Privacy Policy

Shophr Corporation, a Delaware corporation (“Shophr”, “we”, “us”), runs shophr.co, where customers shop pieces from nearby shops and have them delivered: a Shophr shopper buys some in person (“Get it for me”), and for others we order from the shop’s own website and a courier brings them.

This policy covers shophr.co, our Android apps on Google Play and our iPhone apps on the App Store (Shophr, Shophr Driver and Shophr Business Manager, each of which opens shophr.co itself), the orders placed on them and the emails we send about them. It is also our notice at collection: the bottom of every page on the site links here, including every page where you give us your details. If you drive for us or run a store on Shophr, sections 13 and 14 say what those pages keep. It doesn’t cover the older retailer portal at retailers.shophr.co, which is run separately, or other companies’ websites we link to.

• We collect what we need to run your account, price and deliver your orders, and keep the records the law requires.
• We don’t sell your personal information, and we don’t share it for advertising.
• We don’t give the shops you buy from your name, address or contact details.
• We never sell or share your mobile number or text-message opt-in with third parties for their marketing or promotional purposes.
• Email support@shophr.co to see, correct or delete your data (section 10).

Your account

Your first and last name, email, phone number and username. Your password is kept only in scrambled form by our login provider, never readable by us. Which invitation you joined with, kept as a short fingerprint of the code, never the code itself. Your texting choice (section 6), and which version of our Terms you agreed to when you signed up, and when. If you save a delivery address on your profile, that address, so the order forms fill it in for you.

Your sizes and style

Only what you choose to tell us, used to pick pieces and looks for you: your gender if you give it (only you see it, and our AI never receives it), your sizes for tops, bottoms and shoes, your fit, your height if you give it, and your weight if you give it (we keep it, we don’t use it to pick pieces or work out a size, and our AI never receives it), the styles and colours you wear, whose style you like, and what photos of fits you love show. Of those photos we keep only our AI’s description of the clothes in them, never the photos. We never ask about your health, your body shape or your race.

Your closet

If you add pieces you own to your closet: each photo, and the name and kind of piece our AI gave it. The photos are kept in private storage, where only you can see them, and with where they were taken removed. A photo goes when you remove its piece, and all of them when you delete your account. If you tag a closet piece on a fit, members see its name there, never its photo.

Thrift, if you buy or sell

When you list a piece: its photos, title, brand, size, condition, styles, price and note, and how many members saved or opened it. Our AI stylist may suggest a piece you list in other members’ looks; it gets the piece’s title, brand, kind, size, colour and price, never who you are. When a member asks Remy about your piece, our AI model may receive what your listing shows: its title, brand, size, condition, flaws, note, care and measurements. It never receives your name, your username or your contact details. We email you when a piece you saved drops in price, and at most once an evening when pieces in your size land or when you asked us to remind you at 7pm. Every one of those emails has “Stop these emails”, which stops them all. When you sell: the door we pick up from (street, unit, city, ZIP and a note), a phone number our team can reach you on, its place on a map to about a block, whether you’re paid to your bank or in Shophr credit, and, from Stripe, whether your payouts are set up. Never your bank or ID details: you give those to Stripe, in Stripe’s own form. For each sale: the price, Shophr’s share and yours, both doors as they were at the sale, the driver’s or courier’s photos at pickup and delivery, a “not as described” note, any refund, your payouts and your Shophr credit. A buyer never sees the seller’s door, and a seller never sees the buyer’s.

Brands that ship to you

When you tap “Buy at” on a brand’s piece, we count the tap: the brand, the piece, its kind and price range, your metro (worked out from your ZIP, which isn’t kept with it), the creator’s code if you came from a creator’s link, and a random number that goes to the affiliate network (Awin or Rakuten Advertising) so a purchase can be matched to the tap. Never your name, email or account. The brand’s photos load from the brand’s or the affiliate network’s servers. What you give the brand when you buy is the brand’s, under its own privacy policy.

What we count

To learn what people want and which city to open next, we count searches, Stylist asks, pieces opened and saved, and waitlist sign-ups, by day, metro, kind of piece and price range. These counts never hold your name, email, account, ZIP or the words you typed.

