Privacy Policy

1. Introduction

ReFiBuy, Inc. ("the Company," "we," "us," or "our") operates refibuyx.com and the ReFiBuy catalog optimization service (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices available to you.

ReFiBuy's core service ingests product catalog data submitted by retail businesses, scores each listing against AI shopping agent criteria, and rewrites listings to improve their discoverability by AI-powered shopping tools such as ChatGPT, Perplexity, and Google AI Mode. Our data handling practices are shaped by the nature of that service: we process catalog and business information on behalf of retailers, not personal consumer shopping data at scale.

The Company is based at 1201 2nd Avenue, Suite 900, Seattle, WA 98104. Questions about this Policy can be directed to [email protected].

2. Information We Collect

2.1 Information You Provide

We collect information you submit directly, including:

• Contact details (name, work email, phone) when you fill out a catalog audit request, contact form, or sign-in registration;
• Company information you provide (company name, role, catalog size, ecommerce platform);
• Product catalog data you upload or connect via Shopify, WooCommerce, or CSV for audit and rewriting purposes;
• The content of any messages you send us.

2.2 Information Collected Automatically

When you visit refibuyx.com, we automatically collect limited technical information:

• IP address and approximate location (city and region level);
• Browser type, operating system, and device class;
• Pages visited, referring URLs, and time on page;
• Cookie and similar identifiers (see Section 5).

2.3 Catalog Data from Service Customers

Retailers who subscribe to the ReFiBuy service submit product catalog data (product titles, descriptions, attributes, pricing, inventory data) for analysis and rewriting. This data belongs to the subscribing retailer and is processed solely to deliver the catalog optimization and monitoring services they have engaged us to perform. We do not use catalog content to train our models without explicit written consent from the subscribing customer.

2.4 We Do Not Knowingly Collect Children's Data

refibuyx.com is a B2B service not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

We use the information we collect to:

• Deliver free catalog audits requested through our website and respond to inquiries;
• Operate and improve the ReFiBuy catalog scoring, rewriting, and monitoring service;
• Score product listings against AI shopping agent criteria and produce audit reports for subscribing retailers;
• Communicate service updates, account notifications, and (with your consent where required) marketing communications;
• Detect, investigate, and prevent fraud or unauthorized use of the Service;
• Comply with legal obligations.

We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see your state's section below.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf (including hosting infrastructure, email delivery, and analytics tools) under contractual confidentiality terms;
• Authorities, when required by law or to protect rights, safety, or property;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties. Catalog data submitted by retail customers is not shared with other retailers or used outside the scope of the services purchased.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember preferences, and measure usage. For details and your choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described in this Policy, to comply with legal or accounting obligations, and to resolve disputes. Specifically:

• Inactive marketing-list contacts are purged after 24 months of no engagement;
• Free audit request data is retained for 18 months and then deleted unless the requestor becomes a paying customer;
• Product catalog data submitted by active service subscribers is retained for the duration of the subscription plus 90 days, after which it is deleted upon request;
• Server access logs are retained for 90 days, then aggregated and anonymized.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal and catalog data, including TLS encryption in transit, restricted-access databases, and least-privilege access controls. No system is perfectly secure; we cannot guarantee absolute security and encourage you to use strong passwords and limit access to your ReFiBuy account credentials.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law.

9. Washington State Residents

Washington does not currently have a comprehensive consumer privacy statute. As a matter of policy, the Company extends the following baseline rights to all U.S. residents regardless of state of residence.

9.1 Baseline Rights

• Right to Know: request the categories of personal information we have collected about you.
• Right to Delete: request deletion of personal information you have provided.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Marketing: unsubscribe from marketing emails at any time or opt out via the link in each marketing message.

9.2 How to Exercise

Email [email protected] with a description of your request and enough detail for us to verify your identity. We respond within 45 days.

9.3 Sector-Specific Rights

If you are protected by federal sector laws (e.g., HIPAA, GLBA, FERPA), those laws may give you additional rights with respect to data covered by them.

California Visitors

If you are a California resident, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. The Company does not sell personal information and does not "share" personal information for cross-context behavioral advertising.

To submit a CCPA / CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints can be sent to: