SheRecs Privacy Policy

Effective Date: July 30, 2026  |  Last Updated: April 28, 2026

This Privacy Policy explains how SheRecs LLC (“SheRecs”, “we”, “us”, or “our”) collects, uses, stores, protects, and shares personal information when you use SheRecs and its related services (the “Services”). SheRecs is a private, community-based platform that enables members to share and discover trusted recommendations for service providers within their personal networks. Please read this policy in its entirety before using the Services.

For purposes of this Privacy Policy, “Services” has the same meaning as set forth in our Terms of Service: the SheRecs application and any related websites, features, content, and support services, whether accessed via mobile, web, or other internet-enabled devices, as well as related interactions including customer support, surveys, and email communications.

At a Glance

• We care about privacy. SheRecs is built to facilitate trusted recommendations within private networks. Protecting your information is fundamental to what we do.
• We do not sell your personal information. We have not sold and do not sell members’ personal information. If we introduce paid features, our business model will not depend on selling your data.
• We collect only what we need. We limit information collection to what is necessary to operate the Services, enable recommendations, and support our community.
• We give you control. We provide tools and settings that allow you to manage your profile, recommendations, and how your information is shared.
• Service providers have rights too. If you are a service provider who has been recommended on SheRecs, you have the right to manage or remove your information. See Section 5 below.

1. Children’s Privacy and Age Requirements

SheRecs is intended solely for individuals who are at least 18 years of age. We do not knowingly collect, use, or maintain personal information from individuals under 18, nor do we permit minors to create accounts or use the Services. If we become aware that a minor has created an account or provided personal information through the Services, we will promptly delete that information and terminate the associated account.

SheRecs is also designed to facilitate recommendations of adult service providers. Members should not submit or share information about individuals under 18 in connection with service provider recommendations. We do not knowingly collect or maintain personal information relating to service providers who are under 18.

If you believe a minor has provided personal information to SheRecs or has been included as a recommended service provider, please contact us at contact@sherecs.com so we can take appropriate action. By accessing or using the Services, you represent and warrant that you are at least 18 years of age.

2. Information We Collect

We collect information in three ways: (i) information you provide directly to us; (ii) information we collect automatically; and (iii) information we receive from other sources.

2.1 Information You Provide

Account and Profile Information. When you create a SheRecs account, you provide information necessary to establish and maintain your profile. This includes your first and last name, email address, city, state, and zip code, and a profile photo. You may also provide optional biographical details or preferences. We may request additional information to verify your account or enable certain features.

Content You Create. This includes any content you submit, upload, or make available through the Services, including RecCards, messages, comments, and responses to community features such as HotRecs, GetToKnowHer, and OnHerMind. RecCards may include service provider details, your rating or assessment of a provider, and personal notes about your experience.

Actions You Take. We collect information about your use of and activities on the Services, including connections you establish, invitations you send or receive, recommendations you create or engage with, and your interactions with platform features.

Optional Features. Certain features may require additional information or access to function properly, such as contact syncing or third-party integrations you choose to authorize. We collect and use this information solely to provide the relevant functionality.

Other Direct Communications. You may provide additional information when you complete surveys, submit feedback, contact us, or communicate through email or other channels. Please reach out to us at contact@sherecs.com for any questions.

2.2 Service Provider Information

This section describes a distinctive feature of SheRecs: members submit information about third-party service providers who are not SheRecs members. This information is handled with care and subject to the protections described here and in Section 5 below.

When members submit RecCards, they may provide personal information about recommended service providers, including business or personal name, phone number, email address, social media handle, website, and location (“Provider Information”). Provider Information is submitted by members from their own prior professional or service relationships with those providers.

Provider Information may include information about sole proprietors and informal service providers (such as babysitters, housekeepers, or home-based service providers) as well as formally organized businesses. Depending on the nature of the provider, this may include both business-related details and personal information belonging to identifiable individuals.

Members are responsible for ensuring that Provider Information they submit is accurate, was shared with them in the context of a professional or service relationship, and that they have a good-faith basis to share it. Please see Section 3.3 of our Terms of Service for the full RecCard submission standards.

2.3 Information We Collect Automatically

We collect certain information automatically when you use the Services to help us operate, maintain, and improve them.

Device Information. We collect your IP address, browser type, operating system, device type, and certain device settings.

Usage Information. We collect log and usage data related to how and when you interact with the Services, including access times, pages or features viewed, and actions taken within the platform.

