ReFind ("we," "us," or "our") operates the ReFind mobile application and website at https://www.refindapp.com/ (collectively, the "Service"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Service.
By using ReFind, you agree to the collection and use of information as described in this Privacy Policy.
1. Information We Collect
Account Information
When you create an account, we collect your email address, username, display name, password, profile photo (optional), bio (optional), and location (optional).
Transaction Information
When you buy or sell items, we collect shipping addresses, order history and details, payment information (processed and stored securely by Stripe — we do not store your full card number), and seller payout details (via Stripe Connect).
Content You Create
We collect information you provide when using the Service, including listing details (title, description, photos, price, size, condition, measurements), messages between you and other users, reviews and ratings, and offer and counter-offer details.
Device & Usage Information
We automatically collect certain information when you use the Service, including device type, operating system, and version, push notification tokens (for sending you notifications), app usage patterns and feature interactions, and IP address and general location data.
2. How We Use Your Information
We use your information to operate and improve the Service, including to create and manage your account, facilitate transactions between buyers and sellers, process payments and seller payouts, send push notifications about orders, messages, offers, and other activity, display your profile and listings to other users, provide customer support, enforce our Terms of Service and prevent fraud, analyze usage patterns to improve the app, and communicate important updates about the Service.
3. How We Share Your Information
We share your information in the following circumstances:
With Other Users
Your profile information (display name, username, avatar, bio, location) is visible to other users. Listing details are publicly visible. When you complete a transaction, your shipping address is shared with the seller. Messages are visible to the conversation participants.
With Stripe
We use Stripe to process payments and seller payouts. When you make a purchase or set up seller payouts, your payment information is shared with Stripe and processed according to Stripe's privacy policy (https://stripe.com/privacy). Stripe may collect additional information directly from you during payment.
With Service Providers
We use Supabase for hosting, database, authentication, and file storage. These providers process your data on our behalf and are contractually obligated to protect it.
For Legal Reasons
We may disclose your information if required to comply with applicable law, legal process, or government request, enforce our Terms of Service, protect the rights, property, or safety of ReFind, our users, or the public, or detect, prevent, or address fraud, security, or technical issues.
Business Transfers
If ReFind is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
We do not sell your personal information to third parties.
4. Data Security
We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS), secure authentication via Supabase, payment information handled exclusively by Stripe (PCI-compliant), and secure storage for authentication tokens on your device.
However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, tax, or regulatory purposes.
Transaction records may be retained for up to 7 years for tax and legal compliance. Messages and reviews may persist after account deletion if they are part of another user's transaction history.
6. Your Rights & Choices
Account Information
You can update your profile information at any time through the app. You can change your display name, bio, location, and profile photo in your profile settings.
Notifications
You can manage push notification preferences in your device settings. You may opt out of push notifications at any time, though this may affect your ability to receive timely updates about orders and messages.
Account Deletion
You may request deletion of your account by contacting us at privacy@refindapp.com. Upon deletion, we will remove your personal data as described in the Data Retention section.
Data Access
You may request a copy of the personal data we hold about you by contacting us at privacy@refindapp.com. We will respond to your request within 30 days.
California Residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to request deletion of your personal information, and the right to opt out of the sale of personal information (we do not sell personal information).
7. Children's Privacy
ReFind is not intended for children under 13. We do not knowingly collect personal information from children under 13. Users between 13 and 17 may use the Service with parental consent but may not sell items. Users must be 18 or older to sell on ReFind.
If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at privacy@refindapp.com.
8. Third-Party Services & Links
The Service may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.
Key third-party services we use include Stripe for payment processing (https://stripe.com/privacy) and Supabase for backend infrastructure (https://supabase.com/privacy).
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or via email. Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.
We encourage you to review this Privacy Policy periodically.
10. Contact Information
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: privacy@refindapp.com
Website: https://www.refindapp.com/
For general support inquiries, contact support@refindapp.com.