Thriftful Privacy Policy

Last Updated: December 1, 2025

Introduction

Thriftful, Inc. ("Thriftful," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our website (thriftful.app) and mobile application (collectively, the "Platform").

Please read this Privacy Policy carefully. By using the Platform, you consent to the practices described in this policy.

---

1. Information We Collect

We collect various types of information to provide and improve our services.

1.1 Information You Provide Directly

Account Information:

• Name
• Email address
• Password (encrypted)
• Profile photo and cover image (optional)
• Bio and personal link (optional)

Style Story Profile (Clients):

• Gender identity and measurement set preference
• Height and weight
• Body measurements (bust/chest, waist, hips, inseam)
• Size ranges (shirts, pants, dresses/jackets, shoes)
• Fit preferences and body type
• Style keywords (e.g., "vintage," "grunge," "minimalist")
• Aesthetic keywords (e.g., "dark academia," "cottagecore")
• Color preferences (e.g., "neutrals," "earth tones")
• Item keywords (e.g., "dresses," "outerwear")
• Fashion goals (e.g., "build confidence," "sustainable wardrobe")

Lookbook Profile (Stylists):

• Bio and professional background
• Social media links (Instagram, TikTok, Pinterest, etc.)
• Website URL
• Portfolio posts (images, titles, descriptions)
• Style specialties and aesthetic keywords

Stylist Application:

• Contact information (name, email, phone)
• Address (street, city, state, zip, country)
• Social media and website links
• Motivation and experience details
• Availability and logistics information
• Portfolio photos (3-6 images)
• Digital signature
• Agreement to terms

Bundle Requests:

• Custom question responses
• Pinterest board URLs (optional)
• Special instructions or notes

Messages & Communication:

• In-app messages between clients and stylists
• Email correspondence with Thriftful support
• Feedback and reviews

Payment Information:

• Credit/debit card information (processed and stored securely by Stripe, not by Thriftful)
• Billing address
• Transaction history

1.2 Information Collected Automatically

User Identifiers:

• User account IDs (used for authentication and account management)
• Hashed (one-way encrypted) user IDs (sent to Google Analytics for first-party analytics only)

Product Interaction Data:

• App launches, taps, clicks, scrolling information
• Pages visited, features used, and time spent on the Platform
• Bundles viewed, stylists browsed
• Click patterns and navigation paths

Search History:

• Search queries performed within the app
• Stored locally on your device and linked to your account

Other Usage Data:

• Device information (type, operating system, browser, screen resolution)
• IP address and approximate geographic location
• Referral source (how you found Thriftful)

Cookies & Tracking Technologies: We use cookies, web beacons, and similar technologies to:

• Remember your preferences and settings
• Authenticate your login sessions
• Analyze platform usage and performance
• Provide personalized content and recommendations

We do not serve third-party advertisements in our app.

You can control cookies through your browser settings, but disabling cookies may limit Platform functionality.

1.3 Information from Third Parties

Social Media: If you connect your Thriftful account to social media platforms (e.g., Instagram), we may receive:

• Profile information (name, username, profile picture)
• Public posts or content you choose to share
• Friend/follower lists (if applicable)

Payment Processors: We receive transaction confirmation and payment status from Stripe but do not store full credit card numbers.

Analytics Providers: We use first-party analytics tools (Google Analytics) to understand how users interact with our Platform. We send hashed (one-way encrypted) user IDs to Google Analytics for analytics purposes only. This data is not used for cross-app tracking, advertising, or shared with data brokers. We do not send personally identifiable information (such as names or email addresses) to analytics providers.

---

2. How We Use Your Information

We use your information for the following purposes:

2.1 Provide & Improve Services

• Create and manage your account
• Enable you to browse stylists, bundles, and profiles
• Facilitate bundle requests and order fulfillment
• Process payments securely
• Enable communication between clients and stylists
• Provide customer support
• Improve Platform features, design, and user experience

2.2 Personalization & Matching

• Match clients with stylists based on style and aesthetic preferences (using Vibe Tags)
• Recommend bundles and stylists aligned with your preferences
• Curate personalized content and search results
• Auto-fill bundle request forms with Style Story data for convenience

2.3 Communication

• Send transactional emails (order confirmations, shipping updates, account notifications)
• Respond to your inquiries and support requests
• Send marketing emails about new features, promotions, or stylist spotlights (with opt-out option)
• Send in-app notifications about messages, requests, and order updates