Cookies and Similar Technologies. We use cookies and similar tracking technologies to operate the Services, understand usage patterns, and improve your experience. See Section 8.6 for details on how to manage cookies.

The Services use the following types of cookies:

• Strictly Necessary Cookies. Required for the Services to function.
• Functional Cookies. Enable enhanced features and personalization, such as remembering your preferences.
• Performance and Analytics Cookies. Help us understand how members engage with the Services to improve functionality. We may use third-party analytics providers in connection with these cookies.

2.4 Information from Other Sources

We may receive information about you from other users and third parties and combine it with information we collect directly. For example, if another member invites you to join SheRecs, we may receive your name or contact details from that member. If you interact with SheRecs through social media, we may receive limited profile information from those services.

3. How We Use Your Information

We use your information for the following purposes:

3.1 To Provide and Operate the Services

Account and Platform Operations. To create and maintain your account, enable recommendation sharing and discovery, facilitate connections, and support core functionality including messaging, search, and content sharing.

Community Features. To enable participation in platform features including HotRecs, GetToKnowHer, OnHerMind, and other interactive community experiences.

Personalization. To surface relevant recommendations, connections, and content based on your activity, preferences, and network.

Communications. To send service-related communications including account verification, password resets, account status updates, and policy change notices, as well as optional product updates subject to your preferences.

Customer Support. To respond to inquiries, provide technical assistance, and resolve issues.

3.2 Recommendation Sharing and Privacy Architecture

A central function of SheRecs is the controlled sharing of recommendations within trusted networks. We use your information, including your RecCards, network connections, and privacy settings, to determine how and with whom your content is shared:

• Direct Friends. By default, RecCards are shared with your name when they match what one of your direct friends is searching for. You can choose not to share your name with your friends.
• Neighbors and Friends-of-Friends. By default, RecCards may be shared without your name (anonymized) when they match what a neighbor or friend-of-a-friend is searching for. You can choose to share your name more widely.
• Public Content. Certain optional content — such as HotRec responses — is shared more broadly.

You can customize these settings in your RecCards and in settings.

3.3 Service Provider Information Uses

Provider Information submitted by members through RecCards is used for the following purposes:

• Operating the Platform. Provider Information is stored securely and is initially accessible only to the member who submitted it. It supports the core recommendation function of the Services.
• Provider Introductory Process. When a RecCard becomes eligible for broader sharing within the community, SheRecs may use Provider Information to reach out to the provider to introduce SheRecs and offer the provider the opportunity to manage how their information appears on the platform.
• Listing Management. We may use Provider Information to support the manage-my-listing mechanism through which providers can update, claim, or request removal of their information.
• Platform Improvement. We may use Provider Information in aggregate or de-identified form to improve the relevance and quality of recommendations.

We will not use Provider Information to contact service providers for marketing or sales purposes unrelated to the SheRecs platform, and will not sell or share Provider Information with third parties for their own independent purposes.

3.4 Safety, Security, and Integrity

Fraud and Abuse Prevention. To detect, prevent, and address fraud, spam, abuse, and other activity that may violate our Terms of Service or Community Guidelines.

Policy Enforcement. To investigate potential violations, respond to reports, and maintain a safe and trusted environment.

Platform Reliability. To support the accuracy and reliability of recommendations and the overall quality of the member experience.

3.5 Improvement and Development

Performance Analysis. To analyze how members interact with the Services, identify trends, and improve functionality and design.

New Features. To develop new tools, features, and offerings, including improvements to recommendation quality and community engagement.

Measurement. To assess the effectiveness of product features, communications, and outreach efforts.

3.6 Legal Compliance

We retain and use information as necessary to comply with applicable laws, regulations, and legal processes, including responding to lawful requests from courts, regulators, or law enforcement, and maintaining records for compliance, auditing, and dispute resolution purposes.

3.7 With Your Consent

We may collect, use, or share your information for additional purposes with your prior consent. You may withdraw your consent at any time, although doing so may affect your ability to use certain features.

4. How We Share Your Information

We share your information in the following circumstances. We do not sell your personal information and do not share it with third parties for their own independent marketing purposes.

4.1 With Other Members Based on Settings

When you create a profile, share recommendations, or otherwise engage with the Services, you direct us to share that information with other members in accordance with your network connections and privacy settings. Your profile information and recommendations may be visible to your friends and, in certain cases, to extended network members (such as neighbors or friends-of-friends), depending on the Services’ design and your configuration. You can manage these preferences as described in Section 8 below.

4.2 Service Provider Information Sharing

Provider Information submitted as part of a RecCard is shared with other members only after the provider introductory process described in Section 3.3 has been completed. Contact information for recommended providers is not made available to other members until that process is complete. Provider Information is never shared with third parties for their own independent purposes.

If a provider requests removal of their information through the manage-my-listing mechanism, SheRecs will honor that request and remove the provider’s information from active member-facing systems, subject to the data retention practices described in Section 6.

4.3 With Service Providers and Vendors

We share information with third-party vendors and service providers that perform services on our behalf, including hosting, data storage, analytics, customer support, and payment processing. These parties are authorized to use your information only as necessary to provide services to us and are subject to appropriate data processing and confidentiality obligations.

4.4 For Legal Compliance

We may share information in response to a lawful legal request, court order, or government demand, including for national security or law enforcement purposes, where we believe disclosure is required or permitted by applicable law. Where legally permitted and feasible, we will notify you before disclosing your information.

4.5 In Emergencies

We may share information where we believe it is necessary to protect the vital interests or safety of any person, including to prevent serious harm.

4.6 To Protect Rights and the Services

We may share information to enforce our Terms of Service, Community Guidelines, and other policies, and to protect the rights, property, and safety of SheRecs, our members, and others, including detecting and addressing fraud and abuse.

4.7 With Affiliates

We may share information with our affiliates, subsidiaries, and entities under common ownership or control for purposes consistent with this Privacy Policy.

4.8 In Business Transactions

We may share or transfer information in connection with, or during negotiations of, any merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or other business transaction involving all or a portion of SheRecs. If such a transaction occurs, we will provide notice and, where required, seek your consent.

4.9 Aggregated or De-identified Data

We may share information that has been aggregated or de-identified such that it cannot reasonably be used to identify you, for example to describe platform usage trends or improve the Services.

5. Service Providers: Your Information and Your Rights

This section is written for service providers, individuals or businesses who have been recommended on SheRecs by a member but who are not themselves SheRecs members.

5.1 What Information We May Hold About You

When a SheRecs member submits a RecCard recommending your services, they may provide your name, business name, phone number, email address, social media handle, website, and a description of their experience with you. This information is submitted by the member, not collected directly from you.

5.2 How That Information Is Used

Provider Information is initially fully accessible only to the member who submitted it. Before your phone number and email become visible to other members, SheRecs provides a brief introductory period during which: (i) the recommending member is asked to notify you that your name has been shared on SheRecs; and (ii) SheRecs may reach out to you directly to introduce the platform and give you the opportunity to manage how your information appears.

5.3 Your Rights as a Service Provider

You have the right to request access to, correction of, or removal of your information from SheRecs at any time. To exercise these rights, please visit sherecs.com/providers or contact us at providers@sherecs.com. We will respond to all requests promptly and in accordance with applicable law.

If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information we hold about you, the right to delete it, and the right to correct inaccuracies. These rights apply to you as a data subject regardless of whether you are a SheRecs member.

5.4 Opting In to Enhanced Profile Features

As SheRecs develops, we may offer service providers the ability to create a verified or enhanced profile on the platform, making it easier for members to find and contact them. Any such feature will be entirely opt-in, and we will provide clear information about what participation involves before you agree.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to provide and operate the Services, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements. The following retention principles apply:

• Active Accounts. We retain your information for the duration of your account’s activity.
• Inactive Accounts. If your account remains inactive for approximately two years, we may deactivate or delete the account and delete or anonymize associated personal information, subject to applicable legal and operational requirements.
• Account Deletion. If you delete your account, your profile information, RecCards, and associated data will be removed from our active systems. Deletion may take up to approximately two weeks to fully process. Limited information may be retained in backup systems or as required for legal, regulatory, or technical purposes. Content you have shared with other members, such as messages, may remain visible to recipients as part of their ongoing use of the Services.
• RecCard Deletion. If you delete individual RecCards, they will be removed from your profile and will no longer appear in search results, subject to routine system processing.
• Provider Information Removal. If a service provider requests removal of their information, we will process that request and remove the information from active member-facing systems, subject to applicable retention requirements.
• Age Verification Documents. If you submit identification documents in connection with an age verification process, we will delete such documents within 60 days of the applicable process closing.
• Legal Holds. We may retain information for longer periods as required by law, to respond to legal process, or to protect our rights in the event of a dispute.

