Data processing
For firms using oh, dearly! for their client relationships.
Draft updated 10 October 2026. Operator and production details require legal review.
Roles
A firm using a business workspace decides which client and staff information it enters and why; it is the controller. oh, dearly! processes that information on the firm's instructions to remember dates, plan letters and gifts, and have them written, made and delivered; it is the processor. The terms are set in a data processing agreement signed with each firm. Contact details are in the imprint.
Providers we use
| Provider | For | Data |
|---|---|---|
| Vercel | Hosts the website and the app's pages | Technical request data; pages a user opens |
| Railway | Runs the API, the background worker and the database | Everything a workspace stores |
| WorkOS | Sign-in, single sign-on and team invitations | Users' names and email addresses |
| Stripe | Payments and invoices | Billing contact, payment details held by Stripe |
| Postmark | Email to recipients and users (address requests, invitations, account email, the Monday digest) | Recipient name and email address, the message |
| Vercel AI Gateway and the model provider it routes to | Gift ideas, first drafts of cards for the week's moments, drafted lines and notes | Profile facts with names, emails and phone numbers removed |
| Serper and Exa | Web search for gift listings | Search words only; no personal data |
Hosting regions, retention periods and the transfer mechanism for each provider are set out in the signed agreement. A firm is told before a provider is added or changed.
What never leaves
A recipient's postal address is shown neither to the sender nor to any AI; it is used for delivery only. Profiles are read by AI only with names and contact details removed. Makers and studios receive what they need to make and post one piece.
Security
Each workspace's data is kept apart by row-level security in the database, tested on every table. Connections are encrypted. The database is backed up before every change to production, and each backup is restored once to check it. Every change and export is in the workspace's audit log, which its owners can read and download.
If something goes wrong
If personal data a firm entrusted to us is lost, exposed or changed without permission, we tell the firm without undue delay, with what happened, which data and people it concerns, what we have done and what the firm may need to do. We keep a record of every such incident.