Privacy Policy

1. Who we are

Gimel ("Gimel," "we," "us," or "our") is a charitable-giving platform operated by Wayby Inc. Gimel lets people convert unused airline miles and credit card points into cash donations for schools and charitable institutions they choose. This Privacy Policy explains what information we collect, how we use it, and the choices you have. Questions: hello@gimel.ai.

2. Information we collect

• Account and contact information — name, email address, phone number, mailing address, and date of birth.
• Financial and loyalty information — bank account connection details (obtained securely through our payment partner, Plaid), and airline/credit-card loyalty program information you provide or authorize us to access to process a donation.
• Donation activity — the pledges you make, the institutions you choose, and the status of your conversions and donations.
• Communications and consent records — your email and SMS preferences, and a record of any consent you give (including a timestamp), so we can honor your choices and demonstrate compliance.
• Usage information — basic analytics about how you interact with our site, collected through Google Analytics (such as pages visited and general device/browser info).

3. How we use your information

We use your information to: provide and operate the Gimel service, including processing the conversions and donations you authorize; verify your identity and the accounts you connect, and prevent fraud; send you transactional messages (by email and/or SMS) related to your account and donations; respond to your questions and provide support; maintain records required for legal, tax, accounting, and compliance purposes; and improve and secure our platform. We do not sell your personal information.

4. SMS / text messaging

If you opt in to receive SMS messages from Gimel:

• What you'll receive: transactional, account-related messages such as launch notifications, requests to authorize a pledged transfer, requests to relay a one-time verification code from your own loyalty account, and status confirmations.
• Frequency: message frequency varies based on your activity.
• Rates: message and data rates may apply.
• Opt-out: reply STOP at any time. Reply HELP for help, or email hello@gimel.ai.
• No unrelated sharing: We do not share your SMS opt-in consent or your phone number with third parties for purposes unrelated to delivering our messaging service. Mobile opt-in data is not sold or shared with third parties for their own marketing.

5. How we share information

We share personal information only as needed to operate Gimel, and only with providers bound by confidentiality obligations. Our key service providers, by purpose:

• Plaid — to securely connect and verify your bank account for donation payouts.
• Supabase — database and application data storage.
• Vercel — website and application hosting.
• Resend — to send transactional email.
• Telnyx — to send and receive transactional SMS.
• Google Analytics — to understand and improve how our site is used.

We may also share information with similar service providers we engage to operate, secure, and improve the platform, under contractual confidentiality obligations. We may disclose information when required by law, to comply with legal process, to enforce our terms, or to protect the rights, safety, and property of Gimel, our users, or others. If Gimel is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

6. Data retention

We keep personal information for as long as needed to provide the service, comply with our legal and financial-recordkeeping obligations, resolve disputes, and enforce our agreements. Consent records are retained as needed to demonstrate compliance.

7. Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including encryption of sensitive credentials at rest. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your choices and rights

You may access, correct, or request deletion of your personal information; opt out of marketing or SMS communications at any time; and ask questions about how your information is handled. To exercise any of these, email hello@gimel.ai. Depending on where you live, you may have additional rights under applicable privacy laws (such as the California Consumer Privacy Act).

9. Children

Gimel is intended for adults 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 18.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date above, and material changes may be communicated to you directly.

11. Contact

Questions about this Privacy Policy or your data: hello@gimel.ai.