Privacy Policy

Information You Provide Directly

• Account details: name, email address, username, and password

• Profile information: profile photo, bio, and social media handles

• Payment information: billing address and card details (processed securely by Stripe — we never store raw card numbers)

• Seller payout details: bank account information managed by Stripe Connect

• Listing content: product photos, descriptions, pricing, and condition details

• Brand/Designer applications: business name, portfolio, social presence, and banking preferences

• Communications: in-app messages, support tickets, and dispute submissions

Information Collected Automatically

• Device info: device type, OS, browser type, and unique device identifiers

• Usage data: pages viewed, features used, search queries, and clickstream data

• Location data: approximate location via IP address (precise location only if you grant permission)

• Transaction data: purchase history, sales, bids, and Aura Points activity

• Cookies and tracking: session cookies, persistent cookies, and analytics tags

Information From Third Parties

• Social login providers (e.g., Google) if you use social sign-in

• Stripe, for payment verification and fraud prevention data

• Google Analytics, for anonymized usage analytics

We use your information to

• Create and manage your account

• Process transactions and issue seller payouts

• Deliver core platform features (listings, auctions, AR try-on, Aura Points)

• Send transactional emails: order confirmations, shipping updates, bid notifications

• Send marketing communications (with your consent — opt out anytime)

• Detect, prevent, and investigate fraud, abuse, and security incidents

• Comply with legal obligations and enforce our Terms & Conditions

• Improve Platform features through analytics and user research

• Administer Ambassador and Brand point redemption programs

We do not sell your personal data. We share it only with

• Stripe — for payment processing, fraud prevention, and seller payouts

• Google Analytics — for anonymized usage analytics (IP anonymization enabled)

• Other users — your username, profile photo, and listings are publicly visible; your email is never shown publicly

• Law enforcement / legal — when required by law, court order, or to protect safety

• Business transfers — in a merger or acquisition, with appropriate confidentiality protections

Cookies

• We use cookies to maintain sessions, remember preferences, and analyze usage

• You may disable cookies in your browser — some features may not function properly

• We use Google Analytics with IP anonymization enabled

Security

• TLS encryption for all data in transit

• Encrypted storage for sensitive data at rest

• Strict access controls and role-based permissions

• No system is 100% secure — you use the Platform at your own risk

Retention

• We retain your data as long as your account is active or services are being provided

• Financial records are retained for 7 years as required by IRS regulations

• Upon account deletion, personal data is deleted or anonymized within 90 days

Depending on your location, you may have the right to

• Access the personal data we hold about you

• Correct inaccurate or incomplete data

• Request deletion of your data (right to be forgotten)

• Opt out of marketing communications at any time via email unsubscribe

• Data portability — request a copy of your data in a machine-readable format

• Lodge a complaint with your local data protection authority