Privacy Policy

Restox LLC ("Restox," "we," "us," or "our") operates the website restox.net and the Restox platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service. By using Restox, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Information you provide directly

• Name and email address when you create an account
• Shipping address(es) you add to your profile
• Household size and preferences you set
• Retailer membership and rewards numbers
• Payment information processed securely through Stripe

Information collected automatically

• Log data including IP address, browser type, pages visited, and timestamps
• Device information including operating system and browser version
• Cookies and similar tracking technologies
• Usage data about how you interact with the Service

Information from third parties

• Authentication data from Google when you sign in with Google
• Financial transaction data from Plaid when you choose to connect your bank account for Spend Intelligence (opt-in only)
• Purchase history from connected retailers

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Restox Service
• Automate your repeat purchases across connected retailers
• Send you notifications about upcoming and completed orders
• Personalize your experience with AI-powered reorder timing and purchase suggestions
• Process payments and manage your subscription
• Communicate with you about your account, updates, and support
• Comply with legal obligations
• Detect and prevent fraud and abuse
• Display relevant advertisements on the free tier (ad-supported plan only)

3. Plaid and Financial Data

Restox uses Plaid Technologies, Inc. ("Plaid") to enable the optional Spend Intelligence feature. If you choose to connect your bank or financial accounts, Plaid will collect your financial information on our behalf. Your use of Plaid's services is subject to Plaid's Privacy Policy, available at plaid.com/legal/privacy-policy.

We only read your transaction data to identify recurring purchases. We do not initiate payments, transfers, or any financial transactions through Plaid. Connecting your bank account is entirely optional and can be disconnected at any time from your Settings page.

We do not sell your financial data to third parties.

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

• Service providers — third parties that help us operate the Service, including Supabase (database), Vercel (hosting), Stripe (payments), Plaid (financial data), SendGrid (email), and Twilio (SMS). These providers are contractually obligated to protect your data.
• Retailers — when you connect a retailer account and authorize Restox to place orders on your behalf, we share necessary information with that retailer to fulfill your orders.
• Legal requirements — when required by law, court order, or to protect the rights and safety of Restox and its users.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember your preferences, and improve the Service. We use:

• Essential cookies — required for authentication and core functionality
• Preference cookies — to remember your settings such as dark mode preference
• Analytics cookies — to understand how users interact with the Service (Vercel Analytics)
• Advertising cookies — on the free tier only, to serve relevant ads through our ad partners

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or compliance purposes. Transaction history may be retained for up to 7 years for tax and accounting purposes.

7. Data Security

We use industry-standard security measures to protect your information, including TLS encryption for data in transit and encryption at rest via Supabase. Retailer connections use OAuth 2.0 — Restox never stores your retailer login credentials. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. We encourage you to use a strong, unique password and to enable two-factor authentication on your Google account.

8. Your Rights and Choices

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and personal information
• Disconnect any connected retailer or bank account at any time
• Opt out of marketing communications
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at privacy@restox.net.

9. Children's Privacy

Restox is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete it promptly. If you believe we may have collected information from a child under 13, please contact us at privacy@restox.net.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information.

To submit a CCPA request, contact us at privacy@restox.net.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the Service. Your continued use of the Service after changes become effective constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us: