Privacy Policy

Thriftr ("Thriftr", "we", "us") is a peer-to-peer thrifting marketplace operated by Blinc, a business registered in India with GSTIN-issued identity. This policy explains what data we collect from you, how we use it, and your rights over it.

• Account data — phone number, name, profile photo.
• Instagram data— when sellers connect their Instagram Business or Creator account, we receive their Instagram handle, Instagram user ID, follower count, and profile picture via Meta's Instagram Graph API. We also read a sample of your recent post captions (up to 25) for the sole purpose of suggesting a seller niche during onboarding; captions are sent to our AI classifier and are not stored beyond the classification result. We do not read your stories, DMs, or follower lists.
• Marketplace activity — listings created, items bought, reviews left.
• Order data — shipping address, phone, order items, payment status. Required to ship and resolve disputes.
• Device data — app version, OS, IP address, crash logs. Used for performance and abuse prevention.

• To operate the marketplace (matching buyers and sellers).
• To verify seller eligibility (Instagram follower count is checked against our minimum threshold).
• To process payments, ship orders, and handle returns.
• To send transactional notifications (OTP, order updates).
• To prevent fraud and enforce our Terms of Service.

We do not sell your personal data to third parties.

We share the minimum data required with these processors:

• Shiprocket (shipping) — recipient name, phone, address, item count.
• CCAvenue (payments) — order total, payment reference.
• MSG91 (SMS OTP) — phone number, OTP value.
• Cloudinary (image hosting) — listing photos.
• Meta / Instagram(seller verification) — we receive your Instagram profile data via Meta's Graph API after you authorize the connection.
• Anthropic(AI niche classification) — recent Instagram captions are sent to Anthropic's Claude API only to classify your seller niche. Captions are not retained by Anthropic for training.
• Railway / Vercel (infrastructure hosting).

Active accounts: as long as you use Thriftr. After account deletion: we retain anonymized order records for 7 years for tax and dispute compliance under Indian law. All personally identifying fields are erased.

Under Indian data-protection law (DPDP Act 2023), you can:

• Access a copy of the data we hold about you.
• Correct inaccurate data.
• Request deletion of your data. See our Data Deletion page.
• Withdraw consent for Instagram data fetching at any time.

Questions about this policy? thriftrworld@gmail.com