Privacy Policy

1. Introduction

ThriftDuck ("we," "our," or "us") operates the ThriftDuck inventory management platform at thriftduck.com. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our service.

2. Information We Collect

Account Information: When you register, we collect your name, email address, and password (stored in hashed form).

Inventory Data: Information you enter about your inventory items, including titles, descriptions, purchase prices, locations, photos, and sales data. This data belongs to you.

Payment Information: If you subscribe to a paid plan, payment is processed by Stripe. We do not store your credit card number. We receive your Stripe customer ID and subscription status.

Third-Party Integrations: If you connect your eBay account, we store OAuth tokens to access your eBay data (listings, orders, transactions) on your behalf. We only access data necessary to sync your inventory and sales.

Usage Data: We collect basic server logs (IP address, browser type, pages visited) for security and service improvement.

3. How We Use Your Information

• To provide, maintain, and improve the ThriftDuck service
• To process your transactions and manage your subscription
• To sync data from connected third-party platforms (e.g., eBay) at your request
• To send important service notifications (password resets, account alerts)
• To provide AI-powered features such as price suggestions and item identification using OpenAI
• To respond to your support requests

4. Data Sharing

We do not sell, rent, or trade your personal information to third parties.

We share data only with the following service providers, solely to operate ThriftDuck:

• Stripe — payment processing
• eBay — inventory and sales sync (only if you connect your account)
• OpenAI — AI-powered features (item data may be sent for price estimates; no personally identifiable information is shared)

We may also disclose information if required by law or to protect our rights and safety.

5. Data Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, and secure token storage. While no system is 100% secure, we take reasonable precautions to protect your data.

6. Data Retention

Your data is retained for as long as your account is active. If you delete your account, we will delete your personal data and inventory records within 30 days. Anonymized, aggregated data may be retained for analytics.

7. Third-Party Account Deletion

If you connected your eBay account and subsequently delete your eBay account, eBay will notify us and we will automatically remove all stored eBay tokens and synced eBay data associated with your account.

8. Your Rights

You may:

• Access, update, or correct your personal information at any time through your account settings
• Export your inventory and sales data
• Disconnect third-party integrations (eBay) at any time
• Request deletion of your account and all associated data by contacting us

9. Cookies

We use essential cookies to maintain your login session and remember your preferences. We do not use third-party tracking or advertising cookies.

10. Children's Privacy

ThriftDuck is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the service. Continued use after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:

Contact Page