Privacy Policy
Last Updated: February 7, 2026
1. Introduction
Rackhouse ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, password, name
- Listing Content: Images, descriptions, pricing information you upload
- Platform Connection Data: OAuth tokens (encrypted at rest) and listing sync data when you connect marketplace accounts
- Communications: Messages you send us or feedback you provide
- Storefront Data: Shop settings, storefront appearance, and public listing information
- Buyer Information: When buyers make offers through your storefront, we collect their name, email address, and offer details
- Payment Data: Payment processing is handled by Stripe. We do not store credit card numbers. We receive transaction metadata (amounts, status) for order management.
2.2 Automatically Collected Information
- Usage Data: Pages visited, features used, time spent on the Service
- Device Information: Browser type, operating system, IP address
- Cookies: Session data and preferences
3. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Generate AI-powered listing descriptions
- Process your transactions and manage your account
- Send you service updates and notifications
- Improve and optimize the Service
- Detect and prevent fraud or abuse
- Comply with legal obligations
4. How We Share Your Information
We do not sell your personal information. We may share your information with:
- Service Providers: Third-party vendors who help us provide the Service (hosting, analytics, AI processing)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, sale, or acquisition
5. Data Storage and Security
We use industry-standard security measures to protect your data:
- Encrypted data transmission (HTTPS/TLS)
- Secure cloud storage with reputable providers
- Regular security audits and updates
- Access controls and authentication
- OAuth tokens encrypted at rest
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
6. Third-Party Services
We use the following third-party services to provide and operate the Service:
- Cloud Infrastructure: Hosting, database, and authentication providers
- Cloud Storage: Secure image and file storage
- AI Providers: Third-party AI services for listing generation — uploaded images may be sent to these providers for analysis
- Error Monitoring: Performance and error tracking to improve the Service
- Payment Processing: Secure payment handling (when applicable)
- Marketplace Integrations: eBay, Depop, and other marketplaces (when you connect your account)
Each of these services has its own privacy policy governing their use of your data. We encourage you to review the privacy policies of any third-party services you interact with through Rackhouse.
7. Platform Integration Data
When you connect third-party marketplace accounts (such as eBay or Depop) to Rackhouse:
- We store encrypted OAuth tokens that authorize Rackhouse to act on your behalf on connected platforms
- We sync listing data between Rackhouse and connected platforms to keep your inventory up to date
- We may store marketplace-specific identifiers (e.g., listing IDs, store names) to manage your connected accounts
- You can disconnect your marketplace accounts at any time, which will revoke our access and delete stored tokens
8. Your Rights and Choices
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data
- Export: Download your data in a portable format
- Opt-out: Unsubscribe from marketing emails
To exercise these rights, contact us at: privacy@rackhouse.studio
9. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain information for legal compliance, fraud prevention, or legitimate business purposes.
10. Children's Privacy
The Service is not intended for users under the age of 13. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us.
11. International Users
Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. The "Last Updated" date at the top indicates when this policy was last revised.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Email: privacy@rackhouse.studio