Privacy Policy

Introduction

This is our Privacy Policy. Please read it to learn more about who we are and how we handle your data. Reach out to us if you need help understanding what this means for you.

We are Ragpiq Limited ("Ragpiq", "we", "our", or "us") and we operate the Ragpiq app and Ragpiq website. Our address is 66 Nicholson Street, Brunswick East, VIC 3057, Australia.

We want to explain how we use personal information about you (your data).

Ragpiq can be accessed via our app or website (the Service). When you use our Service, we collect and use data about you. This Privacy Policy explains what data we collect, how we use it, and what choices you have regarding your data.

1. What Data Do We Collect and How Do We Use It?

1.1 Data Collection

We collect your data when you register with Ragpiq and when you use our Service. We use your data to enable your use of the Service, and occasionally, we may use your data to comply with legal obligations or for other legitimate reasons. There may also be instances where we seek your consent to use your data.

We collect data from you when you use our Service or provide it to us, such as when you:

• Register to use the Service.
• List or sell an item.
• Make an offer or purchase an item.
• View, like, save, search for, comment on, add an item to your bag, or communicate with other users.
• Sign up for our marketing emails and push notifications.
• Complete a form or survey.
• Participate in a research interview or focus group.
• Enter a competition or participate in a promotion.

1.2 Legal Basis for Data Collection

We need a legal basis to collect and use your data. The primary reason we use your data is to fulfil our contract Terms & Conditions with you, enabling you to use our Service.

We may also collect and use your data if we:

• Are legally required to do so.
• Have your consent.
• Have a legitimate interest in doing so as part of running our business, provided your interests and fundamental rights do not override our legitimate reasons.

Below is more information on the types of data we collect and why we use it.

1.3 Contact Details and Proof of Identity

When you create your account, you provide us with contact information such as your name, email address, telephone number, and address.

We use this contact information to communicate with you:

• About the products you buy and sell through the Service.
• Regarding queries, issues, or concerns you or other users have.
• If you enter a competition or participate in a promotion.
• To ask you to complete a form or survey.
• To invite you to participate in a research interview or focus group.
• To send you marketing communications.

If you interact with a Ragpiq buyer or seller, we will share your contact details with them as a necessary part of buying, selling, and using our Service.

We also collect your date of birth when you create an account, which we use to verify your details, understand the age range of our users, and provide age-appropriate services and support.

If we cannot verify your identity using other information, we may ask you to provide identification documents, which we will use along with your contact information to verify your details and help prevent fraudulent access to the Service.

1.4 Comments and Opinions

If you contact us (for example, by email, phone, post, or by completing an online form) we collect the comments and opinions you share.

We also collect data you provide to us, including comments and opinions, when you:

• Complete a form or survey.
• Participate in a research interview or focus group.
• Enter a competition or take part in a promotion.
• Post on community boards or other message areas.

We use comments and opinions for legitimate reasons to address any issues, concerns, or questions and to improve our Service for you and other users.

If you complete forms or surveys, participate in research interviews or focus groups, enter competitions or promotions, or post on community boards or other message areas, we may use your data, including any comments and opinions, to determine which products or services you might be interested in and to send you marketing messages about them.

1.5 Competitions and Promotions

We collect data when you enter a competition or participate in a promotion. We use this data to run the competition or promotion you have entered.

This data may include your contact details, such as your name and any other information you provide as part of the competition entry or promotion, as well as any comments or opinions you provide.

If you win a competition or promotion, we have a legitimate interest in using your data in publicity related to the competition or promotion. This may include your name, Ragpiq username, photographs, likeness, voice, opinions, and biographical information.

1.6 Your Content, Images, and Voice Recordings

We collect your content, which may feature images containing your personal data, when you voluntarily submit it to us while using the Service. We may use your content and/or images in our online and offline marketing campaigns, which may be conducted via third parties on our behalf, subject to the licence you grant us as set out in our Terms & Conditions.

When you film a video walkthrough of your items, the recording includes your voice. We use that audio to create a written transcript describing your items, including any brands, condition notes, and asking prices you mention, and we share the recording with our AI service providers for that transcription. The video, audio, and transcript are stored with your upload and shown to the store that prices your items. The app and website ask for microphone access before any recording starts, and you can always use photos instead.

