Restock — Privacy Policy

Effective date: July 31, 2026 · Last updated: July 31, 2026

This Privacy Policy explains how Restock US LLC d/b/a "Restock" ("we," "us," "our") collects, uses, discloses, and protects personal information when you use usrestock.com, our apps, and related services (the "Service"). By using the Service you agree to this Policy.

1. Information we collect

We collect the following categories of personal information:

• Identifiers & account data: name, email, password (hashed), and account settings.
• Location & address: the home/shopping address and radius you provide; and, precise geolocation from your device only with your consent when you use location-based features (for example, verifying you are at a store). Precise geolocation is treated as sensitive personal information.
• Commercial & household data: your pantry/inventory, shopping lists, meal choices, purchases, order history, and consumption patterns; prices, receipts, and deals you submit.
• Images: photos you upload (for example, fridge, shelf-tag, and receipt scans) and information extracted from them by optical character recognition (OCR).
• Payment information: processed by Stripe; we receive limited billing details (for example, the last four digits and status) but not your full card number.
• Usage & device data: app/site interactions, device and browser type, IP address, and similar technical data, collected via cookies and similar technologies (see our Cookie Notice).
• Communications & preferences: your messages to us and your notification/marketing choices.
• Inferences: preferences and predictions we derive from the above (for example, likely re-purchase timing).

We collect this information from you directly, automatically as you use the Service, and from third parties such as stores, data providers, mapping/geolocation providers, and payment processors.

2. How we use information

We use personal information to: provide and operate the Service (meal decisions, pantry tracking, price comparison, community deals, shopping/delivery); process subscriptions and payments; personalize recommendations and alerts you request; verify community submissions and prevent fraud, abuse, and bot activity; provide support; send service/transactional messages and, with your opt-in, marketing; maintain security; comply with law; and, only with the consents described below, produce de-identified/aggregated analytics and market-trend products.

We use sensitive personal information (such as precise geolocation) only for the purposes permitted by law and to provide the features you request, and we offer the right to limit such use where applicable.

3. How we disclose information

We disclose personal information to: service providers/processors who work for us (hosting, payments, OCR, email/SMS, analytics, mapping) under contracts limiting their use; stores and delivery partners as needed to fulfill a shopping or delivery action you take; other users, but only your chosen public community contributions (for example, a deal you post) — never your private pantry, lists, consumption history, or account data; authorities or others when required by law or to protect rights and safety; and a successor in a merger, financing, or asset sale. We do not disclose your private household data to the community.

4. "Sale" and "sharing" of personal information; de-identified data

Our data-products vertical is designed to use de-identified, aggregated information that is not personal information — for example, region-level price and basket trends that meet a minimum group-size threshold and cannot reasonably be linked to you. We commit not to attempt to re-identify de-identified data and to require the same of recipients by contract.

Some activities (for example, certain analytics or advertising technologies, or any future data-product that could be considered a "sale" or "share" under state law) may be treated as a "sale" or "sharing" of personal information under California and other state laws. You have the right to opt out. You can exercise it on our "Do Not Sell or Share My Personal Information" page, and we honor the Global Privacy Control (GPC) browser signal as a valid opt-out. We do not "sell" or "share" the personal information of anyone we know to be under 18. [Confirm final "sell/share" status and disclosures with counsel before enabling any data-product export.]

5. Your privacy rights

Depending on your state of residence, you may have the right to: know/access the personal information we hold about you; delete it; correct it; opt out of sale/sharing and of targeted advertising; limit the use of sensitive personal information; obtain a portable copy; and be free from discrimination for exercising your rights. Where required, you may also appeal a denied request.

How to exercise your rights. Submit a request through our Do Not Sell or Share page at usrestock.com/do-not-sell or email privacy@usrestock.com. Because we operate online, we handle requests through your account and these channels. We will verify your identity (typically via your account) before responding, and will respond within the timeframes required by law (generally 45 days, extendable). An authorized agent may submit a request with proof of authorization.

6. Retention

We keep personal information for as long as your account is active and as needed for the purposes described here, then delete or de-identify it, subject to legal, accounting, security, and dispute-resolution needs. Raw images and OCR source data are retained only as long as needed for the feature and quality assurance, then minimized.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information. Family plan members aged 13–17 are added and supervised by the adult account holder; we limit their data use accordingly and exclude them from any data-product/sale activity. If you believe a child under 13 has provided us information, contact privacy@usrestock.com and we will delete it.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information (including encryption in transit, hashed passwords, access controls, bot protection, and metered/limited access to costly operations). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your choices

You can update account and address information, manage notification and marketing preferences (including opting out of marketing email and SMS), manage location permissions in your device settings, and use the "Do Not Sell or Share" page and GPC. See also our Cookie Notice for cookie controls.

10. Other states / international

This Policy addresses U.S. state privacy laws. The Service is intended for users in the United States; we do not target it to the EU/EEA or UK. [If you accept users abroad, add GDPR/UK-GDPR terms after counsel review.]

11. Changes to this Policy

We may update this Policy. Material changes will be notified (for example, by email or in-app), and where required we will ask you to re-acknowledge. The "Effective date" reflects the current version.

12. Contact us

Restock US LLC — Privacy, 1712 Pioneer Avenue, Suite 101, Cheyenne, WY 82001 · privacy@usrestock.com

State-specific rights addendum (summary — confirm and expand with counsel)

• California (CCPA/CPRA): rights to know, delete, correct, opt out of sale/sharing, and limit sensitive personal information; non-discrimination; authorized agents; we honor GPC. See also our Notice at Collection.
• Virginia, Colorado, Connecticut, Oregon, Texas, Montana, and other states with comprehensive laws: rights to access, correct, delete, port, and opt out of targeted advertising, sale, and certain profiling; consent for sensitive data; and, in several states, an appeal right. Submit requests through the same channels above.
• Maintain a current per-state matrix (rights, cure periods, sensitive-data definitions, universal-opt-out recognition) in config/legal.php and review it as laws change.