Is it safe to let Gratos buy for me?
Gratos buys nothing until you approve the exact total of the gift. If the store’s total at checkout differs from what you approved by more than 3 cents, Gratos stops before paying and nothing is charged.
Updated
Can an AI agent spend my money without asking?
Not with Gratos. You approve the exact total of each gift before it is purchased: the store's price, plus the tax and shipping the store charges. Gratos will not make a purchase without a recorded approval (Terms, §3.5 and §3.7).
Gratos then checks the total again at checkout. If it differs from the total you approved by more than 3 cents, in either direction, Gratos stops before paying and nothing is charged.
Store pages can contain text written to mislead AI agents. That is one more reason every purchase waits for your approval of the exact total, and stops if the checkout total does not match.
How does Gratos pay without seeing my card?
You enter your card into our payment partner's form, not into Gratos. Your card is set up with your card network's agent payment program and saved as a card-network token. Each purchase uses its own one-time cryptogram, and the card network may ask you to confirm it with a passkey.
Gratos never sees your card number. We keep only the card brand, last four digits, expiry, cardholder name, billing ZIP code and our payment partner's reference for the card (Privacy Policy, §1). Gratos is not a bank or payment processor and does not hold your money; the store charges your card.
What is recorded when I approve a gift?
Every approval is recorded: the account and the person who approved, how the approval arrived (in the app, in chat or by text), any words you used, the amount and the time (Terms, §3.5). We keep approval records for 7 years (Privacy Policy, §8).
You can approve by text. Text approvals are limited per day, and larger amounts need a code we text you. Keep your phone locked, and tell security@gratos.ai if it is lost.
What does Gratos do with my data and my people’s data?
We do not sell your information. We do not use your information or your recipients' information to train AI models.
Gratos uses AI models from Anthropic, OpenAI and Google to understand your requests and work with store pages. They do not use this data to train their models, and you can withdraw your permission for this sharing at any time in settings. Gratos can't work for you without it, so you'll be asked again before you continue (Privacy Policy, §5).
We do not market to your recipients and we do not add them to any list of ours. A recipient can reply STOP to any text from us, or write to privacy@gratos.ai to have their information corrected or deleted.
Who can use Gratos?
Adults in the United States. Gratos is offered only in the US, and every account holder and every recipient must be 18 or older; a gift for a child goes to a parent or another adult (Terms, §1 and §4; Privacy Policy, §9).
Gratos is available by invitation while we add merchants city by city.
Questions
- How does Gratos protect my information?
We use encryption, access controls and monitoring, and limit production access to a small number of people (Privacy Policy, §10).
- Can I cancel a gift after I approve it?
Yes, until Gratos starts paying for it. After that it is the store’s order, and returns follow the store’s policy (Terms, §3.5a).
- Does Gratos install a browser extension?
No. Gratos does not install a browser extension, toolbar or plug-in on your device, and the web app sets no advertising cookies (How Gratos buys; Privacy Policy, §11).
- Does Gratos tell my recipient who I am?
Yes. When Gratos asks a recipient for an address on your behalf, it names you as the sender.
- How do I report a problem?
Email support@gratos.ai. For a lost phone or a security concern, email security@gratos.ai.