Trust and Responsibility

AI supports features including artwork creation, message ideas, design search and content moderation. It is a creative aid, not a tool for employment decisions: outputs can be inaccurate, biased or unsuitable, and should be reviewed before use.

Our approach combines input limits and moderation where supported, with a commitment to improving safeguards as risks emerge. Relevant prompts or content may be processed by AI providers; avoid confidential HR information, use photographs only with appropriate permission, and ask us about provider processing, retention and training terms if these are part of your supplier assessment.

The service uses HTTPS connections, authenticated account access and organisation permissions to protect administrative actions. Payments are handled through Stripe; card-sharing links are separate from account access and should be shared with care.

Our security priorities are proportionate access controls, safe handling of credentials, software maintenance and investigation of reported weaknesses. We welcome procurement questions about these safeguards, without presenting this page as a SOC 2 report, an ISO certification or a guarantee that incidents cannot occur.

We oppose forced labour, human trafficking and exploitation, and expect the same of those we work with. Our commitment is to consider human-rights risks when selecting suppliers, raise concerns about exploitative practices and seek proportionate corrective action.

This is a voluntary statement of our expectations and intended approach, not a report of completed supply-chain audits or a statutory annual statement under section 54 of the Modern Slavery Act 2015. We will review our reporting responsibilities as the business grows.

Celebrations can involve names, email addresses, messages, photographs and videos. Our commitment is to use personal information for clear purposes, limit it to what is needed and respect applicable data-protection rights; please do not include sensitive personnel records in cards.

Anyone with a card's sharing link may be able to view its contents, subject to its access settings. Our Privacy Policy and Cookie Policy explain our wider approach; contact privacy@happytreecards.com about access, deletion, retention, service providers, international transfers or the processing arrangements your organisation needs.

Appreciation should never come at someone else's expense. We expect respectful behaviour from our team, partners and customers, and do not accept harassment, discrimination, hateful content, spam or exploitation through the service.

Our wider commitment is to fair treatment, inclusive opportunities and respect for the people who contribute to our work. Concerns about misuse can be reported to support; content or access may be restricted in accordance with our Terms and Conditions, and moderation features vary by plan rather than guaranteeing that every message has been reviewed.

We want people with different abilities, backgrounds and working arrangements to take part in workplace celebrations. Our design priorities include clear language, keyboard access, meaningful labels, readable layouts and respect for reduced-motion preferences.

Accessibility is ongoing work, not a claim of independently verified conformance. If a barrier prevents someone taking part, tell us the page, device and assistive technology involved so we can investigate and discuss an alternative way to help.

Our service is designed around managed cloud infrastructure, database recovery features and replicated media storage to support resilience. We recognise that scheduled celebrations matter, and our commitment is to investigate disruption, prioritise recovery and give affected customers clear information through support.

These arrangements reduce risk; they do not guarantee uninterrupted service or a particular recovery time. For important events, allow time to prepare your card and contact us promptly if delivery or access appears affected.

We are committed to honest business dealings and do not offer or accept bribes, kickbacks or improper inducements. Gifts, hospitality and potential conflicts of interest should be proportionate, transparent and never intended to influence a purchasing decision improperly.

We respect customers' procurement rules and expect our partners to do the same. Raise concerns through the contact routes below so they can be considered fairly.

Specialist providers help us deliver hosting, payments, communications and AI features. Our commitment is to consider their security, privacy, reliability and human-rights practices in proportion to the service they provide, and to revisit concerns when circumstances change.

We do not claim to have independently audited every supplier. Procurement teams can ask about relevant providers and dependencies; our software acknowledgements recognise open-source contributors, but are not a list of personal-data processors.

Digital cards offer a way to celebrate without producing and posting a physical card, but hosting, devices and AI still use energy and resources. Our commitment is to consider those impacts, favour efficient use of technology and avoid environmental claims we cannot substantiate.

We do not claim that the service is carbon-neutral or that every digital card has a lower footprint than a paper alternative. We aim to improve our understanding of our impact as we grow.

For security, AI safety, accessibility, conduct or supplier concerns, email support@happytreecards.com. For personal-data questions or rights requests, use privacy@happytreecards.com; our support page is another way to reach us.

Include a brief description, the affected page and relevant dates, but avoid sending passwords, payment details or unnecessary personal information. Report suspected vulnerabilities privately and do not access other people's data; our commitment is to take good-faith concerns seriously, limit sharing to those who need to investigate and respond without promising a fixed resolution time.