7. How We Protect Your Information

We implement reasonable and appropriate administrative, technical, and organizational measures designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include encryption of information in transit and at rest, access controls that restrict access to personal information to authorized personnel, and periodic review and updating of our security practices.

No method of transmission over the internet or method of electronic storage is entirely secure, and we cannot guarantee absolute security. You also play an important role in protecting your information. We encourage you to use a strong password, enable available security features such as two-factor authentication, and keep your account credentials confidential.

7.1 Security Incident Notification

In the event of a data breach or security incident that affects your personal information and requires notification under applicable law, SheRecs will provide notice in accordance with applicable legal requirements, including notifying affected individuals and relevant regulatory authorities within required timeframes. You can also report security vulnerabilities to us at tech@sherecs.com.

8. Your Rights and Choices

SheRecs provides you with tools and settings to manage your personal information. Depending on your location, you may also have additional rights under applicable law.

8.1 Access, Update, and Correction

You may access, review, and update your profile information, RecCards, and certain account settings at any time through your account. You may also request access to the personal information we hold about you.

8.2 Privacy and Visibility Controls

You may control how your information is shared within the Services through your privacy settings, including which recommendations are visible to friends only, which are shared more broadly, and whether you participate in certain community features.

8.3 Account and Content Deletion

You may delete individual RecCards or your entire account at any time through your account settings. Please see Section 6 for information on how deletion is processed and what may be retained.

8.4 Communication Preferences

You may manage preferences for non-essential communications through your account settings or by following unsubscribe instructions. We will continue to send essential service-related communications as necessary to operate the Services.

8.5 Data Portability

You may request a copy of your personal information in a commonly used electronic format by contacting us at contact@sherecs.com. We will respond in accordance with applicable law and after verifying your identity.

8.6 Cookies and Similar Technologies

You may control how cookies and similar technologies are used through your browser settings. Most browsers allow you to manage or disable cookies; however, doing so may affect the functionality of certain features. You may also manage cookie preferences through a cookie banner or settings available on our website, where applicable.

8.7 Global Privacy Control and Opt-Out Signals

SheRecs recognizes and honors Global Privacy Control (GPC) signals and other universal opt-out signals as legally required by applicable state privacy laws, including the California Consumer Privacy Act (CCPA/CPRA). If your browser or device transmits a GPC or similar opt-out signal when you visit our Site, we will treat that signal as a valid request to opt out of the sale or sharing of your personal information, as those terms are defined under applicable law.

Because SheRecs does not currently sell or share personal information for cross-context behavioral advertising purposes, GPC signals will generally be honored automatically and will not materially change how we process your information at this time. If our data practices change in the future in a way that would implicate these opt-out rights, we will update this section accordingly and ensure our systems recognize and display confirmation of honored opt-out signals as required by California regulations effective January 1, 2026.

9. State-Specific Privacy Rights

Depending on your place of residence, you may have specific rights under applicable state privacy laws. This section describes those rights by jurisdiction. Nothing in this section limits any rights you may have under applicable law.

9.1 California Residents (CCPA/CPRA)

If you are a California resident, you may have the following rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”):

• Right to Know. The right to know the categories and specific pieces of personal information we collect about you, the sources and purposes of collection, and the categories of third parties to whom we disclose it.
• Right to Delete. The right to request deletion of personal information we have collected from you, subject to applicable exceptions.
• Right to Correct. The right to request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing. The right to opt out of the “sale” or “sharing” of personal information as defined under California law. SheRecs does not sell personal information and does not share it for cross-context behavioral advertising. We will honor GPC signals as described in Section 8.7.
• Right to Limit Sensitive Personal Information. To the extent SheRecs collects “sensitive personal information” as defined under the CCPA, you have the right to limit its use to purposes permitted by law. SheRecs does not intentionally collect sensitive personal information as defined under the CCPA.
• Right to Non-Discrimination. The right not to receive discriminatory treatment for exercising your CCPA rights.

The following table summarizes the categories of personal information we collect, consistent with CCPA disclosure requirements:

9.2 Virginia Residents (VCDPA)

If you are a Virginia resident, you may have the following rights under the Virginia Consumer Data Protection Act:

• The right to confirm whether we process your personal data and to access that data.
• The right to correct inaccuracies in your personal data.
• The right to delete personal data you have provided to us or that we have collected about you.
• The right to obtain a portable copy of certain personal data in a usable format.
• The right to opt out of the processing of personal data for targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

SheRecs will respond to verified Virginia consumer requests within 45 days. If we need additional time (up to an additional 45 days), we will notify you of the extension within the initial 45-day period.

