Privacy Policy

1. Who we are

SwapMyBeauty (swapmybeauty.com) is operated by TalentyGo LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA (“SwapMyBeauty,” “we,” “us”). It is a service where adults in the United States swap new, sealed beauty products with each other. We decide how and why your personal information is used. Privacy questions and requests: privacy@swapmybeauty.com.

2. Scope

This policy covers the personal information we handle when you visit our website, join the waitlist, receive an invitation, create an account or use the member app. It does not cover other websites, or the services of Stripe or the carriers when you deal with them directly under their own privacy policies.

3. Information we collect

Information you give us

• Waitlist: email, first name, ZIP code, beauty interests and any optional note.
• Account: invitation code, first name, optional display name, email and password. We store passwords only as a salted hash and cannot read them.
• Sign in with Google (optional): if you choose it, Google shares your name, email address and whether it is verified. We use them only to create or sign you in to your account (if you join with Google, your name and email become your waitlist application, together with the ZIP code and interests you enter); we don’t receive your Google password and we don’t store your Google profile photo.
• Your agreement to our Terms: that you confirmed you are 18 or older and live in the US, the versions of the Terms and this policy you accepted, the time, your IP address and your browser’s user-agent string.
• Profile: ZIP code (used for a coarse shipping zone), beauty interests, favorite fragrance notes, and notification and email preferences.
• Listings: brand, product name, category, size, shade, description, estimated value, best-before date, your declarations about condition (including whether a set contains fragrance), and photos. We remove photo metadata, including GPS location, when we process an image.
• Referrals: which member’s invitation code you signed up with, the friends who signed up with yours, the free swaps earned and used, and simple counts of how often you copied your code or link and how many times your link was opened (we store no information about the people who open it).
• Activity: likes and skips, wishlist, swap requests, your accept or decline decisions (and how long you took), and the ratings you give and receive after a swap.
• Your taste (optional): the product types you like or skip (for example “clay face mask”), and, only if you choose to answer, your skin type (dry, oily, combination, normal), your hair type (straight, wavy, curly, coily) and your favorite scent families. We do not ask about skin, scalp or hair conditions, skin tone or any other health information.
• Shipping: names, street addresses, city, state, ZIP and an optional phone number, in your address book and for each swap.
• Problem reports and messages you send us, including about a reaction to a product if you choose to tell us.
• Mia, our AI assistant (optional): the messages you write to Mia in the member area and her answers, the page you were on (we keep your questions, linked to your account, for 90 days; not her answers), and, if you choose “Talk to a person” or “Share an idea”, the message you send our team and, if you include it, your conversation with Mia (see “Mia, our AI assistant” below).
• Tax information, only if the law requires it: if we must report swaps to the IRS, your legal name and taxpayer identification number (Form W-9). We will ask before collecting it.

Information created when you use the Service: swap records (products given and received, estimated values, shipping shares, fees), shipment records (carrier, service, tracking number, status, delivery events), payment records (amounts, status, payment-processor references, and any card dispute), your SwapScore and the events behind it, in-app notifications, and records of emails we sent you.

Information collected automatically: IP address and browser type stored with your sign-in session; whether you joined from a phone, tablet or computer (only that, not your browser details), so we know how members use the site; IP address and email in short-term counters that limit repeated attempts (for example, too many sign-in tries); and server logs kept by our hosting provider, from which our software removes names, emails, addresses and phone numbers.

Information from partners: our shipping provider checks and corrects addresses and sends tracking updates; our payment processor tells us whether a payment was authorized, captured, failed or disputed. We never receive or store your full card number.

We do not collect precise geolocation, government ID numbers, biometric data or your device contacts, and we do not ask for health information.

