Privacy Policy

Search N Rescue Inc., a Delaware corporation with its principal business in New Jersey ("Search & Rescue," "S&R," "we," "us," or "our"), operates the Search & Rescue fashion marketplace. This policy explains how we collect, use, disclose, retain, and protect personal information, and the choices available to you.

It covers our shopper app, customer-facing website, shopper waitlist, customer support, and related ordering, delivery, and styling features. It also covers contact information submitted to ask about becoming a boutique partner, but is not a complete notice for merchant-portal administration, employment, or a boutique's separate business. The information involved depends on the features you actually use.

The MVP does not include a self-service returns or ordinary exchange service. We still process narrowly necessary order and support information to handle cancellations, payment errors, wrong or damaged items, legally required remedies, and rights promised for earlier purchases. This notice does not create or remove a refund entitlement; the Customer Terms and applicable law govern those rights.

Accounts and purchases are limited to U.S. residents who are at least 18 and legally able to contract. Deliveries are limited to supported New Jersey addresses, including for account holders who live elsewhere in the United States. Privacy rights may depend on your residence, not just your delivery address.

We do not sell personal information or disclose customer-level information for cross-company targeted advertising, advertising-audience creation, or another company's independent advertising measurement. We may sell or license genuinely non-identifying aggregate fashion insights subject to the safeguards in section 6. Necessary operational disclosures are explained below. Reading or accepting this policy is not a substitute for separate permission when required.

Account and contact information. Your name, email, phone number when provided, account identifier, authentication information, age/eligibility confirmation, contact preferences, and privacy or terms-consent records. If you choose an offered Apple or Google sign-in option, we receive the identifiers and basic profile information that provider supplies through your selected sign-in method.

Shopping and preference information. Search terms, selected categories, sizes and style preferences, quiz answers, saved products or boutiques, cart contents, purchase history, and interactions with product listings. We may derive shopping preferences from these activities to make the S&R experience more relevant.

Orders and transactions. Items, sizes, prices, fees, taxes, tips, discounts, order and payment references, timestamps, status changes, receipts, cancellation requests, order-problem reports, refund records, and dispute evidence. We receive relevant fulfillment and support updates from participating boutiques, payment providers, and delivery providers. We do not collect routine return-request or inspection records for an unimplemented returns feature.

Payment information. Payment information is processed through Stripe and the applicable payment networks. S&R receives information needed to administer the transaction, such as payment references, payment status, billing details, and limited payment-method details made available by the processor. Do not send full card numbers, security codes, or payment passwords in Scout, boutique chat, or support messages.

Delivery and location information. The address you enter, related coordinates used for delivery, access instructions, delivery contact details, delivery status, and handoff evidence when used, such as a PIN confirmation, signature, or photograph. We receive delivery updates and evidence from the delivery provider. Necessary information about a failed delivery or corrective handling may be processed through support. Device-location permission and courier tracking are discussed in section 7.

Messages and submitted content. Questions, Scout prompts, relevant conversation context, messages with support or boutiques, and images or files you choose to submit through an available feature. We also process the associated replies and case details. Private Scout content has the additional limits in section 5.

Technical and usage information. Internet protocol address, browser or device type, operating system, app version, session identifiers, timestamps, pages or features used, crash or error information, and security or rate-limit events. Our hosting, authentication, payment, and other operational providers may collect technical information directly when you use their functions. These records are used for the operational purposes described here, not independent advertising profiles.

Waitlist and partnership inquiries. A shopper waitlist submission contains the email address, ZIP code, and signup-source information you supply or generate through the form. A boutique inquiry may include the contact name, email, boutique name, city or ZIP code, website or social handle, commerce platform, and signup source. Earlier, narrower promises about these submissions continue to apply; see section 9.

We do not request government identification numbers, medical records, or sensitive demographic details for ordinary shopping or Scout. Information you voluntarily submit may nevertheless contain sensitive details. We limit its use to the relevant service, security, and legal purposes and obtain separate consent where required. Please avoid including unnecessary sensitive information or information about someone else without their permission.

We use relevant information to create and secure accounts; show products and availability; personalize search and styling; process payments; coordinate boutique fulfillment and deliveries; provide receipts and order updates; investigate problems; and administer necessary refunds and customer support.

We also use limited information to prevent fraud and misuse, verify requests, troubleshoot errors, maintain service reliability, measure use of our own services, improve ordinary marketplace functions, meet accounting and legal obligations, and establish or defend legal claims. These purposes do not expand the limited permission for private Scout content or authorize general-purpose AI training.

We use contact information for the updates or promotions you separately request, subject to section 9. We may create the aggregate insights described in section 6 from information lawfully available for that purpose. A new purpose that is incompatible with an existing notice or permission requires the additional notice and permission required by law and our prior commitments.

We disclose only information relevant to the task or lawful purpose. Different providers receive different information; this section does not mean every recipient receives your entire account.

Participating boutiques. The boutique fulfilling an order receives relevant order, item, contact, fulfillment, and support information, including narrowly necessary evidence to investigate an order problem. A chat you send to that boutique is visible to it. Your private Scout conversation and activity at unrelated boutiques are not automatically included. S&R does not authorize boutiques to add shoppers to their own marketing lists merely because they placed an order.

Delivery providers. Uber Direct and the couriers involved receive information needed to quote, arrange, perform, verify, and support delivery, including necessary corrective handling of a failed delivery. This can include pickup and drop-off addresses and coordinates, contact details, instructions, relevant package information, and verification records. We receive status and proof-of-handoff information from the provider. The MVP does not offer routine return transport. Contact masking is used only where supported; we do not promise that every telephone interaction is anonymous.

Payment providers. Stripe and the applicable payment networks process payment and refund information and may use transaction or device information for payment security, fraud prevention, and legally required compliance. Their own applicable notices also describe processing for those responsibilities.

Technology and communications providers. Providers supporting S&R include Supabase for authentication and data services; Render for website and application hosting; Twilio and Resend for authorized communications; and OpenAI for requested AI features. Our current public website and inquiry forms no longer use Lovable Cloud. Providers receive the information relevant to their function, such as contact and message details for communications or the limited AI inputs described in section 5. An offered sign-in provider receives information needed for the sign-in you select. Our linked Service Provider Directory identifies the current services, relevant data, processing locations and feature-specific uses.

Connected commerce systems. A boutique's connected commerce system, such as Shopify or Square, may receive the order or fulfillment information needed for an enabled integration. We do not treat a merchant connection as permission to import or commercialize unrelated customer records. Our data-source agreements can restrict both personal data and derived or aggregate information.

Legal, safety, and professional purposes. We may provide necessary information to professional advisers, insurers, regulators, courts, or other parties when reasonably needed to comply with law or valid legal process, protect safety or security, investigate fraud, or establish or defend legal rights. A legal or security disclosure is not permission for the recipient to use your information for advertising.

Business transactions. If S&R is involved in a genuine merger, acquisition, financing, restructuring, or transfer of its business, relevant information may be disclosed for that transaction under appropriate confidentiality safeguards. A successor must handle it consistently with applicable law and existing privacy commitments unless a lawful change is made. This is not permission to sell a standalone customer list or transfer SMS consent for another company's marketing.

Providers processing information on our behalf are subject to appropriate purpose, confidentiality, and security restrictions. Some recipients, including payment or delivery companies and boutiques, also have their own legal responsibilities and notices. Their separate status does not remove S&R's obligations for the information we control.

When you choose an AI-assisted search or styling feature, relevant inputs are processed by S&R and OpenAI to return a response. Inputs can include your search or conversation, selected size labels and preferences, and relevant product information. Images are included only when an image feature is offered, you select an image, and the relevant disclosure and permission have been provided. We disclose the recipient and obtain explicit permission before sending personal information to a third-party AI service.

We do not use or authorize use of your private Scout prompts, messages, or photos to train general-purpose AI models. We do not sell that content, place it in advertising, or include it in commercial fashion reports. We do not intentionally add your exact delivery address, payment credentials, or unrelated account details to AI prompts. Information you type into a prompt can itself reveal personal details; avoid including information not needed for styling.

Our launch approach is not to maintain a permanent Scout conversation history or retain raw Scout image uploads for later personalization. Temporary processing and narrowly necessary security or legal records are separate. Saving a product or a style preference is different from saving the private conversation that produced it.

AI-provider retention is separate from S&R's own storage. OpenAI's API does not use customer content for model training by default, but may retain abuse-monitoring records, and some features retain application state. We do not promise zero provider retention. We select and manage provider settings consistently with the limits in this policy.

Scout provides shopping suggestions, not professional advice or decisions about credit, employment, insurance, housing, or similar eligibility. You can contact support about an incorrect recommendation or its use of your information. Choosing not to use an optional AI feature does not authorize us to send its inputs anyway.

We may create, use, sell, or license consolidated fashion and market reports, such as product-category demand or broad price trends, only when the reports cannot reasonably identify, be linked to, or reveal information about an identifiable person, household, or that person's device. Customer-level records, individual shopping histories, hashed-email audiences, and profiles with names removed are not permitted substitutes for aggregate reports.

We take reasonable measures to prevent identification, including excluding identifying details and avoiding small groups or combinations that reveal a shopper. We maintain and use these insights only in de-identified form, do not attempt re-identification, and contractually require recipients to preserve those limits and not attempt re-identification.

We do not include precise delivery locations, payment credentials, private Scout or support content, photos, SMS-consent records, or sensitive personal traits in commercial reports. We respect restrictions attached to Shopify, Square, or other source data. Information collected under a narrower earlier promise is not repurposed merely because this policy has changed.

We do not sell personal information or share customer-level information for cross-context behavioral advertising, cross-company targeting, advertising-audience creation, or a third party's independent advertising measurement. Operational disclosures in section 4 do not authorize those activities. A future change would require a separate review, updated notices and choices, and any required permissions; this policy does not preauthorize it.

You can enter a delivery address manually. We use it and related delivery coordinates to assess coverage, obtain quotes, fulfill the order, investigate delivery problems, and maintain necessary transaction records. Declining device-location permission does not remove the need to provide an eligible delivery address.

We do not continuously track a shopper's GPS location in the background. If a device-location feature is offered, access is limited to the requested feature and the permission you give, rather than unrelated monitoring. Tracking the courier's progress is different from tracking the shopper's movements.

An available image feature accesses only the photo or file you choose through the offered controls, rather than granting permission to use your entire photo library. We do not use submitted images to create biometric identity templates or identify you through facial recognition. Device permission can be changed in device settings; doing so does not automatically erase information already provided. Contact support to request deletion.

Our website and app use cookies, session tokens, local storage, or similar technologies where needed to keep you signed in, remember settings or cart activity, support checkout, maintain security, and understand operation of our own services. Relevant technical information can be collected directly by the service providers carrying out those functions.

We do not authorize advertising pixels, audience uploads, or server-side advertising events that disclose customer-level data for the prohibited advertising uses in section 6. Internal usage measurement does not give a provider permission to create its own advertising profile of you.

You can control cookies through your browser and app permissions through your device. Blocking necessary storage can affect sign-in or checkout. Our services do not change their behavior in response to the older Do Not Track browser signal. That is distinct from legally recognized opt-out preference signals, such as Global Privacy Control: applicable opt-out rights remain respected. Because we do not engage in the sale or advertising sharing described above, there is no such activity you must switch off to obtain that protection.

Order, delivery, support, account-security, and other necessary service communications are different from optional marketing. We use the relevant contact methods you provide and any required messaging permissions. Unsubscribing from marketing does not stop necessary nonmarketing email about an active order or account.

At launch, S&R's SMS program is limited to operational messages, not promotional texts. Text enrollment is separate from accepting the Terms or this policy. Where you enroll, message frequency depends on activity and message and data rates may apply. Reply STOP to stop texts or HELP for help, or contact support. We honor other legally valid opt-out requests as well.

No mobile information is shared with third parties or affiliates for their marketing or promotional purposes. We do not sell, rent, or license mobile phone numbers or text-message opt-in data. SMS-consent records are not shared for another party's own use; access is limited to providers administering the messaging service and disclosures required by law. Other disclosure categories in this policy do not authorize resale or transfer of that consent.

Joining the shopper waitlist authorizes the launch updates described at signup, not unrelated promotions. We do not enroll those subscribers in broader marketing without a separate request. Optional marketing emails include an unsubscribe method. A boutique inquiry is used to follow up on the partnership request. We preserve narrower promises already made about existing submissions and do not use those submissions for commercial insight products without a lawful basis consistent with those promises.

We keep personal information only as long as reasonably needed for the disclosed purposes and applicable legal obligations. Retention depends on the information category, why it was collected, an active transaction or dispute, security needs, and legal recordkeeping requirements. We do not apply a single indefinite retention period to everything.

Account and contact records. Account, address, saved-item, and preference information is kept to maintain the account and requested features, subject to deletion requests and a review of information no longer needed. Waitlist contact information is kept for the requested launch updates until it is no longer needed or you ask us to stop, apart from limited suppression or compliance records.

Orders and compliance records. We retain the limited transaction, tax, refund, consent, and dispute records needed for accounting, required retention, fraud prevention, or legal claims. Closing an account does not necessarily delete these records immediately. Information retained for those reasons is restricted to those purposes rather than reused for marketing.

Content, evidence, and logs. Support messages, order-problem evidence, and handoff records are kept while needed to resolve the relevant matter and any reasonably necessary follow-up or claim period. This includes narrowly necessary records for a protected obligation attached to an earlier purchase, not collection for an unimplemented routine returns feature. Technical and security logs are kept for troubleshooting, protection, and applicable compliance needs. Private Scout content follows section 5 rather than a general permission to retain all conversations.

Deletion and backups. When eligible information is deleted from active systems, backup copies may remain until the relevant backup cycle expires. They are restricted from ordinary use; where a backup is restored, applicable deletion instructions are reapplied. Providers may have separate lawful retention for security or legal responsibilities. We explain any material exception applicable to your request rather than promising instantaneous erasure everywhere.

Truly non-identifying aggregate reports may be retained because they no longer identify you. We do not keep a reversible customer profile under the label "aggregate" to avoid a deletion request. Where required, we communicate deletion or correction instructions to relevant service providers or other recipients.

We use reasonable administrative, technical, and organizational safeguards appropriate to the information, including controls on access to our systems and information. No system or transmission method can be guaranteed completely secure. Report suspected account misuse to support@searchrescueapp.com. This security qualification does not waive rights or limit duties imposed by applicable law.

S&R is based in the United States. Providers may process information in the United States and other countries where they operate. U.S.-only account eligibility does not mean every provider stores every record only in the United States. We apply required safeguards and contractual protections for the processing we arrange.

You can ask to access, correct, obtain a copy of, or delete your personal information by emailing support@searchrescueapp.com with "Privacy Request" in the subject line. You can also use relevant account controls where available. You do not need to create a new account to submit a request. Please do not send a full card number, password, or government ID in an initial email.

Account deletion can be requested through the app's account-deletion option or through support. Deletion removes eligible personal information rather than merely signing you out, subject to section 10. It does not remove a valid refund, rights promised for an earlier purchase, or other protected remedy; contact support to handle an open matter after account closure.

Depending on your state and whether the relevant law applies to S&R, you may have rights to confirm processing; obtain access and a portable copy; correct inaccuracies; delete information; receive information about categories or specific recipients where required; limit certain sensitive-information uses; withdraw consent; and opt out of sale, sharing, targeted advertising, or certain consequential profiling. We do not conduct the sale or advertising sharing prohibited by section 6. We do not use sensitive information to infer unrelated sensitive characteristics.

We verify access, correction, and deletion requests using information reasonably necessary to protect your account. Authorized agents may submit requests with the authorization or verification applicable law requires. We do not impose identity verification on an opt-out when the law prohibits it. Exercising a privacy right will not result in unlawful discrimination.

We acknowledge and respond within applicable deadlines. For covered access, correction, or deletion requests this is generally 45 days, or a shorter period where required. We explain a permitted extension and its reason within the original deadline. Requests are handled without charge except where a fee or refusal is expressly permitted by law; we explain any such decision.

If we decline a request, you may appeal by emailing support@searchrescueapp.com with "Privacy Appeal" and the request reference. We explain our decision and respond within the applicable appeal period; for a covered New Jersey appeal, no later than 45 days after receipt. You may also complain to your state attorney general or privacy regulator. When required, a denied appeal response supplies the appropriate complaint method, including the New Jersey Division of Consumer Affairs for a covered New Jersey request.

California residents may have additional rights under the CCPA/CPRA when it applies, including information about collection, disclosure, sale, or sharing during the required lookback period. Sections 2 through 4 explain the categories, sources, purposes, and operational recipients under this policy; section 10 explains retention criteria. We do not disclose personal information to third parties for their own direct marketing. Contact support about any applicable California disclosure request.

Our shopper service is intended for adults aged 18 and older. We do not knowingly create accounts for, or solicit personal information from, people under 18. If you believe a person under 18 has provided information, contact support so we can investigate, restrict the account where appropriate, and delete information that should not be retained, subject to legal obligations. We do not sell minors' personal information or use it for targeted advertising. A minimum-age statement does not replace any additional protection required for a child's information.

We post an updated effective date when this policy changes. For material changes, we provide notice through the app, website, email, or another appropriate channel before the new practice begins where required. We obtain additional permission when required and respect promises attached to previously collected information. Continued use or a policy update alone does not supply consent for a new use that requires separate permission.

Search N Rescue Inc. Search & Rescue - Privacy Requests 115 Everdell Ave Hillsdale, NJ 07642 Email: support@searchrescueapp.com

This mailing address is for administrative and legal correspondence, not merchandise returns. Privacy requests and questions may be sent to the email address above.