Privacy Policy

Contact and shipping information, such as your name, email address, phone number, and shipping address.

Device and transaction information, including model, IMEI or other device identifier, condition, quote, shipment, inspection, order, and payout details.

Account and authentication information supplied through our sign-in provider. We do not receive your password from third-party sign-in providers.

Payout information you provide, such as a Venmo or PayPal identifier or an optional linked wallet address.

Limited technical information, such as browser type, pages viewed, approximate location derived from an IP address, and security logs.

To provide quotes, create shipping labels, inspect devices, process payouts, fulfill purchases, and provide customer support.

To prevent fraud, enforce account and transaction limits, protect the service, and comply with legal obligations.

To understand service performance using limited, intentionally defined analytics events. Automatic click capture and session recording are disabled.

We share information only as needed with providers that operate the service, such as Privy for sign-in, Supabase for data storage, Shippo and shipping carriers for labels and tracking, Vercel for hosting, PostHog and, when enabled, Google Analytics for limited analytics, Sentry for error and performance monitoring, and the payout provider you select.

We may disclose information when required by law, to protect customers or ReFit, or as part of a business transaction. We do not sell personal information.

Essential cookies may be used for authentication, security, optional share-link attribution, and service preferences. Analytics are configured without session recording, automatic interaction capture, or persistent analytics cookies.

When enabled, Google Analytics uses measurements without analytics or advertising cookies. Our page-view events omit URL query strings and fragments, use only the referring site’s origin, and exclude private account, order, and admin pages. These limited measurements still send technical information to Google; they do not mean that no data is transmitted.

Sentry is configured to report errors and sampled performance traces without automatic collection of user identity, cookies, request or response bodies, headers, URL query parameters, or local variable values. Session recording and analytics advertising features are disabled.

We retain information only as long as reasonably needed for transactions, support, fraud prevention, accounting, dispute handling, and legal obligations. We use technical and organizational safeguards, but no online service can guarantee absolute security.

You may ask to access, correct, or delete eligible personal information by emailing us. We may need to retain certain records for legal, fraud-prevention, accounting, or transaction purposes.

ReFit is intended only for adults 18 and older and is not directed to minors. We do not knowingly collect personal information from anyone under 18.