Messages

What you write to a Thrift buyer or seller, or to your driver (and what they write to you), with who sent it and when. Only the two of you can read a conversation. If either of you reports it, a small number of senior people on our team may read it to look into the report or a problem with an order, and every read is logged. We check messages for phone numbers, email addresses and ways of paying outside Shophr, and show you both a reminder that payments outside Shophr aren’t covered; we never block a message for it. We may email you about a message you haven’t read, at most once every 30 minutes for a conversation, and the email never includes the message. You and your driver can write only while your order is on its way and for an hour after delivery; after that the conversation is read only. We keep a conversation until two years after its last message. If you delete your account, your conversations go, except one that was reported, which we keep for up to two years from the report.

Social, if you use it

The photos you post as fits, their captions, the pieces you tag, the styles you pick for them, whether a fit is women’s, men’s or both (you pick it, so members can filter by it), a place you add and where their pieces are from, and whether you entered Best dressed; your profile picture, bio and the Instagram, TikTok or X handles you add; who you follow and block; your 🔥 and 🗑️ votes; your Help me choose questions and votes; what you report; and your tick that you’re 18 or older before your first fit, and when, and whether you marked a fit “Anyone can see this post”. Members signed in to Shophr can see your fits, your username (the one you sign in with), profile picture, bio, handles, counts and Best dressed place. Nobody who isn’t signed in can, except that a photo fit marked “Anyone can see this post” (on to start for a new fit; you can turn it off when you post or any time after) can be seen by people who haven’t joined, with its caption, styles, tags, tagged pieces and 🔥 count and your username, never your comments, bio, picture, handles or followers. We ask search engines not to list any of it. A member sees your username when you give their fit a 🔥 or follow them; who gave a 🗑️, who voted on a question and who reported something are never shown. Reports go to our team. A fit you delete goes with its photo and votes, and all of it goes when you delete your account, except that we may keep a fit members reported until our team has looked at it, and we keep a photo we report to the National Center for Missing and Exploited Children for the year the law requires. Members can find you by your username in Social’s search, never by your name.If someone who hasn’t joined reports a post, we keep the post, the reason, the email they choose to give (only so our team can answer them) and a one-way code made from their connection, never the address itself, to limit reports to five a day. We keep a report until the post is deleted. We also keep a short record when you comment on, report or block a member: which post, which member, and the day, never the words you wrote. These records aren’t shown to other members and aren’t shared with anyone. We delete them 180 days after they are made, and delete the ones you made when you delete your account. We use them to keep Social safe and, when Social’s feed is on, to order it. Comments you write on fits are part of what you post.

What you save, plan and ask

The pieces you put a heart on, the shops, brands and Thrift sellers you follow, and the wardrobes you make (their names, days, budgets, pieces, sizes and looks). What you ask Remy, our AI stylist, in your own words, where you want it to style you from (new pieces, your closet, Thrift), and the looks it gave you. All of it goes when you delete your account. Remy also remembers your style choices, sizes, occasions and looks from your chats and, if you use them, from your fit profile and the fit facts you tell it when you ask about a piece, like the size you wear in a brand. Only you see what it remembers. You can see it and delete it at shophr.co/stylist/remembers. Deleting your account deletes it too. Questions you ask about a piece, and the answers, are not kept by us once you leave the page. We keep a fit fact you type only as a short note in our own words, and the sheet shows it to you with Undo. We also keep a count of how many questions you asked that day, for a few days, to keep each day’s number fair.

Your orders

What you asked for (the piece or the words you sent, its size, your budget if you gave one, and any note you wrote); your delivery address, phone and email; what we showed you (the shop, the total and each part of it, the tax city, and the shop’s return terms); your tick on a final-sale piece and when; your texting choice at the time; which version of our Terms you agreed to when you placed it; the card hold and the charge (amounts, times and Square’s payment reference); the photos your shopper and driver take, of the piece, its price tag, its receipt, the handover at a store’s counter and your door at delivery; and your yes or not quite, and when. When we photograph each piece at pickup and at your door, or on our office rail, we keep those photos 30 days for a store’s own orders and 90 days for ours (longer while a claim is open), and a photo of the delivery at your door (or of the door when nobody was home) at least 180 days, with a short care note and the piece’s code, and never where the photo was taken. If you choose “Leave at my door”, we keep that choice, the words you saw and when.

How you found us

If you arrived through a creator’s or a friend’s link, or any link with a tag: the link’s tag (like ?via= or utm_ tags), the first page you landed on and the website that sent you, so we can credit them. We keep the ?via= tag in a cookie on your device for 30 days, and save it on your account when you sign up and on each order, so we know where you came from. A creator never sees your name, contact details or orders: only how many customers and orders their link or code brought, and what they earned.

The waitlist and other forms

Your email, and depending on the form, your name, neighborhood or ZIP code, phone number, or your business’s name, type, website or Instagram and what you want from Shophr, with how you found us.

Searches

The words you search (up to 80 characters), how many pieces came back, your general area (like “Melrose”, never your address), which piece pages you open, and your invitation’s fingerprint. No name, address, phone, email or IP address.

Your device

Your IP address. To stop abuse, like password guessing or floods of sign-ups, codes or votes, we count the requests that come from each connection. Some of those counts are held only in our servers’ memory. Others are kept in our database for every server to share: each is labeled with your IP address (for an IPv6 address, only its first half, the block your network is given) or with a scrambled (hashed) form of it, beside the count and its time window, and deleted once it is 3 days old. When you sign up, sign in or change your password, we, and Supabase, which runs our sign-in, keep the IP address it came from, and the name your browser or app gives itself, with the record of that sign-in, for your account’s security. Also error logs, which name an order’s number but not its contents; and anonymous traffic and page-speed figures.

From others: Square tells us whether a hold or a payment worked, and your card’s brand and last four digits; for Thrift, Stripe tells us whether a payment worked and whether a seller’s payouts are set up. Shophr never sees or stores your full card number. The State of California’s tax-rate lookup tells us which tax area your delivery address is in, and the U.S. Census Bureau’s address finder tells us where your delivery address is on a map, to about a block. And to show you pieces, we read the product information shops publish on their own public websites: names, prices, photos and sizes, which is information about products, not about you.

We ask you for photos only where you choose to add one: a fit or a profile picture on Social, a piece for your closet, photos of fits you love, a piece you list for sale, and a picture with a request, a pickup or a problem with an order. A picture with a request, a pickup or a problem is kept privately with that order.

• to run your account and keep you signed in;
• to check we can reach your address, work out the price and the sales tax, hold and charge your card, have your shopper buy the piece, and deliver it;
• to email you about your orders (and, once texts are switched on, to text you, only if you asked us to);
• to email you about Thrift: a price drop on a piece you saved, and at most once an evening, new pieces in your size or the 7pm reminder you asked for, until you tap “Stop these emails” in any of them;
• to email you news from Shophr, like new cities and features, at most four a month, if you have an account, joined our waitlist or have been in touch with us about Shophr. Each one has a link to unsubscribe, and once you do, we don’t send you news again;
• to pick pieces for you from what you search, open and tell us about your sizes and style;
• to answer your questions about a piece, and, if you add your fit, to work out your size;
• to credit the creator or friend whose link or invitation brought you;
• to keep Shophr safe: stopping fraud and abuse, and checking that what we delivered is what you approved;
• to make search better;
• to keep the tax and accounting records the law requires, and to meet other legal duties.

We don’t use your information to build an advertising profile of you.

Only with the companies that run parts of Shophr for us, each only for that job and under contract, with the delivery companies that carry some orders, with the State for the tax rate, and with the Census Bureau to place your door on a map:

Supabase

Our database, logins and private photo storage.

Vercel

Hosting the site, and anonymous traffic and page-speed figures.

PostHog

Seeing how the site is used, so we can make it better.

Resend

Sending our emails.

Google Workspace

Our email, including support@shophr.co and the team inbox that receives each order.

Square

Card holds and payments. The card form on our hold page is Square’s own.

Stripe

Card payments for Thrift, and paying Thrift sellers. The card form is Stripe’s own, so your card number never reaches us. To be paid, a seller gives Stripe their name, bank and ID details in Stripe’s own form, under Stripe’s privacy policy; we get only whether payouts are set up.

Delivery companies

Some orders are brought by an independent delivery company instead of a Shophr driver: a store order the store sells at its own checkout or register, a Thrift sale when you choose courier delivery, and a trip no Shophr driver can take. For those, we book the trip through a delivery booking service, which hands it to a courier company and its driver. They receive your name, your phone number, your delivery address, unit and door notes, the order’s value for the trip and what is being carried (the piece’s name and size), only to collect it and bring it to you. If you sell on Thrift and your buyer chose courier delivery, they receive your name, phone, pickup address and note the same way. We receive the courier’s first name, the trip’s progress and their photos at pickup and at your door. Each works for us under a contract that limits them to your delivery; none may use it for their own marketing.

Anthropic

Remy, our AI stylist, is AI, not a person, and can get things wrong. When you ask for looks, the AI model receives what you typed, your style answers (who you shop for, fit, what you usually spend, the styles, colours and brands you like, whose style you like, your height, what’s coming up) and the names and prices of pieces in the shops, on Thrift and from brands that ship to you (and, when you style from your closet, the names and kinds of your closet pieces), never your gender, weight, last name, contact details, address, payment details or order details, so it can choose pieces for you. When Remy writes back to you in a chat, or answers a question you type about a piece, it may also receive your first name, as you gave it to us, so Remy can call you by it now and then. It never receives your last name or your username, and Remy never uses your name if you are signed out. It does receive short notes Remy keeps from your chats, from looks you bought (the pieces, their colour, the occasion and the day) and from looks you posted to Social, so it can remember what you like. You can see and delete these notes at shophr.co/stylist/remembers. When you ask Remy about a piece, our own code answers most questions, like your size or what it’s made of. Nothing goes to the AI model for those. When you type a question our code can’t answer, the AI model receives your question, your last few questions and answers about that piece, and what the store, the brand or the Thrift seller listed about it (its name, brand, kind, sizes, the words it was listed with and, on Thrift, its condition, flaws, note, care and measurements). It also receives up to six of the notes Remy keeps about your sizes, brands and colours. The notes about your sizes also go with your looks chats. It never receives your weight, gender, last name, contact details, address, payment details or any order. When you add photos of fits you love, it receives those photos, only to describe the clothes in them, and we never store them. When you add a piece to your closet, it receives that photo once, to name the piece. When you add a photo to find a piece, the AI model receives that one photo, only to describe the clothes in it, and we never store it. When you search in words we can’t place by our own rules, the AI model receives the words you typed in the search box, and nothing else about you, only to read what you mean. When you post a fit or set a profile picture, it receives that photo once, to check it before anyone sees it, and a photo it turns down is never kept. When you list a piece for sale, it receives the listing’s photos once (and a new cover photo, if you change it), to check them before anyone sees them, and photos it turns down are never kept. Once you add a listing’s photos, it receives up to three of them once, with where they were taken removed, to fill in what the piece is, its brand, size, colour and condition and a price idea, which you check and change before you list; nothing is listed until you tap List. If you ask Remy on the Remy tab without signing in, the AI model receives what you typed and the titles of up to six pieces we found for it, and nothing else about you. We don’t keep what you typed or Remy’s answer, only how many questions were asked from your browser (a cookie) and your connection, to limit the free questions. Anthropic’s business terms don’t allow using any of them to train its models.

PhotoRoom

When you list a piece for sale, it receives the piece’s front photo once, to take out the background so the piece shows on a plain one. You can keep your own photo instead. It never receives your other photos, your name or your contact details, and PhotoRoom says it doesn’t keep photos sent this way once it has processed them.

California Department of Tax and Fee Administration

Its public tax-rate lookup receives your delivery street, city and ZIP, never your name or contact details, so we charge your address’s sales tax.

U.S. Census Bureau

Its public address finder receives your delivery street, city and ZIP (or, if you sell on Thrift, your pickup door’s), never your name or contact details, so we can place your door on a map, to about a block, for your driver and the delivery price.

A texting provider

Not chosen yet, because texts aren’t switched on. We will name it here before any text is sent.

The shops. When your shopper buys your piece, the shop sees an ordinary sale. We don’t give it your name, address or contact details. When you open a piece, its photo comes to you through our own address, and when we read a shop’s page, the shop’s website sees our server, not you.