2.4 Safety & Security

• Verify identity and prevent fraud
• Detect and prevent abuse, spam, or violations of our Terms
• Investigate disputes and resolve issues
• Comply with legal obligations and enforce our policies

2.5 Analytics & Research

• Analyze usage patterns and trends using first-party analytics (Google Analytics)
• Measure Platform performance and effectiveness
• Conduct research to improve our services
• Generate anonymized, aggregated reports
• Note: We use hashed user IDs for analytics and do not use this data for tracking, advertising, or sharing with data brokers

2.6 Legal & Compliance

• Comply with applicable laws, regulations, and legal processes
• Enforce our Terms of Service and other agreements
• Protect our rights, property, and safety, and that of our users

---

3. How We Share Your Information

We do not sell your personal information to third parties. We do not use your personal information for tracking purposes as defined by Apple and other privacy frameworks. We do not:

• Link your data with third-party data for targeted advertising
• Share your data with data brokers
• Use your data for cross-app tracking or advertising measurement

However, we share information in the following circumstances:

3.1 With Stylists (When You Request a Bundle)

Important: When you submit a bundle request to a stylist, we share your complete Style Story profile with that stylist to enable them to curate items that fit and match your preferences. This includes:

• All measurements (height, weight, bust/chest, waist, hips, inseam)
• Size ranges for clothing and shoes
• Fit preferences and body type
• Style, aesthetic, color, and item keywords
• Fashion goals
• Any custom question responses you provide

Stylists may only use this information to fulfill your specific order and provide related customer service. They may not share, sell, or misuse your data. See our [Stylist Terms of Service] for more details.

3.2 With Clients (Stylists)

When you are an approved stylist, the following information is publicly visible:

• Your name and username
• Profile photo and cover image
• Bio, social media links, and website
• Lookbook portfolio posts (images, titles, descriptions)
• Style specialties and aesthetic keywords
• Bundles you create (titles, descriptions, pricing, images)

This information is accessible to all users and may be indexed by search engines.

3.3 With Service Providers

We share information with trusted third-party service providers who help us operate the Platform:

Payment Processing: Stripe processes all payments and stores payment card information securely. We do not have access to full card numbers. See Stripe's Privacy Policy.

Cloud Hosting & Storage: Supabase hosts our database and stores user data securely. See Supabase's Privacy Policy.

Image Hosting: We may use third-party services (e.g., AWS S3, Cloudinary) to store and deliver images.

Email Services: We use email service providers (e.g., SendGrid, Resend) to send transactional and marketing emails.

Analytics: We use first-party analytics tools (Google Analytics) to understand usage patterns. We send hashed user IDs and usage data to Google Analytics for analytics purposes only. This data is not used for cross-app tracking, advertising, or shared with data brokers.

Customer Support: We may use support platforms (e.g., Zendesk, Intercom) to manage inquiries and provide assistance.

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

3.4 For Legal Reasons

We may disclose your information if required by law or in response to:

• Subpoenas, court orders, or legal processes
• Requests from law enforcement or government agencies
• Protection of our rights, property, or safety
• Prevention of fraud, illegal activity, or violations of our Terms
• Enforcement of our policies and agreements

3.5 Business Transfers

If Thriftful is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity. We will notify you of any such change and provide options regarding your data.

3.6 With Your Consent

We may share your information for other purposes with your explicit consent.

---

4. Your Data Rights & Choices

You have the following rights regarding your personal information:

4.1 Access & Portability

You can:

• Access your account information and profile data through the Platform settings
• Request a copy of your data in a portable format (e.g., JSON, CSV) by contacting support@thriftful.app

4.2 Correction & Updates

You can update your profile information, Style Story, and Lookbook directly through the Platform. If you need assistance, contact support@thriftful.app.

4.3 Deletion

You can request deletion of your account and personal data by:

• Using the account deletion feature in Platform settings
• Contacting support@thriftful.app

Upon deletion:

• Your account and profile will be permanently removed
• Your personal information will be deleted (subject to legal retention requirements)
• Transaction records may be retained for accounting, tax, and legal compliance purposes
• Anonymized, aggregated data may be retained for analytics

Note: If you have pending orders, you must complete or cancel them before account deletion.

4.4 Opt-Out of Marketing

You can opt out of marketing emails by:

• Clicking the "unsubscribe" link in any marketing email
• Adjusting your email preferences in Platform settings

You will continue to receive transactional emails (order confirmations, shipping updates) even if you opt out of marketing.

4.5 Cookie Management

You can control cookies through your browser settings:

• Block all cookies (may limit Platform functionality)
• Delete existing cookies
• Enable "Do Not Track" preferences (we honor DNT signals where feasible)

4.6 Privacy Rights by Location

California Residents (CCPA): California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected and how it's used
• Right to request deletion of personal information
• Right to opt out of the "sale" of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

To exercise these rights, contact support@thriftful.app.

European Residents (GDPR): If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation:

• Right to access, rectify, and erase your data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with your data protection authority

Our legal basis for processing your data includes:

• Consent: You provide consent when creating an account and using the Platform
• Contract Performance: Processing is necessary to provide our services
• Legitimate Interests: We process data to improve our services, ensure security, and comply with legal obligations

To exercise these rights, contact support@thriftful.app.

---

5. Data Security

We take data security seriously and implement reasonable technical and organizational measures to protect your information, including:

Encryption:

• Data transmitted over HTTPS (SSL/TLS encryption)
• Passwords are hashed and encrypted
• Sensitive data is encrypted at rest

Access Controls:

• Limited employee access to personal data
• Role-based access permissions
• Multi-factor authentication for administrative accounts

Infrastructure Security:

• Secure cloud hosting with reputable providers (Supabase, AWS)
• Regular security audits and vulnerability assessments
• Monitoring for unauthorized access or suspicious activity

Payment Security:

• Payment card information is processed and stored by Stripe, a PCI-DSS compliant provider
• We do not store full credit card numbers

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

---

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

Active Accounts:

• Personal information and profile data are retained while your account is active
• Transaction records are retained for accounting, tax, and legal purposes

Closed Accounts:

• Upon account deletion, we delete most personal information within 30 days
• Some information may be retained for up to 7 years for legal, tax, and fraud prevention purposes
• Anonymized, aggregated data may be retained indefinitely for analytics

Communications:

• In-app messages are retained while accounts are active and for a period after closure
• Customer support inquiries are retained for 3 years

Logs & Analytics:

• Server logs and analytics data are retained for up to 2 years

You can request earlier deletion by contacting support@thriftful.app, subject to legal retention requirements.

---

7. Children's Privacy

Thriftful is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

• If you are under 13, do not use the Platform or provide any personal information
• If you are 13-17, you must have parent or guardian consent to use the Platform
• If we discover we have collected information from a child under 13, we will delete it promptly

If you believe we have collected information from a child under 13, contact us at support@thriftful.app.

---

8. International Users

Thriftful is based in the United States. If you access the Platform from outside the U.S., your information may be transferred to, stored, and processed in the United States or other countries.

Data transfer mechanisms:

• We comply with applicable data protection laws regarding international transfers
• We use standard contractual clauses and other safeguards for transfers to countries without adequate data protection laws

By using the Platform, you consent to the transfer of your information to the United States and other countries.

---

9. Third-Party Links & Services

The Platform may contain links to third-party websites, social media platforms, or services (e.g., Instagram, Pinterest, stylist websites).

We are not responsible for the privacy practices of third parties. When you click on external links or connect to third-party services:

• You are subject to their privacy policies and terms
• We encourage you to review their policies before providing information
• We do not control or endorse third-party content or practices

---

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features.

When we make changes:

• We will update the "Last Updated" date at the top
• We will notify you via email or in-app notification for material changes
• Changes become effective 30 days after posting (or immediately for legal/security changes)

Continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy.

We encourage you to review this policy periodically to stay informed about how we protect your information.

---

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Thriftful, Inc.
Privacy Inquiries: support@thriftful.app
General Support: support@thriftful.app
Legal Inquiries: hello@thriftful.app
Address: [To be updated with business address]

Data Protection Officer (if applicable): [Name/Contact]

We will respond to your inquiries within 30 days (or as required by applicable law).

---

12. Summary of Key Points

To help you understand our privacy practices, here's a quick summary:

---

13. Consent

BY USING THE THRIFTFUL PLATFORM, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND CONSENT TO THIS PRIVACY POLICY.

You specifically consent to:

• Collection and processing of your personal information as described
• Sharing your Style Story profile with stylists when you request bundles
• Use of cookies and first-party analytics technologies (we do not use your data for tracking purposes)
• Transfer of your data to the United States and third-party service providers
• Processing of your data for the purposes outlined in this policy

You may withdraw consent at any time by closing your account or contacting support@thriftful.app, subject to legal retention requirements.

---

Thank you for trusting Thriftful with your personal information. We are committed to protecting your privacy while helping you discover your unique style through sustainable, curated thrifted fashion.