Privacy Policy

Account information: When you create an account we collect your full name and email address. Merchants additionally provide brand name, business address, bank/payout details, and brand assets (logo, description) during the application process.

Order and shipping information: When you place an order we collect the shipping name and address you provide, the items purchased (product name, brand, size, color, quantity, price), the order total, and your payment method type (card brand, last 4 digits). We do not store your full card number, CVV, or expiry date — all payment data is handled by Stripe (see Section 5).

Return and support information: If you submit a return request or contact support, we collect the reason you provide and any supporting detail (e.g., photos attached to a photo review or return request).

Content you submit: Product reviews (including star ratings, written reviews, and photos), wishlist items, and any messages or communications you send through the platform.

Device and usage information: We automatically collect standard server log data when you visit EzWardrobe, including your IP address, browser type and version, operating system, referring URL, pages viewed, and timestamps. We also collect search queries you enter on the platform to improve search relevance and surface trending products. This information does not identify you individually unless combined with account data.

Cookies and local storage: We use browser cookies and localStorage to maintain your login session, store your shopping cart between visits, and remember UI preferences (see Section 6).

Marketing engagement: If you opt into marketing communications, we track open rates and click-throughs on emails we send you. This data is processed by Klaviyo (see Section 5).

We use the information we collect for the following purposes:

• Fulfilling orders — routing order details and shipping addresses to the appropriate Merchant, processing payments via Stripe, and generating order confirmation and shipping notification emails.
• Account management — authenticating your identity, enforcing our Terms of Service, and enabling account features such as order history, wishlists, saved addresses, and return requests.
• Customer support — responding to your inquiries, mediating disputes between Customers and Merchants, and processing refund or return requests.
• Platform improvement — analyzing aggregate usage patterns to improve site performance, search relevance, product recommendations, and the merchant onboarding experience. We do not make automated decisions that produce legal or similarly significant effects based solely on this analysis.
• Security and fraud prevention — detecting and preventing unauthorized access, fraudulent transactions, chargeback abuse, and other harmful activity.
• Marketing and promotional communications — sending you new drop announcements, promotional offers, and product recommendations if you have opted in. You can opt out at any time (see Section 9).
• Legal compliance — meeting our obligations under applicable law, responding to lawful requests from government authorities, and enforcing our legal rights.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

With Merchants (sellers): When you place an order, the Merchant(s) whose products you purchased receive your shipping name, shipping address, item details (product, size, color, quantity), and order number. They need this to fulfill your order. Merchants are prohibited by our Terms of Service from using your information for any purpose other than fulfilling your order and handling returns.

Within multi-merchant orders: Each Merchant receives only the items they are fulfilling — not the items from other Merchants in the same cart.

With service providers: We share data with carefully selected third-party services that help us operate the platform. Each service receives only the data necessary for its function (see Section 5 for full details). Our current providers include:

• Stripe — payment processing
• Supabase — database and authentication infrastructure
• Resend — transactional email delivery
• Klaviyo — marketing email and order tracking
• Vercel — hosting and edge infrastructure
• Anthropic — AI-assisted merchant product import (no customer data shared)

Legal and safety disclosures: We may disclose information if required by law, regulation, judicial process, or a legitimate government request; to protect the rights, property, or safety of EzWardrobe, our users, or the public; or in connection with fraud investigation or prevention.

Business transfers: If EzWardrobe is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent site notice before your information becomes subject to a different privacy policy.

With your consent: We may share your information for other purposes if you give us explicit permission to do so.

We retain your personal information for as long as necessary to provide the platform and meet the purposes described in this policy, subject to the following guidelines:

• Account data — retained for the life of your account. If you request account deletion, we will delete or anonymize your profile data within 30 days, subject to the exceptions below.
• Order and transaction records — retained for 7 years after the transaction date to comply with tax, accounting, and consumer protection legal requirements. This includes order items, amounts, and shipping addresses.
• Email logs — retained for 90 days for deliverability troubleshooting and retry logic.
• Server and usage logs — retained for up to 90 days.
• Marketing engagement data — retained until you unsubscribe, at which point your marketing profile with Klaviyo is suppressed.
• Reviews and public content — reviews you submit remain visible after account deletion unless you specifically request removal. Deleted account reviews are anonymized (name replaced with "Anonymous").

We may retain certain data beyond these periods if required by law, needed to resolve a dispute, or necessary to enforce our agreements.

The following third-party services receive personal data as part of operating EzWardrobe. Each has its own privacy policy and data practices independent of ours.

We use the following browser technologies to operate the platform:

• Authentication cookies — Supabase sets a session cookie after you sign in to keep you logged in between page loads and browser sessions. This cookie is essential for account functionality; the platform cannot work without it.
• Shopping cart (localStorage) — Your cart contents are stored in your browser's localStorage so items persist across page navigation and browser restarts without requiring sign-in. This data stays on your device and is not transmitted to our servers until you check out.
• Recently viewed products (localStorage) — We store recently viewed product IDs in localStorage to power the "recently viewed" feature on product pages.
• Notification state (localStorage) — We store a timestamp of when you last viewed your notification bell to determine which notifications are "new".
• Maintenance bypass cookie — If the site is in maintenance mode, an authorized bypass cookie is set. This is not used in normal operation.

