • Analytics;

  • Fraud prevention;

  • Product and store personalization;

  • Store-performance improvements;

  • Marketing optimization;

  • Advertising measurement; and

  • Ad-targeting-related services.

The categories of information involved may include:

  • Online identifiers;

  • IP address;

  • Cookie and device identifiers;

  • Browser and device information;

  • Pages and products viewed;

  • Cart activity;

  • Purchase and commercial activity;

  • Referral and campaign information; and

  • Related inferences.

Other Shopify merchants do not receive direct access to GR8FL’s customer information through Shopify Network Intelligence.

We do not share private GR8FL GIFTS narrative responses, private letters, sensitive Creation Studio content, raw voice recordings, or Giver and Gifted authorization records through Shopify Network Intelligence.

10. Sale, Sharing, and Targeted Advertising

GR8FL does not sell personal information for money.

However, under certain United States state privacy laws, the disclosure of personal information for cross-context behavioral advertising or targeted advertising may be legally defined as “selling” or “sharing,” even when no money is exchanged.

During the preceding 12 months, we have shared or may have shared the following categories of personal information through Shopify Network Intelligence and related analytics or marketing services:

  • Identifiers and online identifiers;

  • Internet or other electronic-network activity;

  • Browser and device information;

  • Commercial information;

  • Product-view, cart, and purchase activity;

  • Referral and campaign information; and

  • Inferences used for analytics, personalization, marketing optimization, or advertising.

The categories of recipients include:

  • Shopify;

  • Analytics providers;

  • Advertising and measurement providers; and

  • Related technology providers.

We do not knowingly sell or share:

  • Private GR8FL GIFTS letters;

  • Private narrative responses;

  • Giver or Gifted authorization records;

  • Raw voice recordings;

  • Sensitive personal information for targeted advertising; or

  • Personal information of consumers under 16 years old.

11. Your Privacy Choices

Eligible consumers may opt out of qualifying sale, sharing, or targeted-advertising activity by using the Your Privacy Choices link in the footer of our Shopify store.

Where required by applicable law, we also recognize supported Global Privacy Control signals as an opt-out request.

Opting out does not prevent processing required to:

  • Complete a purchase;

  • Provide a requested service;

  • Fulfill an order;

  • Prevent fraud;

  • Maintain security;

  • Comply with law; or

  • Perform activities that are not treated as sale, sharing, or targeted advertising under applicable law.

12. Cookies and Similar Technologies

Our Shopify storefront uses cookies, pixels, browser storage, and similar technologies for purposes that may include:

  • Core store operation;

  • Checkout and cart functionality;

  • Security and fraud prevention;

  • Customer preferences;

  • Analytics;

  • Marketing measurement;

  • Personalization; and

  • Advertising where enabled.

Depending on the visitor’s location and applicable law, a cookie banner or privacy-preference tool may allow the visitor to manage nonessential technologies.

The GR8FL GIFTS Creation Studio does not currently contain separate advertising pixels, session-replay tools, or client-side advertising analytics in its application code.

13. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, tax, accounting, fraud-prevention, security, dispute-resolution, and recordkeeping purposes.

Current practices include the following.

A. Onboarding and Contractual Records

Completed Google Forms onboarding records and related contractual acknowledgments are generally retained for up to five years after the later of:

  • Completion of the applicable order;

  • Termination of access;

  • Final refund or chargeback resolution; or

  • Final resolution of a related dispute.

Incomplete or abandoned onboarding forms are generally deleted within 90 days unless retention is reasonably necessary for fraud prevention, customer support, or a legal dispute.

B. Public-Use Authorization Records

Giver and Gifted public-use authorization records are generally retained:

  • While the authorized content remains in use; and

  • For up to five years after its final authorized use, removal, withdrawal, or related dispute resolution.

We may retain a limited withdrawal record to document:

  • Who withdrew permission;

  • What permission was withdrawn;

  • The date of withdrawal;

  • Actions taken by GR8FL; and

  • The date those actions were completed.

C. Creation Studio Records

Order-verification records, submitted shoutouts, and submitted Wall tributes stored in Upstash Redis generally expire two years after their most recent update unless:

  • They are deleted earlier;

  • They are updated and the retention period restarts;

  • Longer retention is required by law; or

  • A copy exists in another system for a separate purpose.

GR8FL administrators can permanently delete these Redis records through internal administrative tools.

The main GR8FL GRAM letter and video script are not ordinarily retained in Redis.