4. How we use information

• to create and secure your account, verify your email and reset your password;
• to keep a record of your agreement to our Terms and this policy;
• to review listings against our rules, including product-safety and shipping rules, using automatic rule checks and an automated AI review (see “Automated listing review” below);
• to match and run swaps: proposals, approvals, deadlines, labels, tracking and receipt;
• to take payment of postage and the service fee, and to respond to card disputes;
• to calculate SwapScore, send service emails and in-app notifications, and handle problem reports;
• unless you turn them off, to email you tips to get started (for example, a reminder if your Swap Closet is still empty a day after you join) and occasional SwapMyBeauty news (“News and tips”);
• to send product-safety and recall notices;
• to prevent fraud, abuse and security incidents;
• to keep business, tax and accounting records, meet legal obligations (including tax reporting where required) and enforce our Terms;
• to suggest products and swaps that suit you, and to tell you in the app when a product type you like is listed (your taste is used only for you: it is never shown to other members, never sent to AI providers, never sold and never used for advertising);
• to answer your questions through Mia, our AI assistant, and to reply to the help requests and ideas you send our team through her; to review the questions members ask Mia so we can improve her answers and our help pages, and help a member who seems stuck;
• to improve the Service using aggregated information and the ideas and feedback members send us.

Automated waitlist screening. When you join the waitlist, with the form or with Google, your entry is checked automatically (a valid email whose domain can receive mail, a ZIP code in the contiguous US, not already a member) and then screened by an AI model provided by Anthropic, which receives only your first name, your email’s domain, the first three digits of your ZIP code, your interests and your note. Clear cases are approved (you receive an invitation) or declined automatically; uncertain ones go to our team. You can ask for a person to review the decision by writing to privacy@swapmybeauty.com.

Mia, our AI assistant. Mia is an AI chat assistant in the member area, clearly labeled as AI. Using her is optional. To answer, she uses our own help pages and a short summary of your own account: your first name, your listings and their review status, your swaps and the status of their parcels. She never receives your email, address, phone number, payment details or your taste answers, and she only sees your own account. Your messages to Mia and that summary are processed by an AI model provided by Anthropic, as our service provider. We keep the questions you write to Mia in the member area, linked to your account, with the date and the page you were on, for 90 days, so our team can see what members ask, improve Mia and our help pages, and reach out if you seem stuck; they are then deleted automatically. For members who joined before October 26, 2026, this starts on November 2, 2026, after we told them by email. We do not keep Mia’s answers or the rest of the conversation, which stays in your browser tab and is gone when you close it. Mia can make mistakes; she gives general information, not professional, medical or legal advice, and she cannot change your swaps, payments or account. If you choose “Talk to a person”, we store your message (and the conversation, if you choose to include it) and email it to our support team, who reply by email; if you choose “Share an idea”, we store your idea to improve the Service. Please don’t share health details, card numbers or passwords with Mia. On our public pages, visitors who aren’t signed in can also ask Mia general questions about SwapMyBeauty: she sees no account, the messages are processed the same way by Anthropic to answer and are not stored by us, and we only keep short-term counters by network (IP) address to limit repeated use.

Automated listing review. When you submit a listing, its text, photos and declarations (never your name, email or address) are checked automatically against our rules and then reviewed by an AI model provided by Anthropic, which processes them for us under contract and returns a decision with its reasons. A fragrance listing gets three separate checks. Clear cases are approved or rejected automatically and the reasons are recorded; uncertain cases go to our team. You can ask for a person to review any automated decision by writing to privacy@swapmybeauty.com.

We do not use your information for targeted advertising, we do not sell it, and we do not use it to make decisions that produce legal or similarly significant effects about you. Matching is automated, but it only proposes swaps; you decide whether to accept.

5. What other members see

• Always: your first name, SwapScore, number of completed swaps and your approved listings (including the optional reason you give for swapping a product). Never your email.
• Ratings: after a swap, the members who received your products can rate it (1 to 5 stars and three checks: as described, sealed, shipped on time). Others see your average stars and the share of “as described” once you have 3 ratings, plus how often and how quickly you answer swap proposals. Comments left with a rating are seen only by our team. Ratings are counted once both members have rated, or after 7 days, and wait while a problem report is open.
• In a swap you accept: the member who ships to you sees your name and shipping address on the label they print, and the member who receives your parcel sees the name and return address on it. That is how carriers deliver and return parcels. Members may use this information only for that swap. If you prefer, you can use a carrier pickup location or a PO box where the carrier allows it.
• Referral program: a member whose code you used sees your first name and whether you have completed a first swap.
• If you delete your account, other members see “Deleted member” in past swap records.

