Privacy Policy

Contact and shipping information, such as your name, email address, phone number, and shipping address.

Device and transaction information, including phone model, condition, quote, shipment, inspection, order, and payout details.

Account and authentication information supplied through our sign-in provider. We do not receive your password from third-party sign-in providers.

Limited technical information, such as browser type, pages viewed, approximate location derived from an IP address, and security logs.

To provide quotes, create shipping labels, inspect devices, process payouts, fulfill purchases, and provide customer support.

To prevent fraud, enforce account and transaction limits, protect the service, and comply with legal obligations.

To understand service performance using limited, intentionally defined analytics events. Automatic click capture and session recording are disabled.

We share information only as needed with providers that operate the service, such as Privy for sign-in, Supabase for data storage, Shippo and shipping carriers for labels and tracking, Vercel for hosting, PostHog for limited analytics, and the payout provider you select.

We may disclose information when required by law, to protect customers or ReFit, or as part of a business transaction. We do not sell personal information.

Essential cookies may be used for authentication, security, referral attribution, and service preferences. Analytics are configured without session recording, automatic interaction capture, or persistent analytics cookies.

We retain information only as long as reasonably needed for transactions, support, fraud prevention, accounting, dispute handling, and legal obligations. We use technical and organizational safeguards, but no online service can guarantee absolute security.

You may ask to access, correct, or delete eligible personal information by emailing us. We may need to retain certain records for legal, fraud-prevention, accounting, or transaction purposes.

ReFit is not intended for children under 13, and we do not knowingly collect personal information from children under 13.