Privacy Policy

This Privacy Policy explains how Wishi (“Wishi,” “we,” “us”) collects, uses, shares, and protects personal information when you use our personal-styling marketplace, our websites, and related services (the “Service”). By using the Service you agree to this Policy and to our Terms of Service.

Information we collect

Information you give us

• Account & identity. Name, email address, and password or social sign-in, handled by our authentication provider (Clerk). We never store your password ourselves.
• Style profile. Your responses to the style and match quizzes — sizes, fit, budget, color/fabric/pattern preferences, body information you choose to share, and any photos you upload.
• Payment information. Card and billing details are collected and processed by Stripe; we receive only limited identifiers (e.g. the last four digits and a payment token), never your full card number.
• Communications. Messages, photos, and feedback you exchange with your stylist through in-app chat, plus any support requests you send us.

Information we collect automatically

• Usage & device data. Pages viewed, actions taken, approximate location derived from IP, browser and device type, and similar analytics, collected through our analytics provider (Amplitude) and server logs.
• Cookies & similar technologies. Used to keep you signed in, remember preferences, and measure how the Service is used.

How we use your information

• Provide, match, and personalize the styling service.
• Process bookings, subscriptions, purchases, tips, and payouts.
• Operate in-app chat between you and your stylist.
• Send transactional messages (booking and session updates, receipts) and, with your consent, marketing messages.
• Maintain security, prevent fraud, and comply with law.
• Measure and improve the Service.

How we share your information

We do not sell your personal information. We share it with:

• Your stylist — the style-profile and chat information needed to style you.
• Service providers who process data on our behalf, including Clerk (authentication), Stripe (payments and stylist payouts), Twilio (chat and SMS), Klaviyo (email and SMS delivery), Amazon Web Services (hosting), and Amplitude (analytics).
• Retailers and affiliate networks when you click a shoppable product link or make a purchase, so the order can be fulfilled and attributed.
• Legal and safety recipients where required by law, or to protect the rights and safety of Wishi, our users, or the public.
• A successor in connection with a merger, acquisition, or sale of assets.

Text messages (SMS)

If you opt in, we may send you SMS messages such as session updates and promotions. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe at any time or HELP for help. Marketing texts are off by default — you must opt in from your notification settings — and consent to marketing texts is never a condition of purchase. You can manage every channel in your settings.

Email

We send transactional emails about your account and sessions. Marketing emails always include an unsubscribe link and our physical mailing address, consistent with the CAN-SPAM Act. Unsubscribing from marketing does not stop essential transactional email.

Cookies & tracking

We use strictly-necessary cookies to run the Service and analytics cookies to understand usage. You can control cookies through your browser; disabling some may affect how the Service works.

Data retention

We keep personal information for as long as your account is active and as needed to provide the Service, then for the period required to meet legal, tax, accounting, and dispute-resolution obligations. Financial records are retained and anonymized as required by law.

Your rights & choices

Depending on where you live (including under the GDPR and CCPA/CPRA), you may have the right to access, correct, delete, or port your personal information, and to object to or restrict certain processing.

• Delete your account and data. You can permanently delete your account and personal data from your settings(“Delete my account & data”). Deletion disables the account immediately and schedules a permanent purge; financial records are retained and anonymized as the law requires.
• Manage notifications. Turn email and SMS channels on or off in your settings.
• Make a request. Email privacy@wishi.me and we will respond as required by applicable law. We will not discriminate against you for exercising your rights.

Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The Service is intended for adults 18 and older and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

International users

We operate in the United States, and your information will be processed in the U.S. and other countries that may have different data-protection laws than your own. Where required, we use appropriate safeguards for cross-border transfers.

Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, where required, provide additional notice.

Contact us

Questions about this Policy or your data? Email privacy@wishi.me, or write to us at [Wishi mailing address — to be confirmed].