Revision date: October 23, 2026. Published revisions apply subject to applicable notice requirements and existing rights.
This Privacy Policy explains what information ShopMyNest (“ShopMyNest,” “we,” “us,” “our”), a service operated by ShopMyNest LLC, collects when you use shopmynest.com or the ShopMyNest mobile app (the “Service”), how we use it, and who we share it with.
What we collect
Information you give us
- Account information — name, email address, password (stored hashed), and, if you set one up, a profile photo.
- Seller information: shop name, shop bio, ship-from address, package presets, payout details provided to ShopMyNest for manual bank transfers, public seller return-policy choice and text, the choice revision and version, full accepted seller terms and acceptance time, and listing information.
- Order, exchange and refund records: purchase-time policy copies, delivery evidence, case reasons, party statements, private case photos, return instructions and tracking, proposed replacement terms, buyer agreement, replacement tracking and receipt confirmation, decisions, refunds and related accounting records. These private case records are available to the affected buyer, seller and authorized administrators. Do not include full card or bank credentials in a case.
- Buyer information — shipping address, billing address (via our payment processor), and order preferences.
- Content you post — listings, photos, seller updates, moderated Blog submissions, messages, and reviews.
- Support requests — anything you send to support@shopmynest.com or through in-app support.
Information we collect automatically
- Device and app information — device model, operating system, app version, and crash logs.
- Usage information — pages viewed, features used, and search terms, together with a timestamp and coarse location derived from IP.
- Cookies and similar technologies on the website — session cookies to keep you logged in, and analytics cookies to understand aggregate use. The native app stores authentication secrets using SecureStore and ordinary preferences using AsyncStorage; embedded web pages can use browser cookies.
Information from other services
- Payments: Stripe processes buyer payments and refunds and returns relevant confirmations, errors and settlement/dispute information. Seller payouts are separately processed by ShopMyNest as manual bank transfers; Stripe is not represented as the seller's payout-account provider.
- Shipping — Shippo returns live shipping rates and label details when a Seller purchases a label.
- Sign-in and integrations — if you use a third-party sign-in provider or connect another service, we receive the information that provider makes available to us.
What we don’t collect
- We don’t collect full payment-card numbers. Stripe collects and stores them directly.
- The mobile app requests only the permissions it needs to work (photo library for listing photos, camera for photo capture, network). It does not collect your contacts, calendar, precise background location, or microphone audio.
How we use information
- To operate the Service — accounts, listings, checkout, messaging, order tracking, shipping labels, and payouts.
- To process payments and prevent fraud (with Stripe).
- To send transactional emails and in-app notifications about orders, shipments, refunds, and account activity.
- To moderate Blog posts, including after publication.
- To communicate with you about product updates, features, and promotions (you can unsubscribe from marketing at any time; transactional messages continue).
- To detect, prevent, and investigate abuse, fraud, and violations of our Terms.
- To comply with legal obligations, respond to lawful requests, and enforce our agreements.
Legal basis for each processing purpose
The table below sets out, for each purpose in “How we use information” above, the categories of data we use, the US legal basis we rely on, and — for visitors from the European Economic Area (EEA), the United Kingdom, or Switzerland — the corresponding GDPR/UK GDPR legal basis. ShopMyNest is a US-only marketplace at launch; the EU/UK column is provided for visitors who reach the site from those regions.
| Purpose | Data used | Legal basis (US) | Legal basis (EU/UK, where applicable) |
|---|---|---|---|
| Operate the Service (accounts, listings, checkout, messaging, order tracking, shipping labels, payouts) | Account information, Seller information, Buyer information, content you post, device and app information | Performance of a contract with you; legitimate business interests | Art. 6(1)(b) contract; Art. 6(1)(f) legitimate interests |
| Process payments and prevent payment fraud (with Stripe) | Order information, device information, coarse location, Stripe fraud signals | Performance of a contract; compliance with legal obligations (AML/anti-fraud) | Art. 6(1)(b) contract; Art. 6(1)(c) legal obligation; Art. 6(1)(f) legitimate interests (fraud prevention) |
| Send transactional emails and in-app notifications about orders, shipments, refunds, and account activity | Account information, order information | Performance of a contract | Art. 6(1)(b) contract |
| Moderate Blog posts, including after publication | Content you post, account information | Legitimate business interests (platform safety and quality) | Art. 6(1)(f) legitimate interests |
| Send product updates, features, and promotions (marketing) | Account information, usage information | Consent (opt-in where required); legitimate business interests (existing-customer marketing) | Art. 6(1)(a) consent; Art. 6(1)(f) legitimate interests |
| Detect, prevent, and investigate abuse, fraud, and violations of our Terms | Account information, usage information, device information, content you post, IP-derived coarse location | Legitimate business interests; compliance with legal obligations | Art. 6(1)(f) legitimate interests; Art. 6(1)(c) legal obligation |
| Comply with legal obligations, respond to lawful requests, and enforce our agreements | As required for the specific obligation or request | Compliance with legal obligations; legitimate business interests | Art. 6(1)(c) legal obligation; Art. 6(1)(f) legitimate interests |
Where we rely on consent, you may withdraw it at any time by adjusting your preferences in the app or on the website, or by emailing support@shopmynest.com. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
Seller bank information
ShopMyNest stores seller bank routing and account numbers encrypted in recoverable form for authorized payout administration. Authorized personnel use the destination for manual ACH payouts. This is distinct from Stripe’s processing of buyer card payments; it is not a claim that only the bank-account last four digits are stored. Bank details are not public or shared with buyers.