6. How we share information

We share personal information only with service providers that process it for us under contract, and as described here:

• Hosting, content delivery, security, photo storage and email forwarding: Cloudflare.
• Sign in with Google: Google, only if you choose it; it confirms who you are to us and receives no other information from us.
• Database: Neon (managed PostgreSQL).
• Email delivery: Resend.
• Site usage analytics: Microsoft Clarity receives how pages are used (pages viewed, clicks, scrolling, device and browser type, approximate location from your IP address) so we can find and fix what’s confusing. What you type in forms is masked, and in the signed-in member area the text on screen (names, addresses, messages) is masked too. Microsoft processes this under its own privacy statement.
• Ad measurement: Google Ads, only on our public pages and never in the member area or when you are signed in, receives which of our pages you view after clicking one of our ads and, if you then join, a signal that a sign-up happened (nothing more), with a Google cookie, device and browser type and your IP address, so we can measure which ads bring new members. Ad personalization is turned off and Restricted Data Processing is on: Google uses this only to measure our campaigns, as our service provider, not to build advertising profiles or show you other ads. We never send Google your name, email or anything from your account.
• Mia, our AI assistant: Anthropic (Claude API) receives your messages to Mia, the recent conversation and the account summary described above, only when you use Mia.
• Automated listing review and waitlist screening: Anthropic (Claude API) receives listing text, photos and declarations, without your name, email or address; for waitlist screening, your first name, email domain, ZIP area, interests and note.
• Payments: Stripe receives the card and billing details you enter directly into its payment form, plus our internal member ID, swap ID and amounts; for a Swap Club membership, the subscription and its renewal dates. We do not send your name or email to Stripe (Stripe Checkout may ask you for your email to send your receipt). Stripe also uses information for fraud prevention under its own privacy policy.
• Shipping labels and tracking: EasyPost and the carriers it connects to (USPS, UPS, FedEx) receive sender and recipient names, addresses, optional phone number, parcel details and, for fragrance, the hazardous-materials classification.
• Other members, as described in “What other members see.”
• Brands and regulators, only for safety: if you report a serious reaction and ask us to, or the law requires it, we may share the product and the details you gave us with the manufacturer or the FDA.
• Legal and safety: when required by law, a subpoena or court order, or to protect the rights and safety of members, the public or us.
• Tax authorities, where the law requires us to report swaps.
• Business transfers: in a merger, acquisition, financing or sale of assets, subject to this policy.

We do not sell your personal information and we do not share it for cross-context behavioral advertising, and we have not done so in the past 12 months.

7. Cookies and similar technologies

We use: a first-party session cookie that keeps you signed in for up to 30 days; a first-party cookie (90 days) that remembers how you first reached us (for example the name of an ad campaign or the website that linked to us), so we know which channels bring members; it stays with us and is never shared; browser storage that saves an unfinished listing on your device; when you pay, Stripe’s payment form, which may set Stripe cookies for fraud prevention; Microsoft Clarity analytics cookies (such as _clck and _clsk, kept up to one year), which tell us how the site is used so we can improve it; and, on our public pages only, the Google Ads measurement tag and its cookies (such as _gcl_au, kept up to 90 days), which tell us which of our ads brought you to the site.

We use no social-media pixels and no ad personalization or remarketing. If your browser sends an opt-out preference signal such as Global Privacy Control or Do Not Track, we don’t load Clarity or the Google Ads tag at all. Clearing your cookies also resets them.