Our team. Your shopper works for Shophr, and so does your driver when a Shophr driver brings your order. They get your delivery address, and they message you in the site about your order. Your phone number stays with our team; a Shophr driver sees it only if that chat can’t be opened. When a delivery company brings your order instead, its driver has your phone number and door notes so they can reach you at the door (“Delivery companies” above).

AI agents you connect. If you connect an AI agent, like an assistant in another app, to your Shophr account, you choose what it may do. It can search pieces and prices for you, and ask to buy pieces for you; nothing is bought until you confirm it on shophr.co. We give the agent the catalogue information it asks for and the status of the requests it made. We don’t give it your name, address, contact details, payment details or orders. We keep the agent’s name, what you allowed it to do, when it was used, and the requests it made and what you chose. We keep these records while your account is open. When you delete your account, every agent you connected stops working. What you tell the agent in its own app is handled by that app’s company under its own privacy policy. You can turn an agent off at any time in Connected agents on your account.

We also share information with our lawyers and accountants when needed; when the law requires it, or to protect someone’s safety or investigate fraud; and, if Shophr is sold or merges, with the new owner, under this policy, after telling you. Otherwise, only with your permission.

We don’t sell personal information, we don’t share it for cross-context behavioral advertising, and we don’t give it to other companies for their own marketing.

Texts aren’t switched on yet; until they are, every order update is an email. Our texting program, Shophr order updates, is optional. You join only by ticking the box that asks, which says: “Text me about my orders. Shophr will text this number about orders I place: the photo to approve, when it's bought, when it's on the way, and when it's here. Up to 4 texts per order. Msg & data rates may apply. Reply STOP to cancel, HELP for help. Not required to order.”

Whether you tick it or leave it unticked, we keep that choice, when you made it, which words you saw, and the last four digits of the number it covers. Your phone number itself stays in your account, once. A yes for your account’s own number covers your later orders to that same number; on an order, a box you leave unticked means no texts about that order. To stop, turn texts off in your profile, reply STOP to any of our texts, or write to support@shophr.co. Message and data rates may apply. Our Terms have the program’s full rules.

We never sell or share your mobile number or text-message opt-in with third parties for their marketing or promotional purposes.

Only if you turn them on. Shoppers hear an order’s steps (your shopper is at the store, a photo needs your yes, on the way, delivered), that a new message came (never its words), Thrift news (your piece sold or was picked up, a piece you saved dropped in price) and Social news (a 🔥 on your fit or a new follower, at most once an hour). Drivers hear of a new job, their meal time and a new message. Never ads. From 10pm to 8am Los Angeles time, only order, message and work alerts. An alert never carries your address, your phone number, a code or a message’s words.

We keep your browser’s push address and its keys, which of our sites it’s for, the kind of device (such as “iPhone”), and for 3 days, which alerts went. Each alert travels sealed through your browser’s own push service (Google, Apple, Mozilla or Microsoft), which can’t read it. In our iPhone apps, alerts come through Apple’s push service instead: we keep the push token Apple gives that app on your phone, which app it is, the kind of device, and whose account it’s signed in to, and Apple delivers the alert’s words to your phone. In our Android apps, alerts come through Google’s Firebase Cloud Messaging the same way, and Google delivers the words. While an order or a driver’s run is under way, the apps show its steps on your lock screen (the store and the step, never an address); on an iPhone we keep the extra tokens Apple gives the app for that (one to start it, and one for each that’s running; a running one’s goes when it ends, and all of them go if you delete your account). To stop alerts, turn Alerts off in your profile, or turn off Shophr’s notifications in your phone’s settings. To stop the lock screen, turn off Live Activities for the app in your iPhone’s settings; on Android it stops with alerts.

Invitation cookie

Remembers the invitation code you used, for up to 60 days, so you aren’t asked for it again. The code is taken out of the web address straight away.

Sign-in cookie

Keeps you signed in, for up to 60 days. It is signed, so it can’t be edited.

Link tag cookie

Remembers the ?via= tag of the link you came from (a short word like a creator’s code), for 30 days, so we can credit it when you sign up or order. It holds nothing else from the web address.

Device cookie

A random code for this browser, kept up to 400 days, so we can count the free questions you ask Remy before you have an account, and recognize the device at sign-in. Only our server can read it.

