Privacy Policy

Last updated: August 19, 2026

This Privacy Policy explains how Bestis, Inc. (a Delaware corporation) collects, uses, discloses, and protects personal information when you use bestis.com and related services (the “Service”). By using the Service, you agree to this Policy.

1. Information we collect

Information you provide

Account & profile: name, handle, email address, password (hashed), date of birth (for age verification), and profile details.
Wardrobe & content: item photos, descriptions, brands, sizes, values, tags, posts, messages, and visibility settings.
Transactions: orders, listings, offers, borrow/swap/sale records, and dispute information.
Support: information you share when you contact us.

Information collected automatically

Usage & device data: IP address, device and browser type, pages viewed, and interactions, collected through cookies and similar technologies (including Google Analytics).
Cookies: we use strictly necessary cookies for authentication (secure, httpOnly session cookies) and analytics cookies to understand usage.

Information from third parties

Payment processors (e.g., Stripe) provide transaction and payout status. We do not store full payment card numbers.

2. How we use information

to provide, operate, secure, and improve the Service;
to enable transactions, escrow, authentication, and communications between members;
to verify age and eligibility and to prevent fraud, abuse, and safety risks;
to send service, security, and (with your controls) activity notifications;
to analyze usage and measure performance; and
to comply with law and enforce our terms.

3. How we share information

With other members according to your visibility settings (private, circle, friends, or public) and to complete transactions you initiate.
With service providers (hosting, payments, email, analytics, authentication) who process data on our behalf under contract, including our Data Processing Agreement.
For legal reasons — to comply with law, respond to lawful requests, or protect rights, safety, and property.
In a business transfer such as a merger, acquisition, or sale of assets.

We do not sell your personal information for money.

4. Your choices & rights

Depending on where you live (for example, under the EU/UK GDPR or the California CCPA/CPRA), you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to opt out of certain analytics or targeted advertising. You can manage notification preferences in Settings and control cookies through your browser. To exercise your rights, contact [email protected]. We will not discriminate against you for exercising them.

5. Data retention

We retain personal information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, we delete or de-identify it.

6. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, hashed passwords, access controls, and secure session cookies. No method of transmission or storage is completely secure. See our Cyber Liability Insurance statement for our insurance posture.

7. International transfers

We are based in the United States, and your information may be processed in the United States and other countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

8. Children

The Service is not directed to children under the minimum age required at registration, and we do not knowingly collect personal information from ineligible minors. If you believe a minor has provided us information, contact [email protected] and we will take appropriate action.

9. Changes

We may update this Policy from time to time. Material changes will be communicated through the Service or by email, and the “Last updated” date above will change.

10. Contact

For privacy questions or requests, contact our privacy team at [email protected].