Legal

Privacy Policy

Draft prepared July 19, 2026. Effective date: [effective date]

This is a working draft prepared for review. It is not legal advice, and it should be reviewed by an attorney before publication, including a check against the privacy laws that apply where thrippy operates. Highlighted placeholders mark details that need to be confirmed.

1. Who we are

thrippy is operated by [legal entity name]. This policy explains what information we collect from store partners who connect their Shopify stores to thrippy, what we do with it, and the choices available to you. A separate section covers information about thrifters who use the thrippy app and community.

2. Information we collect from store partners

Store information that Shopify provides during installation, such as your store name, store URL, and the email address associated with your Shopify account.
Product and inventory data that syncs from your store, such as titles, descriptions, images, prices, and stock availability. We receive this through Shopify's API with read-only permissions that you approve at install.
Messages you send us, such as support emails and replies to our onboarding emails.

We do not receive or store your Shopify API credentials. The connection is managed entirely by Shopify, and uninstalling the app revokes our access immediately.

3. Information we collect from thrippy users

[Confirm the final list for the consumer side of the product, including account details, saved preferences, style quiz responses, community posts on community.thrippy.fun, and any analytics events. This section should be completed alongside the app's data inventory.]

4. How we use information

To operate the service, including displaying store inventory to thrifters and keeping listings in sync.
To communicate with you about your account, your sync status, and program updates.
To improve thrippy, using aggregated or de-identified information wherever possible.

We do not sell personal information, and we do not use store partner data for advertising.

5. When we share information

With service providers who help us run thrippy, such as hosting and email providers: [list processors].
With the public, in the limited sense that your store name and product listings are visible to thrippy users by design.
When the law requires it, or to protect the rights and safety of thrippy, our partners, or our users.

6. Retention

We keep store partner data for as long as your store is connected. When you uninstall the app, we remove your listings from the service and delete synced product data within [retention period, e.g. 30 days], except where we are required to keep records for legal or accounting purposes.

7. Security

We protect information with access controls, encryption in transit, and the security architecture of the Shopify platform itself. No system is perfectly secure, and we will notify affected partners without undue delay if a breach affects their data.

8. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information. You can exercise these rights by writing to [privacy contact email]. [Confirm with counsel which frameworks apply, such as GDPR, UK GDPR, CCPA, and state privacy laws, and whether a data processing addendum is needed for store partners.]

9. Children

thrippy is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes and contact

If we make material changes to this policy, we will notify store partners by email before the changes take effect and update the effective date above. Questions about this policy can be sent to [privacy contact email], and a real person will answer.