All four can be read only by our server, not by scripts on the page. Signing out deletes the invitation and sign-in cookies; the link tag cookie ends after 30 days, or when you clear your cookies. We set no advertising or tracking cookies.

Once you sign in, we keep your bag on your account too (the pieces, sizes and how many, never prices), so it’s the same on the site and in our apps; signing out empties it on that device and keeps it on your account until you order, empty it or delete your account. Your browser also keeps some things on your device: your bag, your recent searches, the pieces you opened and the size, fit and ZIP you searched with (until you clear them), and the address and contact details you typed on an order form, with any link tags (until you close the tab). They reach us only when the page uses them: to price your bag, to pick pieces for you, or when you send a form.

Our traffic and page-speed figures come from Vercel Web Analytics and Speed Insights, which count visits without cookies and without following you to other websites. The card form on our hold page is run by Square, which may collect information about your device to prevent fraud, under Square’s own privacy notice. Our unlisted walkthrough pages load fonts from Google Fonts, so Google receives your IP address when you open one.

We use PostHog to understand how the site is used, never for ads, and we never sell your data. It sees the pages you open and a few steps like adding to your bag or paying. It never records your screen. It keeps a random ID in your browser’s storage, not a cookie. If your browser sends Do Not Track or Global Privacy Control, it doesn’t run.

We don’t track you across other companies’ websites. If your browser sends a Global Privacy Control signal, we treat it as a request not to sell or share your information, which we don’t do anyway.

Orders, receipts and tax records

Four years, as California’s sales tax rules require sellers to keep them. That includes the photos of what you approved and the shop’s receipt, and what you were shown and said yes to.

Your account and profile

While your account is open, and deleted when you ask us to (section 10).

The waitlist

Until you ask us to take you off it.

Your choice to stop news emails

For as long as we send news emails, so we never send you one again. We keep a one-way code made from your email address, not the address itself.

Contacts we add to our news list

Until they unsubscribe or ask us to delete them.

Cookies

As long as section 8 says, or until you sign out or clear them.

A report from someone who hasn’t joined

Until the post is deleted.

IP addresses

A count labeled with an IP address (or its hashed form): deleted once it is 3 days old (we clear them every hour). A count held in our servers’ memory: gone when the server restarts. The IP address a sign-up, sign-in or password change came from: kept with that record, which we don’t yet delete on a schedule.

What the stylist remembers, and your fit profile

Until you delete them or your account.

Your chats with the stylist

Until you delete your account. Write to us to have them deleted sooner (section 10).

Questions you ask about a piece

Not kept. A count of how many you asked that day is kept for a few days.

Anything else we keep only as long as we need it for the reasons in this policy, or as long as the law requires.

Email support@shophr.co to see the data we hold about you, to correct it, or to delete it. We confirm it’s you, by matching details we already have, such as your account’s email and a recent order. A person on our team does it and answers within 30 days; if we need longer, we tell you why, and when, within those 30 days.

You can also delete your account yourself: open your profile and tap Delete my account at the bottom, or see shophr.co/delete-account for every app. When you ask us to delete your data, we delete your profile: your account, sign-in, saved address, sizes and style, what the stylist remembers, your chats with it, your fit profile, and texting choice. We keep order, receipt and tax records for four years, as the law requires.

If you live in California, you also have the right to know what personal information we collect, where it comes from, why we use it and who we disclose it to; to delete it; to correct it; to opt out of its sale or sharing (we don’t sell or share it); to limit the use of sensitive information (we use your password only to sign you in); and not to be treated differently for using any of these rights. Someone you authorize can ask for you; we may ask them for proof, and ask you to confirm. If you live in another state that gives you privacy rights, write to us and we will honor them as your state’s law requires. If we turn down a request, you can appeal by replying to our answer with the word “Appeal”.

We don’t give personal information to other companies for their own direct marketing.

Shophr is for adults: you must be 18 or older to have an account or place an order. The site isn’t meant for children, and we don’t knowingly collect information from anyone under 18. If you think a child has given us information, write to support@shophr.co and we will delete it.