D. Anthropic

Ordinary Anthropic API inputs and outputs are subject to Anthropic’s standard commercial retention period of up to 30 days, subject to Usage Policy enforcement, legal requirements, and other documented exceptions.

E. Transactional Email

Transactional email content and delivery metadata may be retained by:

  • Resend;

  • Gmail;

  • The customer’s email provider;

  • The recipient; and

  • Other systems involved in delivery.

Their respective retention practices apply.

F. Shopify Records

Shopify order and customer records may be retained according to:

  • Business needs;

  • Tax and accounting obligations;

  • Fraud-prevention requirements;

  • Legal obligations; and

  • Shopify platform requirements.

G. Public Content

Authorized public content may remain available until:

  • The applicable experience ends;

  • GR8FL removes or archives it;

  • Authorization is withdrawn and removal is reasonably possible; or

  • Continued retention is reasonably necessary for legal or recordkeeping purposes.

Deletion from one system does not automatically delete every copy from every other system.

14. Data Deletion and Privacy Requests

You may contact us to request access to, correction of, or deletion of personal information.

Fulfilling a deletion request may require separate actions involving:

  • Shopify;

  • Upstash Redis;

  • Google Forms or Google Sheets;

  • Gmail;

  • The GR8FL 4EVR WALL;

  • Resend;

  • Netlify;

  • Fulfillment providers; and

  • Other applicable systems.

Deleting a GR8FL GIFTS order-verification record may prevent the associated order from being used to enter the Creation Studio again.

Some information may not be deleted when retention is reasonably necessary for:

  • Legal compliance;

  • Tax or accounting records;

  • Fraud prevention;

  • Security;

  • Dispute resolution;

  • Documenting authorization or withdrawal;

  • Exercising or defending legal claims; or

  • Completing a transaction requested by the customer.

15. United States Privacy Rights

Depending on the state where you live, you may have the right to:

  • Confirm whether we process your personal information;

  • Access personal information;

  • Correct inaccurate personal information;

  • Request deletion;

  • Obtain a portable copy of certain information;

  • Opt out of sale, sharing, or targeted advertising;

  • Limit certain uses of sensitive personal information;

  • Appeal a denied privacy request; and

  • Exercise rights through an authorized agent.

To submit a privacy request, contact us using the information in Section 21.

To opt out of qualifying sale, sharing, or targeted advertising, use the Your Privacy Choices link in our store footer.

We may need to verify:

  • Your identity;

  • Your state of residence;

  • The information associated with your request; and

  • An authorized agent’s authority.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

16. Children and Age Requirements

Our services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13.

GR8FL GIFTS is an adults-only experience. Both the Giver and Gifted must be at least 18 years old.

This adults-only requirement applies to the GR8FL GIFTS package and Creation Studio. It does not necessarily apply to every ordinary physical product available through GR8FL GOODs.

We do not knowingly sell or share the personal information of consumers under 16 years old.

17. Security

We use reasonable administrative, technical, and organizational measures intended to protect personal information.

These measures may include:

  • Restricted administrative access;

  • Server-side API credentials;

  • Encrypted transmission;

  • Provider access controls;

  • Data-retention limits;

  • Permanent deletion tools;

  • Input and output encoding; and

  • Human review before approved public use.

No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

18. International Processing

GR8FL is based in the United States and currently sells only to customers located in and purchasing from the United States.

Some service providers may process information in the United States and other countries. Privacy and data-protection laws in those countries may differ from the laws where a visitor is located.

Where applicable, provider contracts and recognized transfer safeguards may govern those transfers.

19. Third-Party Websites and Services

Our services may link to websites or services operated by:

  • Shopify;

  • Google;

  • Anthropic;

  • Social-media platforms;

  • Payment providers;

  • Fulfillment partners; or

  • Other third parties.

Their privacy practices are governed by their own privacy policies and terms. GR8FL is not responsible for the privacy practices of unaffiliated third parties.

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

  • Our services;

  • Our providers;

  • Our technology;

  • Our legal obligations; or

  • Our privacy practices.

When we make material changes, we will update the Effective Date and provide additional notice where required.

21. Contact Us

Questions, privacy requests, authorization withdrawals, and public-content removal requests may be sent to:

GR8FL LLC
Doing business as GR8FL GOODs
2125 Biscayne Blvd., Ste. 204, #17022
Miami, Florida 33137
United States

Email: gr8flgoods@gmail.com
Website: gr8flgoods.com