Legal
Privacy Policy
1. Introduction
This Privacy Policy explains how Tarnish Inc ("Tarnish," "Aloop," "we," "us") collects, uses, shares, and protects your information when you use the Aloop mobile app, the website at aloop.jewelry, and related services (the "Service"). It applies to buyers, sellers, and visitors. By using the Service, you agree to this policy. If you do not agree, please do not use the Service.
2. Information we collect
We collect the following categories of information:
Information you provide
- Account information, such as your name or display name, email address, and the credentials used to authenticate your account. Authentication is handled through our identity provider.
- Profile and listing content: photos, video, descriptions, prices, and any provenance documents you upload when selling.
- Transaction information: the items you buy or sell, order and shipping details, and shipping addresses.
- Seller payout and verification information: the details required to pay you and to satisfy our payment processor's identity-verification ("know your customer") obligations. Sensitive identifiers such as a government ID or full bank details are collected and held by our payment processor, not stored by Aloop.
- Communications: messages you send us or other users through the Service, and support requests.
Information collected automatically
- Device and usage information, such as device type, operating-system version, app version, general interaction and diagnostic events, and crash logs, used to operate and improve the Service.
- Approximate location, derived from your IP address or shipping information for fraud prevention, tax, and shipping purposes. We do not collect precise device GPS location unless you grant permission for a feature that requires it.
Information from third parties
- Our payment processor may share transaction, payout, and verification status with us.
- Shipping carriers provide tracking and delivery status.
3. How we use information
We use information to:
- provide, operate, and maintain the marketplace, including creating listings, processing orders, facilitating payments and payouts, and arranging shipping;
- provide buyer protection and resolve disputes, returns, and refunds;
- authenticate you and keep accounts secure;
- prevent fraud, abuse, and other harmful or unlawful activity, and enforce our Terms;
- provide customer support and respond to your requests;
- send transactional and service messages (such as order and shipping updates), and, where permitted, product news you can opt out of;
- understand how the Service is used and improve it; and
- comply with legal, tax, and regulatory obligations.
4. How we share information
We do not sell your personal information. We share information only as needed to run the Service:
- Between buyers and sellers. To complete a transaction, a seller and buyer receive the information necessary to fulfill and receive an order (for example, a shipping name and address). Your public profile and listings are visible to other users.
- Service providers. Companies that process data on our behalf under contract, including our payment processor (payments, payouts, and identity verification), our identity and authentication provider, our media hosting, storage, and content-delivery providers (for photos and video), our shipping and label providers and carriers, and infrastructure, analytics, and customer-support tools.
- Legal and safety. When we believe disclosure is reasonably necessary to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, or safety of Aloop, our users, or the public.
- Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
5. Payments
Payments and payouts are processed by our third-party payment processor. When you make a purchase or connect a seller payout account, your payment-card and financial details are provided directly to and handled by the payment processor under its own terms and privacy policy. Aloop does not store your full payment-card number. We receive limited information such as confirmation of payment, the last digits and type of card, and payout status, which we use to operate the marketplace and prevent fraud.
6. Legal bases (EEA/UK)
If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases: performance of a contract (to provide the Service you request), legitimate interests (to secure, improve, and market the Service in a balanced way), consent (for example, optional marketing or device permissions, which you can withdraw), and legal obligation (for example, tax and record-keeping).
7. Data retention & deletion
We keep personal information for as long as your account is active and as needed to provide the Service, and afterward as required to comply with legal, tax, accounting, and dispute-resolution obligations or to prevent fraud.
Account deletion. You can request deletion of your account from within the app. When you do, your request enters a cancelable grace period (currently 14 days) during which you can restore your account; after the grace period, and provided there is no outstanding obligation (such as an open order, dispute, or pending payout), we permanently delete or de-identify your personal data and instruct our providers (including our media, identity, and payment providers) to remove associated data, except for records we are required or permitted by law to retain. You can also contact us at [email protected] for help with a deletion request.
8. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You may exercise these rights in the app or by emailing [email protected]. We will respond as required by applicable law and will not discriminate against you for exercising your rights.
California residents. We do not sell or "share" personal information as those terms are defined under the California Consumer Privacy Act (as amended). You may exercise your CCPA rights, including access and deletion, using the contact details above; you may use an authorized agent where permitted.
EEA/UK residents. You have the right to lodge a complaint with your local data-protection authority, though we encourage you to contact us first so we can help.
9. Cookies & analytics
This marketing website is intentionally lightweight and does not set advertising or tracking cookies. The Aloop app uses limited, privacy-respecting diagnostic and analytics data to operate the Service, understand usage, and fix problems. We do not use your data for third-party cross-context behavioral advertising.
10. Push notifications
With your permission, we send push notifications through Apple Push Notification service to keep you informed about your orders, messages, and account activity. You can turn notifications off at any time in your device settings.
11. Security
We use administrative, technical, and organizational measures designed to protect your information, including encryption in transit, access controls, and delegation of card handling to a PCI-compliant payment processor. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please help protect your account by keeping your credentials confidential and contacting us if you suspect a problem.
12. Children's privacy
The Service is not directed to, and is not intended for, children. You must be at least 18 years old to use the Service, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us information, contact [email protected].
13. International transfers
We are based in the United States and may process and store information in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers of personal data.
14. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy here with a new "Last updated" date and, where appropriate, provide additional notice in the app. Your continued use of the Service after the changes take effect constitutes acceptance of the updated policy.
15. Contact us
If you have questions or requests about your privacy or this policy, contact:
Tarnish Inc, Privacy Team
Email: [email protected]
Web: aloop.jewelry/contact