Privacy Policy

Last updated: October 8, 2026

1. Introduction

ThriftAI ("we", "our", "us") is operated by Urbaez Belandria Holdings LLC, a Delaware limited liability company, doing business as ThriftAI. This Privacy Policy describes how we collect, use, and protect your personal information when you use thriftai.app, our browser extension, or any related services (collectively, "Services").

By using our Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

2. Information We Collect

2.1 Account Information

When you sign up, we collect: email address, name (if provided), and authentication credentials (handled by our auth provider, Clerk).

2.2 Listing Data

We store listing information you create or import, including: product titles, descriptions, prices, photos, SKUs, brand, size, condition, measurements, and inventory status.

2.3 Platform Integration Data

When you connect marketplace accounts (eBay, Poshmark, Mercari, Depop, Vinted), we store: API tokens (encrypted), platform usernames, listing IDs, and transaction records necessary to synchronize your inventory.

2.4 Payment Information

Payment data is processed by Stripe. We do not store your full credit card details — only the last four digits for display purposes and your Stripe customer ID.

2.5 Usage Data

We collect metadata about your use of the Services: number of listings created, cross-list actions, feature usage, API call counts, and error logs. This helps us improve the Services and enforce plan limits.

2.6 Browser Extension Data

Our browser extension accesses marketplace websites you visit (poshmark.com, mercari.com, depop.com, vinted.com) only when you actively use the extension's features. It reads page content needed to automate cross-listing, scraping your closet, and syncing sold items. The extension does not track your general browsing activity.

3. How We Use Your Information

We use collected information to:

  • Generate AI-powered product listings from your photos
  • Cross-list your products to connected marketplaces
  • Automatically delist sold items across platforms
  • Sync platform URLs and inventory status
  • Process payments and manage subscriptions
  • Provide customer support
  • Send transactional emails (receipts, limit warnings)
  • Improve our AI models and service quality
  • Comply with legal obligations

4. Third-Party Services

We share limited data with the following service providers, each of whom has their own privacy policies:

  • Clerk — authentication and user management
  • Supabase — database and file storage
  • Stripe — payment processing
  • OpenAI — AI listing generation (photos sent as base64, no retention per OpenAI's API policy)
  • Vercel — hosting and infrastructure
  • Cloudflare R2 — photo storage
  • eBay, Poshmark, Mercari, Depop, Vinted — marketplace APIs for listing operations

We do not sell your personal information to third parties.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law (e.g., tax records). Anonymized usage data may be retained indefinitely for analytics.

6. Your Rights

Depending on your jurisdiction, you have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate data
  • Delete your account and associated data
  • Export your listings and data (data portability)
  • Opt out of marketing communications
  • Lodge a complaint with a supervisory authority

To exercise these rights, email support@thriftai.app.

7. Security

We implement industry-standard security measures including HTTPS encryption, encrypted API tokens, access controls, and regular security reviews. However, no system is 100% secure, and we cannot guarantee absolute security.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking.

9. Children's Privacy

The Services are not intended for users under 18. We do not knowingly collect data from minors. If we discover we have collected data from a minor, we will delete it promptly.

10. California Residents (CCPA)

California residents have additional rights under the CCPA, including the right to know what information we collect and the right to opt out of the sale of personal information. We do not sell personal information.

11. International Users

Our Services are operated from the United States. If you access the Services from outside the US, you consent to transferring your data to the US for processing.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. The "Last updated" date at the top indicates when it was last revised.

13. Contact

For privacy questions or concerns, contact:

ThriftAI
Email: support@thriftai.app