• Everything travels over encrypted connections.
• Our database can be reached only by our own server, never directly from a browser.
• Photos are kept in private storage. Each goes in through our server, or through a private link our server makes for that one photo, which stops working within two hours.
• Photos are shown through our own address, or through private links that stop working within an hour.
• Passwords are kept only in scrambled form, and we store invitation codes only as fingerprints.
• Card numbers never reach our servers.

Our drivers and in-store shoppers work for Shophr. Applying is covered by our applicant privacy notice. Once you work with us, this is what the driver pages at shophr.co/driver, and the Shophr Driver apps on Google Play and the App Store that open them, keep:

Your account

Your name, the first name customers and stores see, your email and phone, your car (year, make, model and colour), and the codes we email you when you sign in on a new phone or set a new password. Your password is kept only in scrambled form by our login provider.

Your shifts and pay

The shifts you claim, drop and work, when you start and end them, your odometer if you type it, your hours, your pay before tax and your tips.

Where you are

While a job is yours and the driver page is open on your phone, your phone’s location, so we can time the delivery and send the right driver. We keep only the latest point, never a trail, and delete it when the job ends. We don’t ask for it when you’re off a job or the page is closed, and your phone lets you say no.

Photos on a job

The photos the job asks for: the piece, its price tag, the receipt, the handover at the store’s counter and the customer’s door. They are kept privately with the order, like every order record (section 9).

Messages

What you and the customer, or a Thrift seller or buyer, write while a job is yours, as section 3 says. A conversation closes an hour after the door.

Who sees it. Our team, to run deliveries and pay you, and the payroll service and government agencies that paying an employee requires. The customer sees your first name and the photos of their own order. The store sees the pickup code and, at most, your first name. Neither sees your last name, your phone number or where you are.

How long. Shift, hour and pay records as long as California requires employers to keep them; your account while you work with us, and then as employment law requires. A customer’s name, address and door details are shown to you only for your own jobs, and only to deliver them.

Shophr Business Manager (shophr.co/store, and its apps on Google Play and the App Store) is where a store’s owner and staff manage the store on Shophr. This is what it keeps:

Your sign-in

Your email, the one-time codes we email you to sign in, and your name and role at the store if you give them.

Your claim

Which store you said is yours, how we matched it (your email’s own web address, the store’s website or its exact name), and our team’s decision.

If your store came from our old store portal

If your store signed up on our earlier store portal (retailers.shophr.co), our team brings it over for you: your store’s name, website, Instagram and address, your name and the email you signed up with, a note of what you agreed to there, and our team’s own note. You sign in here with that email. Nothing else is moved.

Your pieces

The pieces you bring in from a file or from your store’s website: names, prices, sizes, stock and photo addresses. We read your file and keep the pieces and the file’s name, not the file. Photos are copied into our own storage only once your store has signed with us. Pieces stay drafts until you publish them.

Your orders

The orders for your store, each step you take on them (accepted, ready, handed to the driver) and when.

Remy for Business

When someone at a business types a question to Remy in Business Manager, Anthropic’s AI model receives what they typed, up to four earlier questions and answers from the same conversation, and that business’s own Business Manager numbers: its name and how it works with Shophr, the person’s role and the page they are on, its order, piece, delivery and Valet counts, up to three of its own piece titles in each list, its payouts and delivery bills, and its Insights counts. We never add customer, member or driver names, addresses, phone numbers or email addresses, card or bank details, or the business’s commission rate, so please don’t type them. We don’t keep the question or the answer, only a daily count of questions and, for each answer, its topic and size. The buttons in the Remy sheet are answered by our own code and send nothing to the AI model. Anthropic’s business terms don’t allow using any of it to train its models.

Who sees it. Members see your store’s name and the pieces you publish. Our team sees all of it. A store never gets a customer’s name, address or contact details: you see the pieces, the sizes and the driver’s pickup code.

Payouts aren’t open in Shophr Business Manager yet. Before you’re asked for any bank details, this section will say who handles them.

How long. While your store is on Shophr, and order records for four years, as California requires (section 9). Section 10 works for you as it does for everyone.

The date at the top always shows the latest version. If we make a material change, such as using your information in a new way, we tell you by email or on the site before it takes effect, and we ask for your consent where the law requires it.

Shophr Corporation
925 N La Brea Ave, Suite 500
Los Angeles, CA 90038
support@shophr.co