Who we share information with
- Other users of the Service: buyers can see the seller's public Nest refund policy. Each buyer's purchased items retain their purchase-time policy copy. Sellers receive information needed to fulfill their own orders and respond to related cases. Case details are available to the affected buyer, the responsible seller and authorized administrators, not unrelated sellers or the public. Avoid putting unrelated sensitive information in case statements or public policies.
Sub-processors. We rely on a small number of vendors to run the Service. Vendors process relevant information under their applicable service and privacy terms. We do not represent that every vendor has an individually negotiated data-processing agreement or that every record is hosted only in the United States.
| Sub-processor | What it does for us | Data it receives | Where it hosts data | Privacy notice |
|---|---|---|---|---|
| Stripe, Inc. | Buyer payment processing, refunds and fraud screening | Payment-card details (collected directly by Stripe), billing address, order amount, device signals for fraud screening | See the provider’s current processing and hosting terms | stripe.com/privacy |
| Shippo, Inc. | Live shipping rates and label generation | Ship-from address, Buyer name and shipping address, package dimensions and weight, tracking numbers | See the provider’s current processing and hosting terms | goshippo.com/privacy |
| WordPress.com / hosting vendor | Website hosting, transactional email delivery, backups | Account information, order information, content you post, server logs | See the provider’s current processing and hosting terms | automattic.com/privacy |
| Expo, Inc. | Mobile app push-notification delivery and over-the-air app updates | Expo push token, device model and OS, app version, notification payload metadata | See the provider’s current processing and hosting terms | expo.dev/privacy |
| Automattic / Jetpack / WooCommerce Analytics | Site and commerce analytics | Cookie identifiers, pages viewed, coarse IP-derived location, device information | See the provider’s current processing and hosting terms | automattic.com/privacy |
We keep the current list of sub-processors up to date on this page. Material additions will be announced through the Service or by email.
- Legal and safety. We may disclose information when required by law, subpoena, or court order, or when we reasonably believe disclosure is necessary to protect the rights, property, or safety of ShopMyNest, our users, or the public.
- Business transfers. If ShopMyNest is involved in a merger, acquisition, or asset sale, user information may transfer with the business. We’ll notify you before your information becomes subject to a different policy.
We do not sell your personal information for money.
Data retention
Our standard retention period for completed order, payment, payout, tax, seller-consent and related dispute records is seven years after the transaction or case is finally resolved, whichever is later. An active dispute, legal hold or applicable legal requirement may require longer retention of the necessary records. This is ShopMyNest’s retention standard, not a claim that every data category is legally required for seven years. Account credentials, unnecessary bank destinations, ordinary messages, preferences and unrelated media are removed or de-identified when no longer needed for their purposes, subject to required records and holds. Records reaching the standard deadline require deletion or de-identification review; retained identifiers are not assumed anonymous merely because they are hashed. Backups rotate under the hosting provider’s actual schedule and may retain copies until overwritten; we do not promise immediate deletion from every backup.
Your choices
- Access and update. You can view and update most account information in the app and on the website.
- Delete: use the app's account-deletion control or contact support. Outstanding orders, refunds, disputes or payouts may need resolution first, and the displayed grace period applies. We will explain applicable retention exceptions rather than representing closure as deletion of all transaction and case records.
- Marketing. Unsubscribe links appear in every marketing email. Turning off marketing doesn’t stop transactional messages (order confirmations, shipping updates, refunds).
- Push notifications. Manage them in your device settings.
US state-specific rights
Depending on where you live, you may have additional rights under state privacy laws (for example, California’s CCPA/CPRA), including the right to know what personal information we hold about you, request deletion, correct inaccurate information, and opt out of certain sharing. Email support@shopmynest.com to make a request. We verify requests before acting on them, and we don’t discriminate against users who exercise these rights.
International users
ShopMyNest is operated from the United States. If you use the Service from outside the US, your information will be processed in the US, which may have different data-protection laws than your country. Applicable privacy rights and transfer requirements continue to apply.
Data-transfer mechanism
The Service is operated from the United States, and vendors may process information in other locations under their applicable terms. When an international transfer requires specific safeguards, the applicable arrangements must be established for that transfer. We do not claim that every vendor or transfer is covered by a particular certification or contract. Contact support@shopmynest.com for information about applicable safeguards.
Automated decision-making
ShopMyNest and its providers use automated tools for authentication, payment risk, fraud and abuse controls. Those tools can block or restrict a transaction or account; not every automated restriction is reviewed by a person before it takes effect. This policy does not promise that every restriction receives prior human approval.
If you believe a restriction is mistaken, email help@shopmynest.com with relevant information to request review. Do not send full payment-card numbers, bank credentials or authentication codes. Applicable legal rights remain available.
Children
ShopMyNest is not intended for anyone under 18. We don’t knowingly collect information from children under 13. If you believe a child has provided information to us, email support@shopmynest.com and we’ll delete it.
Security
We use industry-standard measures — encryption in transit (HTTPS), hashed passwords, restricted employee access, and reputable service providers — to protect your information. No system is perfectly secure. If we ever have a data breach that affects you, we’ll notify you as required by law.
Changes
We may update this Privacy Policy. If we make material changes, we’ll notify you in-app or by email before they take effect.
Contact
Privacy questions? Email support@shopmynest.com or write to ShopMyNest LLC.
Messaging and account activity
Conversation participants can see when messages are marked read after the recipient opens the conversation. A read receipt does not prove that a person read or understood every message. Older app versions may not report all receipts.
While you are signed in and using the app or website, we record your latest activity time. ShopMyNest administrators can see approximate online status and last activity for support and account safety. This feature does not collect your location or retain a browsing-history log. Administrators can keep private moderation notes and an account-action history. These notes are not shown publicly or automatically sent to the account holder. Applicable privacy access and other legal rights remain available.