Privacy Policy

Effective Date: October 14, 2026

1. Introduction

This Privacy Policy describes how Goodybag and its affiliates (collectively, “Goodybag,” “we,” “us” or “our”) collect, use, disclose and otherwise process information about you (“you” or “your”) when you use our mobile applications, browser extensions and websites, including goodybag.nyc, and any other services that link to this Privacy Policy (collectively, the “Service”). This Privacy Policy should be read together with our Terms of Use, which govern your use of the Service.

2. Information We Collect

We collect information that you provide to us directly, information that we collect automatically when you use the Service, and information that we receive from other sources.

2.1 Account Information. When you create an account, we collect information such as your name, email address and username. If you sign in through a third-party account, we receive information from that account's provider, such as your name and email address, according to your settings with that provider. We also keep records of your communication preferences and of the consents that you give us.

2.2 Profile Information. We collect the information that you add to your profile, such as your name, username, profile photo and bio, and information about the users you follow and the users you block.

2.3 Content. We collect the content that you upload, create or share through the Service. This includes photos that you add, such as photos of yourself and of your outfits, and the images that the Service generates from them; the products and collections that you save; the notes, ratings, reactions and comments that you provide; and the content that you share with others.

2.4 Preferences and Fit Information. We collect information that you provide so that we can tailor the Service to you, such as your sizes and measurements, your shopping preferences and your notification settings.

2.5 Communications. When you contact us, submit feedback, report content or another user, join a waitlist or otherwise communicate with us, we collect the information that you provide, such as your email address and the content of your message.

2.6 Payment and Transaction Information. When you make a purchase or subscribe through the Service, our payment processor collects and processes your payment information, and we do not receive your full payment card number. We keep information about your transactions, such as your subscription status, purchase history and gem balance.

2.7 Usage Information. When you use the Service, we automatically collect information about your activity, such as the searches you perform, the products and pages you view, the items you save, try on, share and rate, the links you click, the promotional codes tried at checkout, the features you use, and the dates and times of your activity.

2.8 Device Information. We automatically collect information about the devices and software that you use to access the Service, such as your IP address, browser and device type, operating system, the identifiers that we assign to your installation of the Service and, if you enable notifications, the tokens used to deliver notifications to your device.

2.9 Browsing Information. When you use our browser extensions, they process information about the web pages that you visit in order to recognize products and provide their features, such as showing you product information and similar items, applying available promotional codes and assisting you at checkout. When a page appears to display one or more products, the extension sends information about that page, such as its address and content, to our servers so that we can identify those products. We collect similar information about the web pages and links that you open, paste or share within the Service.

2.10 Information from Other Sources. We may receive information about you from other sources, including third-party sign-in providers; other users, for example when they share content with you or interact with your content; retailers and affiliate partners, for example information about purchases made through links in the Service; and publicly available sources.

3. How We Use Information

We use the information that we collect to provide, maintain and improve the Service, including to create and manage your account; to identify products, deliver search results and recommendations, suggest sizes and generate try-on images from the photos you provide; to maintain your profile, collections and shared content; to make your account available on each device and browser that you use; and to assist you at checkout.

We also use information to process payments and manage your subscription and gem balance; to send you sign-in codes, alerts, notifications and other messages about the Service and, where permitted, promotional communications; to respond to your requests and provide support; to understand how the Service is used, measure its performance and develop new features; to attribute purchases made through links in the Service; to detect, investigate and prevent fraud, spam, abuse, security incidents and other harmful activity, and to enforce our Terms of Use; to comply with our legal obligations; and for any other purpose that we describe to you when we collect the information or to which you consent.

We may create aggregated or de-identified information that cannot reasonably be used to identify you, and we may use and disclose that information for any lawful purpose.

We do not sell your personal information. The use of information received from the Goodybag browser extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

4.1 Service Providers. We share information with the vendors and service providers that we rely on to operate, maintain, secure and improve the Service. These include providers of hosting, data storage, authentication, payment processing, email and notification delivery and analytics services, and providers of artificial intelligence services that process content you provide, such as your photos and searches, to deliver features of the Service. We require these service providers to protect personal information in a manner consistent with this Privacy Policy. Certain features of the Service are provided by third parties, such as payment processors and search services, that receive information directly from you or your device and handle it in accordance with their own privacy policies.

4.2 Affiliates. We may share information with our current and future affiliates, including any parent, subsidiary or other company under common control with us, each of which will protect and use the information in a manner consistent with this Privacy Policy.

4.3 Retailers and Affiliate Partners. When you follow a link in the Service to a retailer's website, we share information about that referral with the retailer and with our affiliate partners so that resulting purchases can be attributed to Goodybag.

4.4 Other Users and the Public. Your username, name, profile photo and bio are visible to other users and to the public. Other information that you make public or share through the Service, such as the content on your profile, the content you share and your ratings, reactions and comments, may be viewed by other users and by anyone with whom it is shared, depending on your settings and how you share it.

4.5 Legal Requirements and Protection. We may disclose information if we believe in good faith that doing so is necessary to comply with applicable law, regulation, legal process or a governmental request; to enforce our Terms of Use or other agreements; or to protect the rights, property or safety of Goodybag, our users or others, including to prevent fraud and abuse.

4.6 Business Transfers. We may disclose or transfer information as part of, or during negotiations of, a merger, acquisition, financing, reorganization, sale of all or part of our assets, or bankruptcy or similar proceeding.

4.7 With Your Consent. We may share information with third parties when you direct us to do so or otherwise with your consent.

5. Cookies and Similar Technologies

We and our service providers use cookies, local storage and similar technologies to keep you signed in, remember your preferences, secure the Service and understand how it is used. Most browsers allow you to remove or reject cookies, but if you do so, some features of the Service may not function properly.

When you follow a link from the Service to a retailer's website, the retailer, our affiliate partners and other third parties may use cookies and similar technologies to collect information about your online activities over time and across different websites, for example to determine whether you make a purchase. Their use of these technologies is subject to their own privacy policies. The Service does not currently respond to browser Do Not Track signals.

6. Third-Party Websites and Content

The Service contains links to, and displays content from, third-party websites and services, including retailers' websites, that we do not own or control. Third parties that provide content shown in the Service, such as product images, may receive information such as your IP address when that content loads. Each third party's own terms and privacy policy govern your use of its website or service, and we are not responsible for its practices.

7. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide the Service, prevent fraud and abuse, resolve disputes, enforce our agreements and comply with our legal obligations. We generally retain the information associated with your account for as long as your account remains open and for a period of time after it is deleted. How long we retain other information depends on its nature and the purposes for which we use it. When we no longer need personal information for these purposes, we delete it or de-identify it.

8. Data Security

We use reasonable administrative, technical and physical safeguards designed to protect the information that we collect from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. No method of transmission over the internet or of electronic storage is completely secure, however, and we cannot guarantee the security of your information.

9. Your Choices and Rights

9.1 Account and Profile. You may review and update certain account and profile information, choose whether your profile is public or private, and block other users in Settings.

9.2 Communications and Notifications. You may opt out of promotional emails by changing your settings or by following the instructions in those emails. If you opt out, we may still send you messages about your account and your use of the Service, such as sign-in codes. You may turn off notifications in Settings or in your device's settings.

9.3 Account Deletion. You may delete your account at any time in Settings. After your account is deleted, we may retain certain information as described in Section 7.

9.4 Requests. You may request access to, correction of or deletion of your personal information by contacting us at calvin@goodybag.nyc. Depending on where you live, you may have additional rights under applicable law, and we will respond to requests as that law requires. We may need to verify your identity before responding to a request.

10. Children's Privacy

The Service is intended for individuals 18 years of age or older, and we do not knowingly collect information from anyone under the age of 18. If you believe that a person under the age of 18 has provided us with personal information, please contact us and we will delete that information.

11. International Users

Goodybag is based in the United States. If you use the Service from outside the United States, your information will be transferred to, stored and processed in the United States and in other countries where we and our service providers operate, whose data protection laws may differ from those of your country.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, and we will post any changes on this page with a new effective date.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at calvin@goodybag.nyc.