Privacy policy

Called It Privacy Policy and United States State Privacy Notice

1. Scope and responsible business

This Policy explains how JBX Huddle LLC (JBX, Called It, we, us) collects, uses, discloses, and retains personal information through the Called It app, calledit.deals, the Called It Shopify storefront, accounts, deal discovery, purchases, support, and related operations.

JBX is the customer-facing business for Called It app/web information and Called It Store orders, subject to roles defined by applicable law and provider contracts. Shopify and some other providers may also act as independent businesses/controllers for their own services, such as Shop Pay, under their notices.

This launch is directed to adults in the United States. It is not directed to children under 18.

2. Information we collect

Depending on how you use Called It, we may collect:

Identity and contact: name, email, phone, shipping/billing address, account identifiers, authentication provider identifiers, and support contact.
Eligibility and membership: age confirmation, ZIP/state, application state, policy acceptances, standing, and optional social-profile information you submit.
Preferences: categories, watches, saved items, alert settings, quiet hours, and consent history.
Device and usage: IP address, browser/app/device type, operating system, timestamps, language, approximate location derived from IP, app/site interactions, diagnostics, crash/performance events, and security signals.
Deal and attribution: deal/page viewed, approved campaign/source/creator labels, share/referral activity, and handoff destination. We do not intentionally place account identifiers, payment data, or secret checkout material in attribution URLs.
Commerce: product, variant, price, cart, order, shipping address, delivery, tracking, cancellation, refund, return, warranty, support, fraud, and supplier-fulfillment events.
Payment: payment providers process card/account credentials. JBX receives transaction status, payment method type, risk signals, and identifiers needed to manage the order, but should not receive or store full payment-card numbers through the ordinary Shopify flow.
Communications: email, phone/voicemail, support requests, privacy requests, feedback, reviews, safety reports, and related attachments.
Supplier and business contact: supplier representatives, contracts, insurance, product evidence, compliance, order and incident communications.

Do not send unnecessary sensitive information in free-form support messages.

3. Sources

We collect information from you; your device/browser; authentication, app-platform, hosting, Shopify, payment, analytics, notification, email, support, fraud, and security providers; fulfillment suppliers and carriers; affiliate programs and external merchants; public product/seller sources; and lawful business partners. We may infer preferences, eligibility, risk, or deal relevance from collected information but do not use a solely automated decision to deny a legal right without the review required by law.

4. How we use information

We use information to:

create, authenticate, recover, secure, and administer accounts;
evaluate objective membership/eligibility rules and manage preferences;
operate deal discovery, watches, saved items, sharing, and notifications;
verify product/offer evidence and classify Called It Store versus affiliate routes;
create carts, process purchases, prevent fraud, fulfill, track, cancel, refund, return, and support Called It Store orders;
provide suppliers/carriers the minimum information needed for fulfillment, return, safety, fraud, or legal work;
preserve order, assent, tax, accounting, security, fraud, warranty, safety, recall, and dispute records;
diagnose errors, protect systems/users, enforce terms, and prevent abuse;
measure permitted campaign/affiliate performance and service quality;
respond to support, privacy, legal, and regulator requests;
comply with law and protect rights, property, health, and safety; and
improve features using aggregated, deidentified, or appropriately controlled information.

We do not use order information to authorize supplier marketing to the customer. Suppliers are contractually restricted from independent marketing, audience building, resale, or unrelated profiling with Called It order data.

5. Legal/operational bases

US law does not use one universal list of processing bases. Depending on the context, we process information to perform a requested transaction, operate an account/service, obtain consent, satisfy a legal obligation, protect security/safety, prevent fraud, and pursue legitimate business purposes that applicable law permits. Where consent is required, it must be specific and can be withdrawn prospectively subject to necessary service/legal processing.

6. How we disclose information

We may disclose relevant information to:

Shopify and payment providers for storefront, account, cart, checkout, payment, fraud, order, refund, and related services;
approved suppliers and carriers for acceptance, fulfillment, delivery, tracking, return, warranty, safety, recall, and order support;
authentication, hosting, database, security, email, push, analytics, support, and development providers under contracts and instructions appropriate to their role;
Amazon, eBay, and affiliate/attribution providers when you interact with an affiliate route, subject to the destination disclosure and program terms;
professional advisers, insurers, auditors, banks, and financing/payment partners as needed for legitimate business/legal functions;
government, courts, regulators, law enforcement, or other persons when reasonably required by law, legal process, safety, or protection of rights; and
transaction counterparties in a merger, financing, asset sale, reorganization, or similar transaction, subject to confidentiality and applicable notice/choice duties.

We do not disclose more order information to a supplier than reasonably needed for the supplier's contracted function.

7. Sale, sharing, targeted advertising, and affiliate links

JBX does not sell personal information for money. Some state laws define sale, sharing, or targeted advertising more broadly than an exchange for money. If Called It activates a practice covered by those definitions, we will provide the required notice and opt-out mechanism before or with that practice.