We process your personal data for these purposes either on the basis of our legitimate interests to promote Ragpiq in our publicity and marketing campaigns or with your consent.

1.7 In-App Messages, Comments, and Item Descriptions

If you send in-app messages or comments, or provide item descriptions, we may access, store, and review these:

• To help fulfil an order made via our Service.
• To respond to issues, concerns, queries, or disputes raised by users and to resolve disputes.
• If we believe the messages are in breach of our Terms & Conditions, or show that you have breached our Terms & Conditions, for example, for fraud prevention and/or the safety of our users.

1.8 Payment and Transactions

We collect data, including payment information, in relation to items you buy or sell and the payment methods you use, so you can pay for items and receive money for items you have sold.

If you buy something using our Service, your username, name, delivery address, email address, and phone number you provide during checkout will be shared with the seller to fulfil your order. However, you should not share your details directly with sellers, and if something seems off or you have concerns, you can contact us via hello@ragpiq.com.

If you sell an item using our Service and purchase the shipping label through Ragpiq, we may share your name, address, email address, and phone number with our shipping partner for inclusion on the shipping label to provide the Service to you.

If you use one of our payment partners, including Ragpiq Payments via Stripe, you authorise Ragpiq to pass any information and payment instructions you provide (which may include name, email address, unique customer identifier, order ID, bank account details, payment card details, card expiration date, CVC code, date/time/amount of transaction, merchant name/ID, and location) to the extent required to complete payments via the Service. Our support and moderation team will also have access to this information to process and support transactions and moderate refunds.

Our payment partners may also collect your information, including information collected by cookies or other similar means, to the extent necessary to process the transactions or to satisfy security requirements.

We also use your transaction information and purchase history to help determine which products and services you might be interested in and to send you marketing messages about them.

1.9 Data from Social Accounts

If you connect your Ragpiq account to a social network account, such as Facebook or other social networks, we will collect data about you from the social network. We will do this in accordance with the privacy settings you have on that social network.

The data we may receive includes your name, ID or handle, profile picture, gender, username, user ID, age or age range, language, country, friends list, follower list, and any other information you agree to share.

We use this data to help create your public profile on our Service and to help you share your experiences on our Service with your friends, followers, or contacts on the social network you have connected your Ragpiq account to.

If you agree, we may also use your data to provide you with updates on the social network that might interest you or any promotion you are taking part in. We won't post on your social network platforms without your permission.

If you add your Pinterest username, we read the pins on your public Pinterest profile, meaning the pictures and the words with them, to learn your style and find pieces you might like. We only read what anyone can see on your public profile. Removing Pinterest in Ragpiq deletes what we learned from it.

1.10 Your Relationship with Other Users

We collect information about the users you follow (and those who follow you) on our Service. We use this data to display items in your search results, recommendations, or feed that may interest you. This process is supported by technology (an algorithm) that helps us personalise your experience.

If an account has been blocked or banned, we retain this data to support our security measures.

1.11 Device Information and Location Data

When you use our Service, we collect device information such as IP address, device type, browser type, operating system, and language settings.

We use this data to provide, personalise, and improve our Service, as well as to ensure security and detect fraudulent activity.

We also collect location data from your device if you permit us to do so. This helps us to provide you with location-based features, such as finding nearby items or sellers.

1.12 Analytics Data

We use PostHog, an analytics service, to understand how people use our app and website: which pages and screens they visit, what they tap, and where something goes wrong. PostHog also records sessions on our app and website so we can see where people get stuck. Anything you type into a form is hidden in these recordings.

We use this data to improve the Service and to fix problems. We may also use it to help determine which products and services you might be interested in and to send you marketing messages about them.

1.13 Advertising and Measurement

We advertise Ragpiq on Instagram and Facebook, which are run by Meta. To see which ads work, and to show our ads to people likely to find Ragpiq useful, we use Meta's advertising tools:

• On our website, the Meta Pixel records the pages you visit and uses cookies to recognise a browser that arrived from one of our ads.
• When you create an account or send us your first items through our website, our servers tell Meta. We send your email address, phone number and name in hashed form (scrambled so they cannot be read back), your IP address and browser type, and details of the ad you arrived from, if there was one. Meta uses this to match the event to a Meta account and to measure our ads.
• In our app, Meta's software tells Meta when the app is installed and opened, and when you create an account or send your first items. The app does not send Meta your name, email address or phone number, does not ask to track you across other companies' apps and websites, and does not read your device's advertising identifier.

Beyond how many pieces were in your first upload, we never send Meta details of the items you sell, your payment information, your messages, or your photos and videos.

Meta handles this data under its own terms and its Privacy Policy, and may use it to deliver, measure and improve ads. Section 3.5 explains how to control it.

We also advertise Ragpiq on Google Search. If you arrive at our website from one of those ads, a Google tag on the page you land on records that visit, tells Google if you tap the button to get our app, and uses cookies to recognise a browser that arrived from the ad. As with any web request, Google also receives your IP address and browser type. We do not send Google your name, email address or phone number, or anything about the items you sell, and we do not use the tag to build advertising audiences. The tag does not load for visitors who did not arrive from a Google ad.

Google handles this data under its own terms and its Privacy Policy, and may use it to measure and improve ads. Section 3.5 explains how to control it.

2. How Do We Share Your Data?

2.1 Third-Party Service Providers

We share your data with third-party service providers who help us operate our Service. These providers are required to adhere to confidentiality and security standards and are not allowed to use your data for purposes other than providing the services to us.

2.2 Advertising Partners

We share limited data with Meta and Google for advertising and measurement, as set out in section 1.13. Unlike our service providers, Meta and Google may also use that data for their own purposes under their own terms. We do not sell your data.

2.3 Data Stored Outside Australia

Some of the service providers and partners we share data with, including Meta, Google, PostHog and Stripe, store or process data outside Australia, mainly in the United States. We only share what each one needs for the purposes in this Privacy Policy.

2.4 Legal Requirements

We may disclose your data if required to do so by law or in response to valid requests from public authorities, such as a court or a government agency.

2.5 Business Transfers

If we undergo a business transfer, such as a merger or acquisition, your data may be transferred as part of the business assets. We will notify you of any changes to our privacy practices if this occurs.

2.6 Protection of Rights

We may disclose your data if necessary to protect our rights, privacy, safety, or property, or those of our users, employees, or others.

3. Your Rights and Choices

3.1 Access and Correction

You have the right to access and correct your data. You can update your account details or contact us to request access to the personal data we hold about you.

3.2 Data Deletion

You have the right to request the deletion of your data, subject to certain legal exceptions. You can contact us to make such a request, or follow the steps on our Delete Your Account page.

3.3 Marketing Preferences

You can manage your marketing preferences by following the unsubscribe instructions in our marketing communications or by contacting us directly.

3.4 Data Portability

You have the right to request a copy of your data in a structured, commonly used format.

3.5 Advertising Choices

You can control how Meta uses data from Ragpiq in your Meta Accounts Centre: Ad preferences changes the ads you see, and Your activity off Meta technologies lets you disconnect the activity businesses like us share with Meta. For Google, My Ad Centre controls the ads Google shows you. You can also block or clear cookies in your browser settings, which stops the Meta Pixel and the Google tag recognising your browser. If you have any questions about this, contact us.

4. Data Security and Retention

We use technical and organisational measures to protect your data against unauthorised access, disclosure, or destruction. We retain your data for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by law.

5. Google User Data

Two kinds of account can connect Google to Ragpiq: a store can connect Google Calendar, and a shopper can connect Gmail. This section explains exactly what each involves. It applies on top of everything above, and only to people who choose to connect.

5.1 Google Calendar (stores)

What we read. You pick one calendar, and we read the events on it. For each event we read the start and end time, the title, the description, and the guest list. We use it to show your existing bookings in your Ragpiq diary, and to match a booking to a customer's Ragpiq account when their email is on the invitation. We never read any other calendar in your account.

