Privacy Policy

1. Information We Collect

A. Account Information

We may collect:

• Name
• Email address
• Password or authentication credentials
• Account identifier
• Subscription plan
• Subscription status
• Account creation date
• Last login or activity date
• Communication preferences

Passwords should be stored through secure authentication systems and not in readable form.

B. Wardrobe Information

We may collect information you upload or enter about clothing and accessories, including:

• Item photographs
• Item names
• Clothing categories
• Colors
• Patterns
• Materials
• Brands
• Sizes
• Seasons
• Style tags
• Occasion tags
• Purchase dates
• Purchase prices
• Wear counts
• Last-worn dates
• Cost-per-wear
• Availability
• Donated, sold, archived, laundry, cleaner, or packed status
• Collections and saved outfits
• Notes and preferences

C. Images and Camera Information

When you use image features, we may receive:

• Images selected from your device
• Photographs taken through the camera
• Image metadata provided by your device or browser
• Processed or background-removed versions
• Automatically detected clothing attributes
• Generated outfit or item previews

Camera access occurs only after you grant device or browser permission.

We do not intend to collect precise location embedded in photo metadata. Where technically feasible, unnecessary metadata should be removed during processing.

D. Style and Preference Information

We may collect:

• Preferred styles
• Colors you prefer or avoid
• Typical occasions
• Fit preferences
• Formality preferences
• Lifestyle selections
• Clothing categories
• Outfit likes and dislikes
• Saved, worn, dismissed, or regenerated recommendations
• Feedback about recommendations
• Items you frequently replace or exclude

E. Calendar Information

If you connect a calendar, we may collect authorized information such as:

• Event title
• Event date and time
• Event description
• Event location
• Calendar identifier
• Attendance or event status
• Information needed to infer an occasion
• Your linked outfit or planning selections

We request only the calendar permissions needed to provide the selected functionality.

You can disconnect calendar access through Drip to Drip or your calendar provider.

F. Purchase and Scan-to-Match Information

When you analyze an item, we may collect:

• Uploaded product or thrift-item images
• Product descriptions
• Price
• Store or partner information
• Detected item attributes
• Compatibility results
• Similarity results
• Saved analysis history
• Missing Link results

G. Payment and Subscription Information

Payments may be processed by Stripe or another payment provider.

We may receive:

• Billing name
• Billing email
• Customer identifier
• Subscription identifier
• Selected plan
• Payment status
• Renewal date
• Cancellation date
• Card brand
• Last four digits
• Transaction amount
• Tax information
• Discount or promotional information

We do not receive or store your complete payment-card number.

H. Device and Usage Information

We may automatically collect:

• Internet Protocol address
• Browser type
• Operating system
• Device type
• Device identifiers
• Language
• Time zone
• Referral page
• Pages and screens viewed
• Buttons or features used
• Session dates and duration
• Errors and crash information
• Installation status
• Standalone PWA use
• Network status
• Usage limits and quota activity
• General, approximate location inferred from IP address

I. Push Notification Information

If you enable notifications, we may collect:

• Notification permission status
• Push-subscription identifier
• Device or browser endpoint
• Notification preferences
• Notification delivery and opening data

You can disable notifications through your account, browser, installed application, or device settings.

J. Communications

When you contact us, we may collect:

• Name
• Email address
• Message
• Support history
• Attachments
• Feedback
• Survey responses

K. Circular Partner Information

If you apply to become or appear as a Circular Partner, we may collect:

• Business or professional name
• Contact name
• Email
• Phone number
• Website
• Social-media pages
• Location
• Service categories
• Hours
• Images
• Business description
• Pricing information
• Verification details
• Partnership communications

2. How We Use Information

We may use personal information to:

• Create and manage accounts
• Authenticate users
• Store and display digital wardrobes
• Analyze clothing images
• Generate outfit recommendations
• Personalize recommendations
• Calculate cost-per-wear
• Identify underused items
• Provide Scan-to-Match
• Generate Missing Link analyses
• Synchronize calendar events
• Generate calendar outfit suggestions
• Save outfits and wardrobe history
• Process subscriptions and payments
• Send service communications
• Send authorized push notifications
• Respond to support requests
• Improve product functionality
• Detect fraud, misuse, or security incidents
• Enforce our Terms
• Meet legal requirements
• Maintain records
• Evaluate product performance
• Manage local Circular Partner listings

3. Artificial Intelligence Processing

We may use AI and automated tools to:

• Detect clothing categories and attributes
• Remove image backgrounds
• Match colors and styles
• Generate outfit suggestions
• Create visual previews
• Analyze wardrobe compatibility
• Identify similar items
• Estimate wardrobe gaps
• Infer event occasions
• Personalize future recommendations

AI results may be inaccurate. Users can review and correct automatically generated information where the feature permits.

We will not use personal wardrobe images to train a shared or generally available AI model unless:

• We clearly disclose the proposed use; and
• We obtain separate permission where required

Service providers may process information to provide AI functionality under contractual or technical restrictions.

4. How We Share Information

We may share personal information with the following categories of recipients.

A. Service Providers

We may use providers for:

• Cloud hosting
• Image storage
• AI processing
• Authentication
• Payment processing
• Calendar integration
• Email delivery
• Push notifications
• Analytics
• Error monitoring
• Customer support
• Security and fraud prevention

These providers receive information needed to perform services for us.

B. Payment Providers

Payment and billing information may be shared with Stripe or another payment processor.

Their handling of payment information is governed by their own privacy terms.

C. Calendar Providers

When you connect a calendar, information may be exchanged with the selected calendar provider to authorize, retrieve, update, or synchronize permitted calendar functionality.

D. Circular Partners

We do not automatically share your private wardrobe or account information with Circular Partners.

Information may be shared when you:

• Request contact
• Book or inquire about a service
• Submit an item for consignment
• Ask a partner to hold an item
• Use a partner referral
• Otherwise direct us to share information

E. Legal and Safety Disclosures

We may disclose information when reasonably necessary to:

• Comply with law
• Respond to valid legal process
• Protect users
• Investigate fraud or abuse
• Enforce our agreements
• Protect our property or rights
• Respond to a safety or security incident

F. Business Transactions

Information may be transferred as part of a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction.

We will take reasonable steps to ensure that information remains subject to appropriate protections.

G. With Your Direction

We may share information when you request, direct, or consent to the sharing.

5. Sale and Targeted Advertising

Drip to Drip does not sell personal wardrobe images or calendar information for money.

We do not sell personal information as the term is commonly understood.

If our practices change, or if applicable law treats certain advertising or analytics activities as a “sale,” “sharing,” or targeted advertising, we will provide required notices and opt-out methods.

California law may provide qualifying residents with rights to know, delete, correct, and opt out of certain sales or sharing of personal information. Texas law also provides qualifying residents with access, correction, deletion, portability, and certain opt-out rights.

6. Cookies and Similar Technologies

We may use cookies, local storage, service workers, pixels, and similar technologies to:

• Keep users signed in
• Remember preferences
• Enable PWA installation
• Cache permitted application assets
• Measure usage
• Detect errors
• Prevent fraud
• Support payment and calendar integrations
• Remember dismissed prompts
• Deliver authorized notifications

You may manage certain technologies through your browser settings.

Disabling cookies or storage may prevent some features from working.

7. Progressive Web Application Storage

When you install or use the Drip to Drip PWA, your browser or device may store:

• Application files
• Icons
• Interface assets
• Limited cached pages
• Installation preferences
• Notification subscriptions
• Recently viewed content where permitted

We do not intend to rely on local device storage as the sole storage location for your wardrobe.

Clearing browser data or uninstalling the PWA may remove locally cached information, but it does not necessarily delete information stored in your Drip to Drip account.

To delete account information, use the available account-deletion function or contact us.

8. Push Notifications

Push notifications are optional.

We may send notifications you authorize regarding:

• Calendar events
• Outfit reminders
• Completed Smart Checks
• Missing Link results
• Underused wardrobe items
• Subscription issues
• Security or account matters
• Product updates
• Promotions, when separately permitted

You can disable notifications in:

• Drip to Drip settings
• Browser settings
• Device settings
• The installed PWA settings

Disabling promotional notifications will not necessarily prevent essential account, security, or billing messages delivered by email or in-app notice.

9. Data Retention

We retain information for as long as reasonably necessary to:

• Provide the service
• Maintain your account
• Complete transactions
• Resolve disputes
• Enforce agreements
• Detect abuse
• Meet legal, tax, accounting, and security obligations

Retention periods vary by data type.

When you delete an item or account, information may remain temporarily in:

• Backups
• Security logs
• Fraud-prevention records
• Transaction records
• Legally required records

We aim to remove or de-identify information when it is no longer reasonably needed.

The FTC recommends that businesses understand the personal information they maintain, keep only what is needed, protect it, dispose of it appropriately, and plan for security incidents.

10. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information.

These measures may include:

• Access controls
• Secure authentication
• Encryption in transit
• Restricted service-provider access
• Logging and monitoring
• Backup controls
• Security updates
• Incident-response procedures

No online system is completely secure. We cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur.

Texas law requires covered businesses to maintain reasonable safeguards for sensitive personal information and includes breach-notification obligations.

11. Your Choices and Controls

Depending on available features, you may:

• Update account details
• Edit style preferences
• Correct clothing classifications
• Delete wardrobe items
• Delete images
• Disconnect your calendar
• Disable notifications
• Cancel a subscription
• Mark items as donated or sold
• Request an account export
• Request account deletion
• Change communication preferences

You can contact us at hello@sgabuilds.com for assistance.

12. U.S. State Privacy Rights

Depending on where you live and whether the relevant law applies to Valencia Drive Commerce LLC, you may have the right to:

• Confirm whether we process your personal information
• Access your personal information
• Correct inaccurate information
• Delete personal information
• Obtain a portable copy
• Opt out of targeted advertising
• Opt out of the sale of personal information
• Opt out of certain profiling
• Appeal a denied privacy request
• Avoid unlawful discrimination for exercising privacy rights

To submit a request, email:

hello@sgabuilds.com

Use the subject line:

Privacy Request — Drip to Drip

We may need to verify your identity before completing a request.

Authorized agents may submit requests where permitted by law, subject to verification.

We will respond within the period required by applicable law.

13. California Privacy Notice

This section applies only when California law applies to our processing.

California residents may have rights regarding categories of personal information collected, sources, purposes, disclosures, access, correction, deletion, portability, and opt-out choices.

During the preceding 12 months, we may have collected the categories described in this Policy, including:

• Identifiers
• Account information
• Commercial and subscription information
• Internet or electronic activity
• Approximate geolocation
• User-provided images
• Preferences and inferences
• Calendar information
• Communications

We collect and use these categories for the purposes described in this Policy.

We do not knowingly sell personal information of users under 16.

To exercise applicable rights, contact hello@sgabuilds.com.

14. Texas Privacy Notice

Texas residents may have applicable rights to:

• Confirm whether personal data is being processed
• Access personal data
• Correct inaccuracies
• Delete personal data
• Obtain portable data
• Opt out of sale, targeted advertising, or certain profiling
• Appeal a denied request

Requests and appeals may be sent to hello@sgabuilds.com.

The Texas Data Privacy and Security Act became effective July 1, 2024 and provides qualifying Texas residents with rights over personal data.

15. Children’s Privacy

Drip to Drip is not directed to children under 13.

We do not knowingly collect personal information from children under 13.

If we learn that a child under 13 has submitted personal information, we will take reasonable steps to delete it.

Parents or guardians may contact:

hello@sgabuilds.com

The FTC’s COPPA Rule places requirements on online services that knowingly collect personal information from children under 13.

16. International Users

Drip to Drip is operated from the United States.

If you use the service from another country, your information may be transferred to, stored in, and processed in the United States or other locations where our service providers operate.

Privacy laws in those locations may differ from the laws of your country.

Where required, we will use appropriate mechanisms for international data transfers.

17. Third-Party Links and Services

Our service may link to third-party websites or services.

Their privacy practices are governed by their own policies.

We are not responsible for the privacy, security, or content of third-party services.

Review their policies before providing information.

18. Changes to This Privacy Policy

We may update this Privacy Policy as our features, data practices, vendors, or legal obligations change.

We will:

• Update the “Last Updated” date
• Post the revised policy
• Provide additional notice when required
• Request consent when legally necessary

We encourage users to review the Policy periodically.

California privacy guidance recommends that covered businesses maintain and periodically update disclosures describing their privacy practices.

19. Contact Us

Questions, requests, or concerns about this Privacy Policy may be sent to:

Valencia Drive Commerce LLC
Drip to Drip
Email: hello@sgabuilds.com

For privacy requests, use the subject line:

Privacy Request — Drip to Drip