At launch, optional Meta, TikTok, and comparable advertising pixels remain disabled unless separately approved. Essential commerce/security and limited service analytics are not described as targeted advertising merely because they involve a provider.

Affiliate links can transmit ordinary request/device data and approved attribution parameters to the external destination. The product action discloses the paid relationship before you leave Called It. The external marketplace/seller's privacy notice applies after the handoff.

8. Cookies and similar technologies

We use essential/security, functional, analytics/performance, and—only when approved—advertising/affiliate measurement technologies as described in the Cookies, Similar Technologies, and Privacy Choices Notice. Shopify and other providers may set technologies for their services.

Where applicable law requires it, we honor a recognized Global Privacy Control or universal opt-out signal as a request to opt out of covered sale, sharing, or targeted-advertising processing for that browser/device. Official reference points include California GPC guidance and Colorado universal opt-out guidance.

9. Push, email, and no launch SMS

Transactional account, order, refund, return, security, and safety messages are sent as needed to provide the service or comply with law. Promotional email and push alerts are optional; available settings and unsubscribe controls apply prospectively.

No launch SMS marketing is authorized. Collecting a phone number for account security, delivery, or support does not by itself create marketing consent. A future SMS program requires a separate consent and compliance flow.

10. Data retention

We retain information only as reasonably needed for the stated purpose, including active account/service operation and legal, tax, accounting, order, payment, refund, fraud, security, safety/recall, warranty, dispute, and enforcement obligations.

Retention periods depend on record type, relationship duration, limitation periods, legal holds, provider behavior, risk, and deletion feasibility. We delete or deidentify information when it is no longer reasonably needed, subject to backups and records we must or may lawfully retain. A deletion request does not require deletion of information needed for an active order, refund, safety recall, fraud defense, tax record, legal claim, or another exception.

JBX maintains a current internal data inventory and retention schedule identifying production systems/providers and operational durations. This public Policy does not invent a precise retention period that the implemented systems or applicable record obligations cannot meet.

11. Security

We use administrative, technical, and organizational measures designed for the sensitivity and risk of the information, such as access controls, authentication, encryption in transit, secret isolation, logging, least privilege, monitoring, provider review, and incident response. No system is perfectly secure. Protect your account and contact us if you suspect unauthorized access.

12. Your choices

Depending on the feature, you may:

update account, preference, watch, quiet-hour, email, and push settings;
unsubscribe from promotional email;
disable push through device settings;
use cookie/privacy controls where offered;
use a recognized GPC/universal opt-out signal where applicable;
request access, correction, deletion, or portability; and
appeal a denied state privacy request where applicable.

Turning off a preference does not prevent necessary transactional, security, or safety processing.

13. United States state privacy rights

Residents of states with applicable comprehensive privacy laws may have rights to know/access, correct, delete, and obtain a portable copy of covered personal information; opt out of covered sale, sharing, targeted advertising, or qualifying profiling; limit certain sensitive-data uses; receive nondiscriminatory service; use an authorized agent; and appeal a denied request. Rights, exceptions, verification, response times, and applicability vary by state and business thresholds.

Texas's Consumer Data Protection law, California's privacy laws, Colorado's Privacy Act, and other state laws may apply depending on facts and thresholds. This notice offers a common request channel without representing that every statute applies to every person or processing activity.

Submit a request through available account controls or:

Email jbxhuddle@gmail.com with subject Privacy Request;
Phone 281-305-9305; or
Mail JBX Huddle LLC, 28344 Woodsons Forest Dr, Spring, TX 77386, United States.

Describe the request and the state of residence. We will verify identity using information appropriate to the request's risk. An authorized agent must provide authority and may need to support identity verification. We will not discriminate for exercising a right, although deleting data may prevent a feature that needs it.

If we deny a request, the response will explain the basis and any applicable appeal method. Appeal by replying with subject Privacy Appeal. If an appeal is denied, the response will identify any regulator-contact option required by applicable law.

14. Children

The Services are not directed to children under 18, and JBX does not knowingly collect personal information from a child for a Called It account. If you believe a child submitted information, contact us so we can investigate and take appropriate action.

15. Deidentified and aggregated information

We may use information that is aggregated or deidentified so it is not reasonably linkable to an individual. Where law requires, we maintain it in deidentified form, use reasonable measures to prevent reidentification, and do not attempt to reidentify it except to test protections or as law permits.

16. External services

The Privacy Policy of an external Amazon/eBay seller applies after an affiliate handoff. App stores, authentication providers, Shopify/Shop Pay, payment providers, carriers, manufacturers, and other independent services may process information under their own notices. Review them before using those services.

17. Changes

We may update this Policy prospectively as systems, providers, law, or practices change. The current version and effective date will appear at the top. We will provide additional notice or obtain consent when applicable law requires it. The published Policy must match the actual production data inventory; a code/provider change that affects this notice is a privacy release gate.