Privacy Policy

1. Introduction

Welcome to Thrifit ("we", "our", or "us"), operated by Scandind Software Solutions. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (https://shop.thrifit.com) and our mobile application (the "App"), collectively referred to as the "Services". Please read this policy carefully. If you disagree with its terms, please discontinue use of our Services.

2. Information We Collect

We collect information you provide directly, information collected automatically, and information from third parties.

2.1 Information You Provide

• Account information: Name, email address, password, and profile picture when you register.
• Profile information: Seller profile details, store name, and bio.
• Transaction data: Billing address, shipping address, and order history when you buy or sell items.
• Product listings: Photos, descriptions, pricing, and other details you submit when listing items for sale.
• Communications: Messages you send through our platform or to our support team.

2.2 Information Collected Automatically

• Device information: Device model, operating system version, unique device identifiers, and mobile network information.
• Usage data: Pages and screens you view, features you use, searches you perform, and how you interact with the Services.
• Log data: IP address, browser type, referring URLs, and timestamps.
• Cookies and similar technologies: We use cookies and similar tracking technologies to improve your experience. See Section 8 for more details.

3. Photos and Media Access

Our mobile application requests access to your device's photo library and media storage. Here is exactly what we access and why:

• Why we need it: To allow sellers to upload photos of items they wish to list for sale, and to allow buyers to update their profile picture.
• What we access: Only the specific photos you choose to select and upload. We do not scan, browse, or access your entire photo library without your explicit selection.
• How photos are used: Selected photos are uploaded securely to our cloud storage (Amazon Web Services S3) and are displayed within product listings or your profile.
• What we do not do: We do not access your camera roll automatically, read metadata beyond what is necessary for display, or share your photos with third parties for advertising purposes.
• Revoking access: You can revoke photo library access at any time via your device's Settings → Privacy → Photos. Revoking access will only prevent future uploads; it does not delete previously uploaded images.

4. How We Use Your Information

We use the information we collect to:

• Create and manage your account.
• Process transactions, including purchases and sales of items.
• Facilitate product listings including photo uploads and descriptions.
• Send you transaction confirmations, receipts, and order updates.
• Respond to your comments, questions, and customer service requests.
• Send you marketing and promotional communications (with your consent, where required by law).
• Monitor and analyze trends, usage, and activities to improve our Services.
• Detect, investigate, and prevent fraudulent transactions and other illegal activity.
• Comply with legal obligations and enforce our Terms of Service.

5. Sharing of Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service providers: We work with third-party vendors (such as cloud hosting, payment processors, and analytics providers) who access your data only to perform services on our behalf and are bound by confidentiality obligations.
• Marketplace transactions: When you buy or sell on Thrifit, certain information (such as your display name, product photos, and delivery address) is shared with the other party to fulfill the transaction.
• Legal requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With your consent: We may share your information for any other purpose with your explicit consent.

6. Third-Party Services

Our Services use the following third-party services that may collect information:

• Amazon Web Services (AWS S3): Secure cloud storage for product images and other media.
• Google Play Services: Used on Android devices for app distribution and may collect standard device analytics.
• Expo / React Native: Framework used to build our mobile application.

These third parties have their own privacy policies governing their use of your data. We recommend reviewing their policies directly.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. We may also retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

If you close your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal or regulatory purposes.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (such as web beacons and pixels) to collect and use personal information about you. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of our Services may not function properly without cookies.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all data in transit.
• Secure, private storage buckets for user-uploaded media (AWS S3 with signed URLs).
• Password hashing using industry-standard algorithms.
• Access controls limiting who within our organization can access personal data.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Your Rights and Choices

Depending on your location, you may have the right to:

• Access: Request a copy of the personal information we hold about you.
• Rectification: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information ("right to be forgotten").
• Portability: Request a machine-readable copy of your data to transfer to another service.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdraw consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise these rights, please contact us at privacy@thrifit.com. We will respond within 30 days.

11. Children's Privacy

Our Services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information. If you believe we may have collected information from a child under 13, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you are resident. These countries may have data protection laws that differ from those of your country. By using our Services, you consent to the transfer of your information to these countries.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make material changes, we will notify you via email or a prominent notice within the App prior to the change becoming effective. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: