Privacy Policy

Qloset is operated by HFX LLC. Qloset currently serves users in the United States.

• Account information, including email address, username, avatar, and authentication data.
• Delivery information, including recipient name, mailing address, phone number, and tracking details.
• Order information, including purchased items, amounts, status, payment references, and refund records.
• Marketplace activity, including views, searches, follows, watchlists, recently viewed items, and recommendation interactions.
• Seller information, including business contact details, storefront content, listings, fulfillment details, and payout-related records.
• Content you submit, including product images, descriptions, issue reports, and support communications.
• Report and enforcement information, including intellectual-property reports, seller responses, supporting evidence, and contact details for reporters, rights owners, representatives, and affected sellers.
• Technical and security information, including device, browser, IP-address, session, error, and fraud-prevention data generated when services are used.

Payment providers process payment-card data. Qloset does not store full payment-card numbers or security codes in its database.

• Create, secure, and support accounts.
• Process payments, fulfill orders, provide tracking, and resolve order issues.
• Operate seller storefronts and marketplace features.
• Personalize discovery and recommendations.
• Send account, order, security, and support communications.
• Prevent fraud, enforce policies, comply with law, and protect Qloset and its users.

We share information only as needed to operate Qloset, including with:

• Sellers, for order fulfillment and issue resolution.
• Supabase, for authentication, database, server functions, and file storage.
• Square and, where applicable, Stripe, for payment processing and payment records.
• Shipping carriers used by sellers, for delivery and tracking.
• Resend, for transactional email delivery.
• Cloudflare, for website hosting, delivery, security, and technical logs.
• Professional advisers, regulators, or law enforcement when legally required or needed to protect rights and safety.

To review intellectual-property reports and seller responses, Qloset may share relevant portions of a report or response, supporting evidence, and contact information with the affected reporter, rights owner, seller, or their authorized representatives, as well as with professional advisers, service providers, regulators, law enforcement, or other authorities. We do this only as needed to review the matter, protect Qloset and its users, enforce marketplace policies, or respond to a valid request. Qloset may redact unnecessary sensitive information where appropriate.

We require service providers and other third parties that receive personal information from Qloset to provide the same or equivalent protection for that information as described in this policy and required by applicable law.

Qloset does not sell personal information or use it for cross-context behavioral advertising.

We keep personal information only as long as reasonably necessary for the purposes described in this policy. How long we keep it depends on the type of information and why we need it, including providing Qloset, fulfilling orders, supporting users, maintaining security, preventing fraud, resolving disputes, enforcing agreements, and meeting legal, tax, and accounting obligations.

We generally keep account information while an account is active. When account deletion is completed, information that is no longer needed is deleted or de-identified from active systems. We may retain limited order, payment-reference, refund, tax, accounting, shipping, support, dispute, fraud-prevention, and security records when needed for the purposes above.

Deleted information may remain temporarily in encrypted backups until normal backup rotation completes. Service providers may retain limited records under their legal and security obligations.

You may update account details in Qloset, withdraw optional device permissions in system settings, and initiate account deletion in Qloset account settings. Depending on where you live, you may also have rights to request access, correction, or deletion of personal information.

Email support@qloset.dev with subject “Privacy Request.” We may verify your identity before completing a request. Limited transaction or legal records may remain as described above.

Qloset is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child provided personal information.

Qloset uses administrative, technical, and organizational safeguards designed to protect personal information. No system can guarantee absolute security.

We may update this policy as Qloset changes. The effective date above identifies the current version. Material changes will be communicated where required.

General help: Qloset Support.