Privacy Policy

Last updated: August 17, 2026 · Effective date: August 17, 2026

1. Introduction

This Privacy Policy explains how Tarnish Inc ("Tarnish," "Aloop," "we," "us") collects, uses, shares, and protects your information when you use the Aloop mobile app, the website at aloop.jewelry, and related services (the "Service"). It applies to buyers, sellers, and visitors. By using the Service, you agree to this policy. If you do not agree, please do not use the Service.

2. Information we collect

We collect the following categories of information:

Information you provide

• Account information, such as your name or display name, email address, and the credentials used to authenticate your account. Authentication is handled through our identity provider.
• Profile and listing content: photos, video, descriptions, prices, and any provenance documents you upload when selling.
• Transaction information: the items you buy or sell, order and shipping details, and shipping addresses.
• Seller payout and verification information: the details required to pay you and to satisfy our payment processor's identity-verification ("know your customer") obligations. Sensitive identifiers such as a government ID or full bank details are collected and held by our payment processor, not stored by Aloop.
• Communications: messages you send us through the Service, support requests, and system-generated notifications about your orders.

Information collected automatically

• Device and usage information, such as device type, operating-system version, app version, general interaction and diagnostic events, and crash logs, used to operate and improve the Service.
• Approximate location, derived from your IP address or shipping information for fraud prevention, tax, and shipping purposes. We do not collect precise device GPS location unless you grant permission for a feature that requires it.

Information from third parties

• Our payment processor may share transaction, payout, and verification status with us.
• Shipping carriers provide tracking and delivery status.

3. How we use information

We use information to:

• provide, operate, and maintain the marketplace, including creating listings, processing orders, facilitating payments and payouts, and arranging shipping;
• provide buyer protection and resolve disputes, returns, and refunds;
• authenticate you and keep accounts secure;
• prevent fraud, abuse, and other harmful or unlawful activity, and enforce our Terms;
• provide customer support and respond to your requests;
• send transactional and service messages (such as order and shipping updates), and, where permitted, product news you can opt out of;
• understand how the Service is used and improve it; and
• comply with legal, tax, and regulatory obligations.

4. How we share information

We do not sell your personal information. We share information only as needed to run the Service:

• Between buyers and sellers. To complete a transaction, a seller and buyer receive the information necessary to fulfill and receive an order (for example, a shipping name and address). Your public profile and listings are visible to other users.
• Service providers. Companies that process data on our behalf under contract, including our payment processor (payments, payouts, and identity verification), our identity and authentication provider, our media hosting, storage, and content-delivery providers (for photos and video), our shipping and label providers and carriers, our transactional email provider (which receives your email address and the contents of the service messages we send you), and infrastructure, analytics, and customer-support tools.
• Legal and safety. When we believe disclosure is reasonably necessary to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, or safety of Aloop, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

5. Payments

Payments and payouts are processed by our third-party payment processor. When you make a purchase or connect a seller payout account, your payment-card and financial details are provided directly to and handled by the payment processor under its own terms and privacy policy. Aloop does not store your full payment-card number. We receive limited information such as confirmation of payment, the last digits and type of card, and payout status, which we use to operate the marketplace and prevent fraud.

6. Legal bases (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases: performance of a contract (to provide the Service you request), legitimate interests (to secure, improve, and market the Service in a balanced way), consent (for example, optional marketing or device permissions, which you can withdraw), and legal obligation (for example, tax and record-keeping).

7. Data retention & deletion

We keep personal information for as long as your account is active and as needed to provide the Service, and afterward as required to comply with legal, tax, accounting, and dispute-resolution obligations or to prevent fraud. Analytics and personalization data that is linked to your account — the in-app activity and search text described in “Cookies & analytics” below — is retained for up to 13 months and then deleted; identifier-free aggregate statistics, which cannot be traced back to you, may be kept longer.

Account deletion. You can request deletion of your account from within the app. When you do, your request enters a cancelable grace period (currently 14 days) during which you can restore your account; after the grace period, and provided there is no outstanding obligation (such as an open order, dispute, or pending payout), we permanently delete or de-identify your personal data and instruct our media and identity providers to remove associated data. Financial and transaction records held by our payment processor — and other records we are required or permitted by law to retain, such as tax and dispute records — are kept for the periods the law requires rather than deleted. You can also contact us at [email protected] for help with a deletion request.

8. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You may exercise these rights in the app or by emailing [email protected]. We will respond as required by applicable law and will not discriminate against you for exercising your rights.

California residents. We do not sell or "share" personal information as those terms are defined under the California Consumer Privacy Act (as amended). You may exercise your CCPA rights, including access and deletion, using the contact details above; you may use an authorized agent where permitted.

EEA/UK residents. You have the right to lodge a complaint with your local data-protection authority, though we encourage you to contact us first so we can help.

9. Cookies & analytics

This marketing website is intentionally lightweight and does not set advertising or tracking cookies. The Aloop app uses limited, privacy-respecting diagnostic and analytics data to operate the Service, understand usage, and fix problems. We do not use any third-party analytics provider, and we do not use your data for third-party cross-context behavioral advertising.

Personalization. To rank listings and tailor what you see, the app records your in-app activity linked to your account — including the listings you view, save, follow, hide, and report, and the free text of the searches you run. This first-party personalization is on by default, and you can turn it off at any time in the app’s privacy settings; turning it off stops this identity-linked collection going forward. We keep this identity-linked personalization data for up to 13 months (see “Data retention & deletion”), and we never share it with a third-party analytics provider.

10. Notifications

Push notifications. With your permission, we send push notifications through Apple Push Notification service to keep you informed about your orders and account activity. You can turn notifications off at any time in your device settings, or per category in the app’s notification settings.

Email. We send a limited set of transactional emails to the email address on your account: order confirmations and receipts, shipping and delivery updates, return labels and deadlines, dispute notices, payouts, and account restrictions. These are messages about your own transactions and account, not marketing, so they are part of using Aloop and cannot be turned off while your account is active — the notification settings in the app control push notifications. We do not send marketing or promotional email, and we do not email you about other sellers’ new listings, people who follow you, or reviews.

These emails state facts about your own transaction — an order number, the item, amounts, dates, tracking numbers, and deadlines. They do not contain your shipping address, your payment-card details, the other party’s contact information, or the reasoning behind a dispute or moderation decision; those stay in the app. The address we use is the verified address from our identity provider; it is shown in the app’s notification settings and is changed through your sign-in account rather than edited separately in Aloop.

11. Security

We use administrative, technical, and organizational measures designed to protect your information, including encryption in transit, access controls, and delegation of card handling to a PCI-compliant payment processor. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please help protect your account by keeping your credentials confidential and contacting us if you suspect a problem.

12. Children's privacy

The Service is not directed to, and is not intended for, children. You must be at least 18 years old to use the Service, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us information, contact [email protected].

13. International transfers

We are based in the United States and may process and store information in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers of personal data.

14. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy here with a new "Last updated" date and, where appropriate, provide additional notice in the app. Your continued use of the Service after the changes take effect constitutes acceptance of the updated policy.

15. Contact us

If you have questions or requests about your privacy or this policy, contact:

Tarnish Inc, Privacy Team
Email: [email protected]
Web: aloop.jewelry/contact