The

Handoff

Luxury. Simplified.

Privacy Policy

Effective date: February 26, 2026

1. Introduction

The Handoffs ("we," "our," or "us") operates a luxury handbag rental membership service through our mobile application and website (collectively, the "Service"). This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information.

By creating an account or using the Service, you agree to the collection and use of information as described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect your email address, phone number, and the password you choose (stored in hashed form — we never see your plain-text password).

Profile & Shipping Information

To ship bags to and from you, we collect your full name, street address, city, state, ZIP code, and optionally a phone number for shipping carrier use.

Payment Information

Payments are processed by Stripe. We do not store your credit card number, CVV, or full card details on our servers. Stripe may store payment method information on your behalf in accordance with their own privacy policy.

Bag Contribution Information

If you contribute a bag to the rental pool, we collect details about the bag (brand, model, condition, photos) and a pickup shipping address.

Usage Information

We collect information about how you interact with the Service, including rental history, credit transactions, and wishlist activity.

Device & Push Notification Tokens

If you grant permission, we collect your device's push notification token to send you updates about your rentals and account activity. This is optional and can be revoked in your device settings at any time.

3. How We Use Your Information

  • To create and manage your account
  • To verify your identity via SMS one-time passcode (phone number verification)
  • To process rental requests, shipments, and returns
  • To charge your payment method for your membership subscription
  • To calculate and award rental credits to bag owners
  • To send you transactional emails and push notifications about your rentals and account
  • To generate prepaid shipping labels for bag transport
  • To notify you when a saved bag becomes available
  • To improve and operate the Service

4. Third-Party Services

We share data with the following third-party providers only as necessary to operate the Service:

Supabase

Database, authentication, and file storage. Your account data, bag photos, and transaction records are stored on Supabase infrastructure.

Stripe

Payment processing for membership subscriptions. Stripe handles all credit card data and is PCI DSS compliant.

Twilio

SMS delivery for phone number verification (one-time passcodes) during sign-up and password reset.

Resend

Transactional email delivery (shipping notifications, credit summaries, action alerts).

EasyPost

Shipping label generation and package tracking. We share name and address information with EasyPost to create prepaid labels.

Expo

Mobile app hosting and push notification delivery for iOS and Android devices.

We do not sell your personal information to third parties. We do not share your data with advertisers or data brokers.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you request account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain records for legal or financial compliance purposes (e.g., billing records required by tax law).

6. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate information via your profile settings
  • Delete your account and associated personal data
  • Opt out of push notifications at any time in your device settings
  • Port your data in a machine-readable format upon request

To exercise any of these rights, contact us at hello@thehandoffs.com.

7. Security

We use industry-standard security practices including encrypted connections (HTTPS), hashed passwords, and row-level security on our database. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security of your data.

8. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice in the app. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

© 2026 The Handoffs. All rights reserved.