Your Privacy Matters

This Privacy Policy explains how ThriftAI collects, uses, and protects your personal information when you use our AI-powered thrift shopping service.

1. Who We Are

Company: Fulcra ApS

Address:Denmark

CVR Number:

Email: simon@thriftai.io

2. Information We Collect

Personal Information You Provide

•Account information (name, email address, username)
•Profile preferences (style preferences, size information)
•Communication data (messages, support inquiries)
•Payment information (processed securely by third-party providers)

Information Automatically Collected

•Device information (device type, operating system, browser type)
•Usage data (features used, time spent, interaction patterns)
•Location data (if you enable location services)
•Cookies and similar tracking technologies

AI-Specific Data

•Images you upload for AI analysis
•AI interaction data and preferences
•Search queries and recommendations viewed

3. How We Use Your Information

Service Provision

• AI-powered item recommendations
• Personalized thrift shopping experience
• Account management and authentication
• Transaction processing

Improvement & Analytics

• Service optimization and bug fixes
• AI model training and improvement
• Usage analytics and insights
• New feature development

Communication

• Customer support responses
• Service updates and notifications
• Marketing communications (with consent)
• Security alerts

Legal & Security

• Fraud prevention and security
• Legal compliance and obligations
• Terms of service enforcement
• Dispute resolution

4. Legal Basis for Processing (GDPR)

Purpose	Legal Basis
Account creation and service provision	Contract Performance
AI recommendations and personalization	Legitimate Interest
Marketing communications	Consent
Legal compliance and fraud prevention	Legal Obligation

5. Data Sharing and Third Parties

We may share your information with:

✓
Service Providers: Cloud hosting, payment processing, analytics, and AI/ML services
✓
Business Partners: Thrift stores and marketplace partners (with consent)
✓
Legal Authorities: When required by law or to protect our rights

Data Transfers

Some of our service providers may be located outside the EU/EEA. We ensure adequate protection through Standard Contractual Clauses or adequacy decisions.

6. Your Rights Under GDPR

Access & Portability

Request a copy of your personal data in a portable format

Rectification

Correct inaccurate or incomplete personal data

Erasure

Request deletion of your personal data ("right to be forgotten")

Restriction

Limit how we process your personal data

Objection

Object to processing based on legitimate interests

Withdraw Consent

Withdraw consent for specific processing activities

How to Exercise Your Rights

We will respond within 30 days. You also have the right to file a complaint with the Danish Data Protection Agency (Datatilsynet).

7. Data Retention

•Account Data: Retained while your account is active plus 2 years
•Transaction Data: 7 years for accounting and legal purposes
•AI Training Data: Anonymized data may be retained indefinitely
•Marketing Data: Until consent is withdrawn

8. Security Measures

🔒

Encryption

Data encrypted in transit and at rest

🛡️

Access Controls

Strict employee access controls

📊

Monitoring

Continuous security monitoring

9. Cookies and Tracking

We use the following types of cookies:

Essential Cookies: Required for basic functionality (always active)

Analytics Cookies: Help us improve our service (optional)

Marketing Cookies: Personalized advertising (optional)

10. Children's Privacy

Age Restriction

ThriftAI is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the app. Continued use of our service after changes become effective constitutes acceptance of the updated policy.

12. Contact Information

Questions about this Privacy Policy?

Email:

simon@thriftai.io

Supervisory Authority:

Datatilsynet (Danish DPA)