Privacy Policy

Privacy Policy

Effective date: October 20, 2026

The Consignory ("we," "our," or "us") provides tools for vintage and consignment shops, consignors, and customers to manage shop access, intake, inventory, holds, purchase requests, and related communications. This Privacy Policy explains how we collect, use, share, and protect information when you use The Consignory website, mobile app, and related services.

Boutique owners determine how they use the personal information they collect from their consignors and customers for boutique operations. The Consignory processes that information to provide the services the boutique requests. Separately, The Consignory determines how information is used for its own account administration, authentication, platform security, diagnostics, support, legal compliance, and service improvement.

Information We Collect

We may collect the following categories of information:

• Account information, such as name, email address, phone number, username, and profile details.
• Shop information, such as boutique name, address, hours, website, social handles, staff, and setup details.
• Consignor and customer information, including consignor requests, relationship status, and contact details.
• Inventory and request information, including item photos, descriptions, prices, barcode or QR associations, likes, followed boutiques, purchase and hold requests, review decisions, and item status.
• Visitor log information, including the boutique and location you check into, check-in time, and the profile photo, name, email address, and phone number shared when you scan an entry QR after agreeing to visitor-log sharing.
• Appointment and intake information, including appointment times, intake decks, review decisions, and customer-provided item details.
• Form and agreement records, such as the date and time you accept our Terms or submit a form, your IP address, and browser or device information associated with the submission.
• Location and nearby-search information, such as precise or approximate foreground device latitude and longitude when you grant location access, the map area you choose, ZIP code or town searches, Google Places search queries and place identifiers, and returned address or map results.
• Notification and device identifiers, including an app-generated installation identifier, an Expo push token, the profile associated with that token, token status, and delivery or receipt information used to route and troubleshoot push notifications.
• Private storefront communications and safety records, including item inquiries, hold and purchase messages, sender and recipient identifiers, related request details, sent and read times, read state, blocking state, reports, report reasons and details, reported-message snapshots, moderation notes, and resolution history.
• Technical, diagnostic, and limited usage information, such as app and build version, device platform and model context, error messages, stack traces, crash or app-hang details, limited breadcrumbs, log data, and information used to improve reliability, performance, and security.
• Public website analytics, such as the page visited, visit time, external referring site, campaign tags, general device and browser category, and coarse country or region when provided by our hosting infrastructure.
• Support information, such as ticket subjects, messages, optional screenshots, boutique context, app version, device platform, and support response history.

How We Use Information

We use information to:

• Provide, maintain, and improve The Consignory.
• Create and manage customer, consignor, owner, and staff accounts.
• Verify account email addresses and phone numbers, authenticate accounts, and help secure account access.
• Help boutiques manage inventory, intake, appointments, visitor logs, holds, purchase requests, and customer communication.
• Center the shop-discovery map, identify boutiques near a selected area, and provide location search suggestions and results.
• Display inventory, storefront, consignor, and request information to the users who need access to it.
• Send operational messages, such as account, invite, request, appointment, inventory, hold, purchase-request, and liked-item relisting notifications by email, in-app notice, or push where supported.
• Deliver private customer-boutique conversations, maintain their read state, enforce user blocks, and investigate reports.
• Detect, prevent, moderate, and troubleshoot abuse, fraud, security incidents, and service errors.
• Respond to support tickets, investigate reported issues, and maintain a history of support responses.
• Maintain records of form submissions and Terms acceptance for security, recordkeeping, and agreement enforcement.
• Comply with legal, accounting, tax, regulatory, and App Store requirements.

How Information Is Shared

We share information only as needed to provide and operate the service:

• With boutiques and their authorized staff so they can manage shop operations, inventory, intake, consignors, holds, purchase requests, and customer communication.
• With customers and consignors when needed to show relevant inventory, request, appointment, account, or private conversation information. Private storefront messages are available to the conversation participants and may be reviewed by authorized The Consignory administrators when a message is reported or review is otherwise needed for safety, support, legal compliance, or service enforcement.
• With Google Places, through our Supabase-hosted location-search service, to process a ZIP code, town, or other location query and, when available, coordinates used as a location bias for more relevant suggestions and map results.
• With service providers that help us host, store, secure, monitor, email, and operate the service, including Supabase for database, authentication, nearby-shop queries, and the Google Places proxy; DigitalOcean for hosting and infrastructure; Sentry for mobile error and crash monitoring; Google Places for location search; email and SMS providers for account messages and verification codes; and Expo for push delivery through Apple Push Notification service (APNs) or Google Firebase Cloud Messaging (FCM).
• When required by law, legal process, safety needs, fraud prevention, or to protect the rights of The Consignory, users, boutiques, or others.

Service providers are authorized to access information only as necessary to perform services on our behalf and are expected to protect it appropriately.

Location and Nearby-Shop Search

If you allow foreground location access, the mobile app may obtain your device's precise or approximate latitude and longitude, depending on your device settings. We send the selected search center to Supabase to return boutiques near that area. When you use the location search field, the query, a temporary search-session identifier, and, when available, coordinates used as a location bias are processed through our Supabase-hosted service and sent to Google Places to provide suggestions and map details. Google processes that information under its Privacy Policy.

Location access is optional. You can deny or revoke it in your device settings and search by ZIP code or town instead. We use this information for app functionality, including centering the discovery map and finding nearby boutiques. We do not use it for advertising, sell it, or use it to track you across apps or websites owned by other companies. We do not save device-derived coordinates as a persistent customer profile location, although our service providers may process request and security logs as needed to operate, protect, and troubleshoot the service.

Requests and Boutique Conversations

Item inquiries and purchase or free hold requests share one private conversation between a customer and the boutique's authorized staff. An inquiry does not reserve an item. We store request details, item and location snapshots, messages, moderation reports, and request status to provide this service. Authorized administrators may review reported messages for safety and support.

The app does not offer checkout, payment processing, shipping-address forms or external commerce integrations. Do not include payment-card information, bank credentials, passwords or identity documents in chat. Request and boutique records may be retained as described below.

Website Cookies and Local Storage

Public website analytics are first-party and cookie-free. For analytics, the web server temporarily processes an IP address and browser user-agent to create a keyed pseudonymous visitor identifier. This provides an estimate and does not identify a specific person. The raw IP address and full user-agent string are not stored in the analytics table. We honor browser Do Not Track and Global Privacy Control signals for this collection.

The website may still use cookies, local storage, or similar technologies when needed to maintain authenticated sessions, remember preferences, and secure website or admin tools. These technologies are not used to build the public website traffic reports.

Authentication and Notifications

We use authentication services to verify account access and secure accounts. Email and SMS providers deliver verification messages to the contact details you supply. To route notifications to the correct app installation, the app creates an installation identifier, stores it securely on the device, obtains an Expo push token, and links those identifiers to your profile. A notification token and the notification content needed for delivery are processed by Expo and then by APNs or FCM. Delivery and receipt data help us disable stale or unregistered installations and troubleshoot failures. We may send service-related emails, in-app notices, and push notifications for account activity, staff invites, intake, appointments, inventory updates, consignor requests, holds, purchase requests, liked-item relistings, and other operational events. These identifiers are used for app functionality and security, not advertising or tracking across other companies' apps or websites. You may be able to manage certain notification preferences through your device or app settings.

Mobile Diagnostics and Crash Reporting

We use Sentry to receive mobile crash and error reports when crash reporting is configured for a released build. Reports may include the app and build version, device and operating-system context, error messages, stack traces, crash or app-hang details, and limited diagnostic breadcrumbs. We configure this reporting not to send default personal identifiers, network-request captures, screenshots, view hierarchies, or session replays. We also filter and redact common credentials, tokens, email addresses, and local user paths before sending reports. Diagnostic reports are used to investigate failures, protect the service, and improve reliability.

Photos and Inventory Content

Inventory photos, intake deck photos, item descriptions, categories, sizes, condition, notes, and related item details may be visible to boutique owners, authorized staff, relevant consignors, customers, and storefront viewers depending on item status and account permissions.

Links and Sharing Outside The Consignory

If you open a boutique's website or social profile, or choose to share an item using another app, that service processes information under its own privacy policy. Content and links you choose to share may be visible to the audience you select there.

Private Storefront Messages and Moderation

Customers and boutique users may exchange private messages about items, holds, and purchase requests in one conversation per customer and boutique. We store the message content, conversation participants, related items and requests, sent and read times, read state, and blocking state so the conversation and its safety controls work. When a participant reports a message, we may preserve a snapshot of the reported message together with the report reason, optional details, moderation notes, reviewer, status, and resolution history. Authorized The Consignory administrators may review those records to investigate abuse, respond to support or safety issues, enforce service rules, and comply with legal obligations. We do not use private messages or moderation records for advertising.

Support Tickets

Authenticated support tickets are visible to the submitting user and authorized The Consignory administrators. A ticket associated with a boutique is not automatically shared with other boutique owners or staff. Optional screenshots are stored privately and should not contain passwords, verification codes, full payment card numbers, or identity documents.

Data Retention

We keep information for as long as needed to provide the service, maintain boutique inventory, consignment, appointment, visitor, and request records, comply with legal obligations, resolve disputes, and enforce agreements. Some records may be retained after account deletion where needed for legal obligations, fraud prevention, support, safety, disputes, or boutique recordkeeping. Support records retained after account deletion may be disassociated from the deleted profile. Raw public website analytics events are deleted after 90 days; aggregate business reports may be retained for longer. Notification tokens are disabled or removed when an installation is unregistered, you sign out where supported, or the associated account is deleted, subject to limited delivery, security, or audit records. Private message and moderation records may be retained for related request, support, safety, dispute, legal, and service-enforcement needs. Retention depends on the record's purpose and applicable obligations; we do not promise that every record is deleted immediately when an account is closed.

Account Deletion

You can initiate account deletion using the Delete account option in the mobile app. You can also contact us using the support information below. Deletion processing may take time to complete; disabling access is not the same as completing deletion. We remove account information and associated content through that process, subject to the limited retention described above. Retained records may be disassociated from your account or have identifying information removed where appropriate. Boutiques may separately retain information you shared with them for their own business obligations; contact the boutique about records it maintains independently.

Your Privacy Choices and Rights

Depending on your location, you may have the right to request access to, correction of, or deletion of your personal information. You may also ask questions about how your information is used or shared. To make a privacy request, contact us using the support information below. We may need to verify your identity before completing certain requests.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, or disclosure. However, no electronic storage or transmission method is completely secure, so we cannot guarantee absolute security.

Children

The Consignory is not directed to children under 13. If you believe a child provided us personal information, contact us so we can review and delete it where appropriate.

Changes To This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and may provide additional notice through the app, website, or email.