8. How long we keep information

• Account, profile, saved addresses, listings, photos and preferences: while your account is open. When you delete your account they are deleted, and your account becomes an anonymous record.
• Sign-in sessions: deleted 1 day after they expire (sessions last up to 30 days). Security counters: 30 days. Password-reset links: 30 days after they expire.
• Records of emails we sent: 90 days. In-app notifications: 12 months.
• Waitlist entries: up to 12 months, or until you ask us to delete them.
• Conversations with Mia: the questions you write to Mia in the member area: 90 days, then deleted automatically (sooner if you delete your account). Mia’s answers: not stored by us (they stay in your browser tab). Help requests and ideas you send our team through Mia: up to 24 months, or until you delete your account; the support emails they create are kept up to 90 days.
• Swap, shipment, payment and card-dispute records, including problem reports: 7 years, for accounting, tax and legal purposes. After you delete your account they are kept under an anonymous identifier, with your name removed and addresses reduced to city, state and ZIP.
• Automated review results (decision and reasons for each listing version) are kept with the administrative audit log.
• Record of your agreement to our Terms, and administrative audit logs: kept for at least 7 years in a log that cannot be edited, because they are our evidence of what was agreed and who did what.
• Tax information (if collected): as long as tax law requires, generally at least 4 years after the last report.
• Unsubscribe records: kept so we can keep honoring your choice. Backups and provider logs expire on their own rolling schedules.

We keep information longer only when the law requires it or a legal claim is pending.

9. Security

We use encryption in transit (HTTPS), salted password hashing, secure session cookies, a strict content security policy, private photo storage with access checks, role-based administrator access with an audit trail, and logs that exclude personal details. No system is perfectly secure. If a security breach affects your personal information, we will notify you, and the authorities where required, as the law of your state requires.

10. Your choices and rights

In your account you can edit your profile and addresses, turn notifications and emails on or off by category, unsubscribe from any notification email, download your data, change or delete your taste (Profile → Your taste) and delete your account (Profile → Your data). Deletion is available once you have no live swaps; some records are kept as described above. We still send essential account emails, such as email verification and password resets, and product-safety notices. News and tips emails are optional: you choose at sign-up, can turn them off at any time in Profile → Email preferences, and every one of them has an unsubscribe link. We honor an unsubscribe right away, and always within 10 business days. Turning them off does not stop emails about your account and your swaps. We never sell your email address or share it with others for their marketing.

Rights for every US member. Several states give residents privacy rights, and some of those laws do not yet apply to a company of our size. We offer these rights to all members, wherever they live: to know whether we process your personal information and to access it; to correct it; to delete it; to get a portable copy; and to opt out of sale, targeted advertising and profiling with significant effects (we do none of these). We will not treat you differently for using these rights.

California residents: the categories we collect (identifiers, contact information, commercial information, internet activity, coarse location by ZIP code, photos and other content, and inferences about product preferences), their sources, purposes, retention and recipients are described above. Account login credentials are sensitive personal information; we use them only to provide the Service. You may use an authorized agent; we may ask for proof of authority and verify your identity.

How to make a request: use the tools in your account or email privacy@swapmybeauty.com. We verify requests through your signed-in account or a code sent to your account email, and respond within 45 days (we may extend once by 45 days and will tell you why).

Appeals: if we decline your request, reply to our decision or email privacy@swapmybeauty.com with “Appeal” in the subject. We will respond within the time your state requires. If you are not satisfied, you may contact your state Attorney General.

11. Children

SwapMyBeauty is only for adults 18 and older. We do not knowingly collect information from anyone under 18; if we learn that we have, we close the account and delete the information. Contact privacy@swapmybeauty.com if you believe a minor has signed up.

12. United States only

The Service is offered only in the United States, and your information is processed and stored in the United States.

13. Changes to this policy

We post updates here with a new version and date. For a material change we will notify members by email and in the app before it takes effect. Latest update (October 26, 2026): we keep the questions members write to Mia, linked to their account, for 90 days (see “Mia, our AI assistant”); for members who joined earlier, from November 2, 2026, after notice by email.

14. Contact

TalentyGo LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA. Email: privacy@swapmybeauty.com. See also our Terms of Service.