THRIFTER

PRIVACY POLICY

Last Updated: 2/10/2026 | Effective: 2/10/2026

This Privacy Policy ("Policy") describes how Thrifter, Inc. ("Thrifter," "we," "us," or "our") collects, uses, shares, and protects personal information when you use our website, mobile application, and related services (collectively, the "Services"). By using the Services, you agree to the collection and use of information in accordance with this Policy.

1. Information We Collect

1.1 Information You Provide

  1. Account Information: Name, email address, phone number, username, password, date of birth, profile photo, and mailing address.

  2. Identity Verification (KYC): Government-issued ID, Social Security Number or Tax ID (last 4 digits or full, as required), date of birth, address verification documents, and selfie/biometric data as processed by Stripe for identity verification purposes.

  3. Payment Information: Credit/debit card numbers, bank account information, and billing address. This information is collected and processed by Stripe; Thrifter does not directly store full payment card numbers.

  4. Transaction Information: Offers submitted, purchases, sales, shipping addresses, tracking numbers, and communication between Buyers and Sellers through the platform.

  5. Listing Content: Photographs, descriptions, pricing, and other content you create for listings.

  6. Communications: Messages between users, customer support inquiries, and feedback.

  7. Survey and Feedback Data: Responses to surveys, reviews, ratings, and feedback you provide.

1.2 Information Collected Automatically

  1. Device and Usage Data: IP address, browser type, operating system, device identifiers, pages visited, time spent on pages, click data, and referring URLs.

  2. Location Data: Approximate location based on IP address. With your consent, we may collect precise location data from your mobile device.

  3. Cookies and Tracking Technologies: We use cookies, pixel tags, web beacons, and similar technologies to collect information about your interactions with the Services. See Section 7 (Cookies) for more details.

  4. Log Data: Server logs that record requests made to our servers, including API calls, error logs, and performance data.

1.3 Information from Third Parties

  1. Stripe: Payment verification data, KYC verification results, transaction data, and fraud risk assessments.

  2. Shipping Carriers: Delivery status and tracking information.

  3. Social Media: If you sign in via a social media account, we may receive your name, email, and profile information as permitted by your social media settings.

  4. Public Sources: We may collect information from publicly available sources to verify user identity or for fraud prevention.

2. How We Use Your Information

We use the information we collect for the following purposes:

  1. Providing the Services: Creating and managing your account, facilitating Transactions, processing payments, and enabling communication between Buyers and Sellers.

  2. Identity Verification: Verifying your identity through Stripe’s KYC process to comply with legal and regulatory requirements.

  3. Payment Processing: Authorizing, capturing, refunding, and managing payments and payouts through Stripe.

  4. Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, unauthorized access, and other illegal activities.

  5. Customer Support: Responding to inquiries, resolving disputes, and providing technical assistance.

  6. Improvement and Analytics: Analyzing usage patterns to improve our Services, develop new features, and optimize the user experience.

  7. Communications: Sending transactional notifications (Offer updates, shipping confirmations, etc.), marketing communications (with your consent where required), and policy updates.

  8. Legal Compliance: Complying with applicable laws, regulations, legal processes, and government requests, including tax reporting (e.g., 1099-K).

3. How We Share Your Information

3.1 With Other Users

When you participate in a Transaction, certain information is shared between Buyers and Sellers as necessary to complete the Transaction, including: name (or username), shipping address (for Buyers), and communication through the platform messaging system. Sellers may see the Buyer’s city/state for shipping purposes.

3.2 With Stripe (Payment Processor)

We share information with Stripe as necessary for payment processing, identity verification, fraud prevention, and compliance with financial regulations. Stripe processes this information in accordance with its own Privacy Policy (https://stripe.com/privacy). Stripe’s collection and processing of your data is governed by the Stripe Services Agreement.

3.3 With Service Providers

We share information with third-party service providers who perform services on our behalf, including: hosting providers, analytics providers, email service providers, customer support tools, and shipping/logistics partners. These providers are contractually obligated to use your information only as directed by Thrifter and in accordance with this Policy.

3.4 For Legal and Safety Reasons

We may disclose your information if we believe it is necessary to: comply with a legal obligation, subpoena, or court order; protect the rights, property, or safety of Thrifter, our users, or others; prevent fraud or illegal activity; or enforce our Terms of Service.

3.5 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

3.6 With Your Consent

We may share your information for other purposes with your explicit consent.

3.7 Aggregated/De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, analytics, and business purposes.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. After account closure, we may retain certain information for a reasonable period to: comply with legal obligations (e.g., tax records for [7 years]); resolve disputes; enforce our agreements; prevent fraud; and as otherwise permitted by law. Transaction records are retained for a minimum of [7 years] for tax and regulatory compliance.

5. Data Security

We implement industry-standard technical and organizational security measures to protect your information, including encryption in transit (TLS/SSL), encryption at rest, access controls, and regular security assessments. However, no method of transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Services at your own risk. You are responsible for maintaining the security of your account credentials.

6. Your Rights and Choices

6.1 Access and Portability

You may request a copy of the personal information we hold about you by contacting us at official.thrifter@gmail.com.

6.2 Correction

You may update or correct your account information at any time through your account settings.

6.3 Deletion

You may request deletion of your personal information, subject to our legal retention obligations. Note that deletion may prevent you from using certain features of the Services.

6.4 Opt-Out of Marketing

You may unsubscribe from marketing emails by clicking the "unsubscribe" link in any email or by updating your notification preferences. You cannot opt out of transactional communications related to your account and Transactions.

6.5 Do Not Track

Our Services do not currently respond to Do Not Track (DNT) browser signals. We will update this Policy if we change this practice.

7. Cookies and Tracking Technologies

We use the following types of cookies:

  1. Strictly Necessary Cookies: Essential for the operation of the Services (e.g., session management, security).

  2. Functional Cookies: Remember your preferences and settings.

  3. Analytics Cookies: Help us understand how users interact with the Services (e.g., Google Analytics).

  4. Advertising Cookies: Used to deliver relevant advertising (if applicable).

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect functionality of the Services.

8. Children’s Privacy

The Services are not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at official.thrifter@gmail.com.

9. State-Specific Disclosures

9.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

  1. Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected, the sources of collection, the business purposes, and the categories of third parties with whom we share your information.

  2. Right to Delete: You may request deletion of your personal information, subject to exceptions.

  3. Right to Correct: You may request correction of inaccurate personal information.

  4. Right to Opt-Out of Sale/Sharing: Thrifter does not "sell" personal information as defined by the CCPA. If this changes, we will provide a "Do Not Sell or Share My Personal Information" link.

  5. Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at official.thrifter@gmail.com or (571) 235-7802 . We will verify your identity before processing your request.

9.2 Other State Privacy Laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with applicable privacy laws may have similar rights. Please contact us to exercise your rights under your state’s law.

10. International Users

If you are accessing the Services from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Services, you consent to this transfer. We take appropriate safeguards to protect your information in compliance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) where applicable.

10.1 GDPR Rights (EU/EEA/UK Users)

If you are located in the EU, EEA, or UK, you have additional rights, including: access, rectification, erasure, restriction of processing, data portability, objection to processing, and the right to lodge a complaint with a supervisory authority. Our legal bases for processing include: performance of a contract, legitimate interests, consent, and legal obligations.

11. Third-Party Links and Services

The Services may contain links to third-party websites or services that are not operated by Thrifter. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

12. Changes to This Privacy Policy

We may update this Policy from time to time. We will provide notice of material changes by posting the updated Policy on our website, sending an email to your registered email address, or through an in-app notification at least 30 days before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated Policy.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy, contact us at:

Thrifter, Inc.

2 Marina Blvd 

San Francisco

CA 94123


Email: official.thrifter@gmail.com

Phone: 1-571-235-7802