What we write. We create one new calendar in your Google account, called "Ragpiq drop-offs", and we add your Ragpiq bookings to it. When a booking is approved, cancelled or declined, we update or remove the event so it stays accurate. We can only ever add, change or delete events on the calendar we created. The calendar you asked us to read, and every other calendar in your account, is out of our reach. This is enforced by the permission we request from Google, not only by our own software.

What we store, and for how long. We store the booking details taken from your events, and the credential Google gives us so we can keep reading the calendar you chose. Nothing else. Disconnecting Google Calendar in Ragpiq revokes that credential immediately and stops both directions. Bookings already in your Ragpiq diary stay, because they are your records of visits that happened.

5.2 Gmail (shoppers)

Why we ask. If you connect Gmail, Ragpiq looks for your receipts and order confirmations for clothing, shoes, bags and accessories, and for the emails confirming a return, refund or exchange of them. What you have bought, and what you sent back, tells Piq your taste and your sizes, so it can find pieces that suit you without you filling in a form. It also tells Piq what you have just bought, so it stops looking for something you already have.

What we read. We ask Google for read-only access to your email. We search for purchase, order, return, refund and exchange emails from the last three years, up to 500 of them, and leave out senders that never sell clothes, such as food delivery, travel and banks. We do not open other emails.

How it is read. Each of those emails is read by an automated system: an AI model (Google's Gemini) that we run for this purpose. It picks out the pieces you bought or sent back, meaning the brand, what the piece is, its size, its price, the store, and whether you kept it. No person at Ragpiq reads your emails, except where you ask us to in order to help you with a problem, where it is needed for security, or where the law requires it.

Who connects it. For now, Gmail connects through Unipile, a service that holds the read-only access to your email for us and passes us only the emails our search finds. That is why Google's screen names Unipile when you connect. Unipile cannot send, delete or change anything in your mailbox either.

What we keep. We keep only those details for each piece, the address of the Gmail account you connected, and the credential that lets us read it (Unipile's reference to your connection, or the credential Google gives us, stored encrypted). We do not keep your emails. We cannot send, delete or change anything in your mailbox, because the permission we request from Google is read only. While you stay connected, we may look for new receipts about once a week.

How to stop. Removing Google in Ragpiq ends the connection immediately (at Unipile, or with Google) and deletes everything we learned from your emails. You can also remove the access at any time from your Google Account settings, where it is listed as Unipile if you connected through Unipile.

5.3 Limited Use

Ragpiq's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

We use this data only to provide and improve the features you can see in Ragpiq: your drop-off diary if you are a store, and your matches and sizes if you are a shopper. We do not sell it. We do not use it for advertising, and we do not use it to train models that serve anyone but you. We do not transfer it to anyone except as needed to provide those features (such as the AI service that reads your receipts), for security, or where the law requires it.

6. Outlook (shoppers)

Why we ask, and what we read. If you connect an Outlook, Hotmail or Live inbox, Ragpiq reads it for the same reason and in the same way as Gmail (section 5.2). We look for receipts, order confirmations and the emails confirming a return, refund or exchange of clothing, shoes, bags and accessories, from the last three years, up to 500 of them, and leave out senders that never sell clothes. We do not open other emails.

How it is read. An AI model (Google's Gemini) that we run for this purpose picks out the pieces you bought or sent back. No person at Ragpiq reads your emails, except where you ask us to in order to help you with a problem, where it is needed for security, or where the law requires it.

Who connects it. Outlook connects through Unipile, a service that holds read-only access to your mail and your basic profile for us and passes us only the emails our searches find. That is why Microsoft's screen names Unipile when you connect. Neither we nor Unipile can send, delete or change anything in your mailbox.

What we keep, and how to stop. We keep only the details of each piece, the address of the Outlook account you connected, and Unipile's reference to your connection. We do not keep your emails. While you stay connected, we may look for new receipts about once a week. Removing Outlook in Ragpiq ends the connection at Unipile immediately and deletes everything we learned from your emails. You can also remove the access at any time from your Microsoft account's settings, where it is listed as Unipile.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on our Service and updating the effective date.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

• Ragpiq Limited
• Address: 66 Nicholson Street, Brunswick East, VIC 3057, Australia
• Email: hello@ragpiq.com

Effective Date: 21 October 2026