PsycleBack

1. Introduction

PsycleBack ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website and mobile app (collectively, the "Services").

2. Information We Collect

2.1 Information You Provide

When you create an account or use our Services, you may provide us with:

Account information: name, email address, username, and password
Profile information: profile photo, bio, and closet name
Listing information: item descriptions, photos, and prices. Listing photos are public. We automatically strip embedded camera metadata — including EXIF and GPS location data — from images when they are uploaded, so the location where a photo was taken is not published or shared (see Section 2.4)
Payment information: processed securely through Stripe — we do not store your credit card details
Shipping information: name, address, and phone number
Phone number: used solely for transactional SMS messages (order updates, verification codes, shipping notifications)
Communications: messages with us or other users through the platform

2.2 Information We Collect Automatically

When you use our Services, we automatically collect:

Device information (IP address, browser type, operating system)
Usage data (pages visited, features used, time spent)
Location data (if you enable location services)
Cookies and similar tracking technologies (see Section 3)

2.3 Information from Third Parties

If you sign in using Apple, Google, or another third-party service, we receive basic profile information as authorized by you.

2.4 Photos and Image Metadata

Photos you upload (listing images, profile photos, closet banners) are often taken at home or other private locations, and the image files can contain embedded metadata such as EXIF data and GPS coordinates. To protect your privacy, we automatically remove this embedded camera metadata — including any GPS/location data — from images at the time of upload, before they are stored or made publicly visible. The visible photo is retained; the hidden location data is not.

Retention and deletion of photos. When you delete a listing photo or close your account, we remove the image from active systems. However, because items can be resold on PsycleBack, a listing photo may continue to exist in other places that are part of the item's history — for example, in a buyer's closet after they purchase the item, in completed-sale and order records, and in marketing material that was already published. For items that have been sold, these copies may persist as described in Section 11 of our Terms & Conditions. Backup copies are purged on our regular backup rotation.

3. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Keep you logged in
Remember your preferences
Analyze site traffic and usage
Improve our Services

You can control cookies through your browser settings, but disabling cookies may limit certain features.

3.1 Analytics — Google Analytics 4

We use Google Analytics 4 ("GA4"), a web analytics service provided by Google LLC, to understand how visitors use our Services. When you consent to analytics cookies, GA4 sets cookies (including _ga and _ga_*) that identify your browser and help us aggregate page views, session duration, and traffic sources. Google processes this information on our behalf as a data processor; a truncated form of your IP address is used and is not stored by Google in a form that identifies you.

We implement Google Consent Mode v2. Analytics and advertising cookies are denied by default until you accept them via our cookie banner. Until you accept, Google Analytics receives only anonymous, cookieless "consent-mode" pings that cannot be used to identify or retarget you.

You can change your choice at any time via the Cookie settings link in the site footer. You can also opt out of Google Analytics entirely by installing the Google Analytics opt-out browser add-on. For details on how Google processes data collected via GA4, see Google's Privacy Policy.

Cookies we set directly (not analytics) include a session cookie for authentication, a pb_consent cookie that remembers your cookie choice, and cookies that remember your preferences (theme, cart, locale).

3.2 Crash and Performance Reporting — Sentry

Our mobile app uses Sentry, a service provided by Functional Software, Inc. ("Sentry"), to automatically collect crash reports, error logs, and performance diagnostics so we can detect and fix problems. This data may include device model, operating system version, app version, and a technical stack trace describing the error. We configure Sentry not to attach personally identifying information to these reports, and we scrub event data before it is sent. Sentry processes this information on our behalf as a data processor. For details, see Sentry's Privacy Policy.

4. How We Use Your Information

We use your information to:

Provide and improve our Services
Process transactions and payments
Send transactional SMS messages (order confirmations, shipping updates, verification codes)
Communicate with you about your account and orders
Detect and prevent fraud, abuse, and security issues
Comply with legal obligations
Personalize your experience

We do not use your personal information, phone number, or email address for marketing or promotional purposes unless you explicitly opt in.

5. Sharing Your Information

We do not sell, rent, or share your personal information with third parties for their marketing purposes. Your data is only shared in the following limited circumstances:

5.1 Service Providers

We use trusted service providers solely to operate the PsycleBack platform:

Stripe: Payment processing
DigitalOcean: Hosting and infrastructure
SMS/Text Message Providers: We use third-party services to deliver SMS/text messages (order updates, verification codes)
Postmark: Transactional email delivery
Shippo: Shipping label generation
Sentry: Crash reporting and performance diagnostics (see Section 3.2)

These providers process data only on our behalf and are contractually prohibited from using your information for any other purpose.

5.2 Other Users

When you list items, your Finder profile (username, bio, items) is visible to other users. Your email address, phone number, and payment information are never shared with other users.

5.3 Legal Compliance

We may disclose your information if required by law, to protect our rights, or to prevent fraud or harm.

6. SMS/Text Message Privacy

When you provide your mobile number on PsycleBack, it is used exclusively for transactional purposes:

Order confirmations and shipping updates
Account verification and password reset codes
Delivery notifications

Message frequency varies based on your activity. You will not receive more than 10 messages per month unless you are an active seller with high order volume. Message and data rates may apply.

Mobile numbers are never sold, rented, or shared with third parties for marketing or promotional purposes. SMS/text messages are delivered through third-party providers, which process your mobile number solely to deliver messages on our behalf. You can opt out of SMS at any time by texting STOP (see our SMS Terms & Conditions for full details).

7. Data Security

We use industry-standard security measures to protect your data, including:

Encryption in transit (HTTPS/TLS)
Secure password hashing
Access controls and monitoring
Encrypted database connections

While we take reasonable precautions, no system is 100% secure. Use strong, unique passwords and report suspicious activity immediately.

8. Data Retention

We retain your personal information only as long as necessary to provide our Services and fulfill the purposes described in this policy. Specifically:

Active accounts: Data is retained while your account is active
Deleted accounts: Personal information is removed from active systems promptly upon account deletion
Transaction records: May be retained for up to 7 years for legal and tax compliance
SMS opt-out records: Retained to honor your opt-out preferences

9. Your Rights and Choices

You have the right to:

Access: Request a copy of your personal data
Correction: Update or correct your information in your account settings
Deletion: Request deletion of your account and associated data (see Section 10)
Opt-Out of SMS: Text STOP to any PsycleBack message
Data Portability: Request your data in a machine-readable format

To exercise these rights, contact us at contact@psycleback.com or visit our contact page.

10. Account Deletion

You can delete your account at any time from your Account Settings. When you delete your account:

Your profile and listings will be permanently removed
Your personal information will be deleted from our active systems
Some data may be retained for legal or security purposes (e.g., transaction records)
Deletion is permanent and cannot be undone

11. Children's Privacy

PsycleBack is not intended for users under 13 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us.

12. International Users

PsycleBack is based in the United States. If you access our Services from outside the U.S., your information may be transferred to and processed in the U.S. where data protection laws may differ from your jurisdiction.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the effective date. Continued use of our Services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at contact@psycleback.com or visit our contact page.