We do not currently use third-party advertising or tracking cookies. If this changes, we will update this policy and obtain consent where required.

You can control cookies through your browser settings. Disabling cookies will prevent you from remaining signed in and may affect other platform features. Clearing localStorage will empty your cart and clear recently viewed data.

We implement the following security measures to protect your information:

• All data in transit is encrypted via HTTPS/TLS
• Database access is protected by row-level security (RLS) policies — each user can only access their own data
• Service role credentials (which bypass RLS) are used only in server-side API routes and never exposed to the browser
• Payment card data is handled exclusively by Stripe and never stored on our systems
• Cron job endpoints and internal APIs require secret key authentication

No system connected to the internet is completely secure. We cannot guarantee that our security measures will prevent all unauthorized access. In the event of a data breach that affects your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

Depending on your location, you may have specific rights regarding your personal information. We honor these rights regardless of where you are located.

Right to access: You may request a copy of the personal information we hold about you.

Right to correct: You may request that we correct inaccurate or incomplete information. You can update your name and email directly in your account settings.

Right to delete: You may request deletion of your account and associated personal data. We will honor this request subject to our legal retention obligations (e.g., transaction records kept for 7 years for tax purposes). To request deletion, email us at support@shopezwardrobe.com with the subject line "Delete My Account."

Right to data portability: You may request your personal data in a structured, machine-readable format.

Right to object or restrict processing: You may object to or request restriction of certain processing activities, including profiling and direct marketing.

Right to withdraw consent: Where we rely on your consent to process data (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at support@shopezwardrobe.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights.

Categories of personal information collected: identifiers (name, email, IP address); commercial information (purchase history, products viewed); internet or other electronic network activity (browsing history on our site); and geolocation data (shipping address, general location inferred from IP).

We do not sell or share your personal information for cross-context behavioral advertising. We do not "sell" personal information as defined by the CCPA.

Right to know: You have the right to know what categories and specific pieces of personal information we have collected about you, the sources of that information, the business purpose for collection, and the categories of third parties with whom we share it.

Right to delete: You have the right to request deletion of personal information we collected from you, subject to certain exceptions.

Right to correct: You have the right to request correction of inaccurate personal information.

Right to opt out of sale/sharing: Because we do not sell or share personal information for advertising, no opt-out mechanism is required. If this changes, we will add a "Do Not Sell or Share My Personal Information" link.

Right to limit use of sensitive personal information: We do not use sensitive personal information for any purpose beyond what is required to provide the service.

Non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a California privacy request, email support@shopezwardrobe.com with "California Privacy Request" in the subject line. We will respond within 45 days, extendable once by an additional 45 days with notice.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and applicable local data protection laws apply to our processing of your personal data.

Legal basis for processing:

• Contract performance — processing necessary to fulfill your orders, manage your account, and deliver the services you requested
• Legitimate interests — fraud prevention, security, platform improvement, and direct marketing to existing customers (subject to your right to object)
• Legal obligation — retaining transaction records as required by tax and accounting law
• Consent — marketing email subscriptions and, where required, use of non-essential cookies

International transfers: EzWardrobe is operated in the United States. Your data is stored and processed in the US by Supabase and Vercel. When we transfer personal data from the EEA to the US, we rely on Standard Contractual Clauses (SCCs) as the lawful transfer mechanism, where applicable under our service providers' agreements.

Your GDPR rights: access, rectification, erasure, restriction of processing, data portability, and the right to object. You also have the right to lodge a complaint with your local supervisory authority.

Our Data Protection point of contact is reachable at support@shopezwardrobe.com.

We may send you promotional emails about new collections, exclusive offers, and events if you have opted in at account creation or subsequently. Every marketing email includes an unsubscribe link. Clicking it removes you from all marketing lists immediately. You can also email support@shopezwardrobe.com to opt out.

Opting out of marketing does not affect transactional emails: you will continue to receive order confirmations, shipping notifications, and other service-related communications as long as you have an account.

Merchants separately receive operational emails regarding their orders, payouts, and account status. These are not marketing and cannot be unsubscribed from while an active Merchant account exists.

EzWardrobe is not directed to, and does not knowingly collect personal information from, individuals under the age of 18. Our Terms of Service prohibit use of the platform by minors. If we learn that we have inadvertently collected personal information from someone under 18, we will delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@shopezwardrobe.com and we will take immediate steps to delete the data.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send an email notice to the address on your account at least 14 days before the changes take effect
• Post a prominent notice on the platform

Your continued use of EzWardrobe after the effective date of the updated Privacy Policy constitutes your acceptance of those changes. If you do not agree, please stop using the platform and request deletion of your account.

For questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy inquiries within 30 days.