Privacy Policy — Saclyn

1. Overview

Saclyn (“Saclyn,” “we,” “us”) respects your privacy. This policy explains what personal information we collect when you visit our site, join our waitlist, chat with Margaux, or become a member, how we use it, and the choices you have.

By using Saclyn you agree to the practices described here. If you do not agree, please do not use the service.

2. Information we collect

We collect the following categories of information:

Contact details you provide — such as your email address and phone number when you join the waitlist or mailing list, or your name and account details when you register.
Style and taste inputs — preferences you share with our stylist, Margaux, and details you add to your profile so we can personalize recommendations.
Device, IP address, and approximate location — when you visit the site or interact with Margaux, we record your IP address and the approximate location (city, region, country) derived from it, along with your browser user agent. We use this to keep the service secure, prevent abuse, understand where our audience is, and improve the experience.
Usage and analytics — how you move through the closet, dashboard, and checkout, captured through cookies and analytics tools. Session replays mask sensitive fields and payment surfaces.
Transaction and membership data — rentals, billing status, and related activity when you are a member. Payment card details are handled by our payment processor and are never stored on our servers.
Identity verification — before a first bag ships, we may ask you to complete an ID check with a photo of your government ID and a selfie. Our provider, Stripe, collects these; we receive only the result. See Identity verification below.
Background identity check — when you apply, we send your name, date of birth, address, phone number, email address, and IP address to our identity verification and fraud prevention provider, Socure, Inc., and send a one-time code by text message to your phone number. On the application pages Socure also collects device and interaction information. See Identity verification below.

3. How we use your information

To operate the service — process membership, rentals, billing, and returns.
To personalize recommendations through Margaux and your Style DNA.
To communicate with you about your account, the waitlist, and (where permitted) updates and offers.
To keep Saclyn secure, prevent fraud and abuse, and enforce rate limits.
To understand and improve how the site is used, in aggregate.

4. Cookies and analytics

We use essential cookies that are required for sign-in and checkout, and, with your consent, analytics cookies that help us understand how members use Saclyn. You are asked for consent to analytics cookies the first time you visit; you can decline, and essential cookies will still function.

Analytics data — including anonymized usage and masked session replays — is used to improve our flows. It is never sold.

We do not sell your personal information. We share it only with:

Service providers that operate Saclyn on our behalf — for example payment processing, hosting, email delivery, authentication, and analytics — bound to protect your data.
Stripe, Inc., our identity verification provider, which collects and processes your ID images and selfie when you complete an ID check (see Identity verification below).
Socure, Inc., our identity verification and fraud prevention provider, which receives the details you give on your application and the device information described below (see Identity verification below).
Authorities or others when required by law, or to protect the rights, safety, and property of Saclyn, our members, or the public.

6. Identity verification

Before the first order that ships a bag to you, and at other times when we reasonably need to confirm who you are, we may ask you to complete a short ID check. It is run by our service provider, Stripe, Inc. (“Stripe”), through Stripe Identity.

What is collected. Stripe collects photos of your government-issued photo ID and a live photo of your face (a selfie), and compares your face with the photo on the ID. The facial geometry used for that comparison may be considered biometric information under the laws of some states. Stripe asks for your consent before the check begins.
What Saclyn keeps. We do not store your ID images, your selfie, or any biometric information on our systems. They are held by Stripe, and authorized Saclyn staff can view them in Stripe only when reviewing a check. When a check passes, Stripe tells us the details it verified; we keep only your name. We keep the result of the check (for example verified, or a retry was needed and why), the name shown on your ID and whether it matches your account, the number of attempts, and when the check was requested and completed.
Why. Only to confirm your identity before we send you a bag and to prevent fraud. We do not use it for marketing and do not sell it.
How long. Stripe keeps the images and verification data under its own privacy policy and retention practices, which you can read at stripe.com/privacy. We keep the result for as long as your account is active and afterward only as long as needed for legal or fraud-prevention purposes.
Deletion. You can ask us at any time to delete your verification data. We will delete the result we hold and ask Stripe to delete the images and verification data it holds for us, unless we must keep it to meet a legal obligation.

Background identity check. When you apply, we also run a background identity check through our service provider, Socure, Inc. (“Socure”), to verify identity and prevent fraud.

What is sent. Your name, date of birth, address, phone number, email address, and IP address. Socure returns a risk score and related signals about whether the details belong together.
One-time code. We may send a one-time code by text message to the phone number you gave, and ask you to enter it, to confirm the number is yours. Message and data rates may apply.
Device check. On the application pages, Socure’s script (Socure Digital Intelligence) collects device and interaction information — such as device characteristics, the approximate location derived from your IP address, and how the form is filled in — and sends it to Socure for fraud prevention.
Why. The results are used only to verify your identity and prevent fraud. We do not use them for marketing and do not sell them. Socure handles the information under its own privacy policy.

7. Data retention

We keep your information for as long as your account or waitlist entry is active, and afterward only as long as needed to meet legal, accounting, or legitimate business requirements. Aggregated and anonymized data may be kept longer.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise any of these rights, or to unsubscribe from marketing, contact us at team@saclyn.com.

You can decline analytics cookies via the consent banner, and manage cookies through your browser settings.

9. Security

We use administrative, technical, and physical safeguards to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and to limit access to those who need it.

10. Children

Saclyn is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated where appropriate.

12. Contact us

Questions about this policy or your data? Email us at team@saclyn.com.