9.3 Delaware Residents (DPDPA)

If you are a Delaware resident, you may have the following rights under the Delaware Personal Data Privacy Act:

• The right to confirm whether we process your personal data and to access that data.
• The right to correct inaccuracies.
• The right to delete personal data.
• The right to obtain a portable copy of certain personal data.
• The right to opt out of targeted advertising, data sales, and profiling for consequential decisions.
• The right, in certain circumstances, to receive information about categories of third parties to whom personal data has been disclosed.

SheRecs will respond to verified Delaware consumer requests within 45 days, with up to an additional 45-day extension where reasonably necessary.

9.4 Residents of Other States

Residents of other U.S. states, including but not limited to Colorado, Connecticut, Texas, Montana, Oregon, New Hampshire, New Jersey, and Nebraska, may have similar rights under applicable state privacy laws. As SheRecs’s geographic reach expands and additional state privacy laws take effect, we will update this section accordingly and honor all applicable rights.

9.5 International Users

SheRecs is based in the United States and primarily serves U.S.-based members. If SheRecs expands internationally and becomes subject to the European Union General Data Protection Regulation (GDPR), UK GDPR, Brazil’s LGPD, or other international privacy frameworks, we will update this Privacy Policy to provide the additional disclosures, legal bases for processing, international transfer safeguards, and rights information required under those frameworks.

At this time, if you access the Services from outside the United States, please be aware that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your home jurisdiction. By using the Services, you acknowledge this transfer.

9.6 How to Submit a Privacy Rights Request

To exercise any of the rights described in this Section 9, please contact us at contact@sherecs.com and include: (i) your name; (ii) the email address associated with your account; (iii) the right you wish to exercise; and (iv) sufficient information to allow us to verify your identity. We will not discriminate against you for exercising your privacy rights.

We will respond to verified requests within 45 days of receipt. If we require additional time, we will notify you of the reason and extension period within the initial 45-day window. Responses will be provided free of charge up to twice per calendar year, unless a request is manifestly unfounded or excessive.

We may need to verify your identity before processing certain requests. Verification may include asking you to confirm information associated with your account.

9.7 Appeal Process

If we decline to take action on a privacy rights request, we will notify you of our decision and the reason for it within the applicable timeframe. You may appeal our decision by submitting a written appeal to contact@sherecs.com within 30 days of receiving our decision. Please include the original request, our response, and the grounds for your appeal.

We will respond to appeals within 60 days of receipt and will provide a written explanation of our decision. If we affirm our original decision, we will include information about any further options available to you under applicable law, including the right to contact your state attorney general or applicable regulatory authority.

10. International Data Transfers

SheRecs is based in the United States, and we process and store personal information on servers located in the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, or accessed from jurisdictions that may not provide the same level of data protection as your home jurisdiction.

Where such transfers occur, we take appropriate measures to ensure your personal information remains protected in accordance with this Privacy Policy and applicable law. These measures may include, where required, adequacy decisions, standard contractual clauses approved by relevant authorities, or other lawful transfer mechanisms.

11. Third-Party Services

We engage third-party service providers to support, operate, and enhance the Services. These third parties may perform hosting, data storage, analytics, communications, security, and product functionality services. They are authorized to access and use personal information only as necessary to perform services for us and are subject to appropriate contractual and data protection obligations.

The Services may also allow you to access or interact with features, content, or tools provided by independent third parties. Those third parties operate under their own terms and privacy policies, and SheRecs is not responsible for their data practices. We encourage you to review their policies before engaging with such services.

As the Services evolve, we may engage additional third-party providers, including payment processors in connection with future paid offerings. We will update this Privacy Policy as required to reflect any material changes to our data practices.

12. Additional CCPA Disclosures

In addition to the categorical table in Section 9.1, the following disclosures are required for California residents under the CCPA:

• Sources of Collection. We collect personal information directly from members, automatically from device and usage interactions, and from other users (such as invitation senders).
• Business/Commercial Purposes. We use personal information to provide and improve the Services, facilitate trusted recommendations, maintain platform integrity, communicate with members, comply with legal obligations, and, with consent, for additional purposes.
• Categories of Third Parties. We disclose personal information to third-party vendors and service providers performing services on our behalf (hosting, analytics, support, payment processing), affiliates, and as required by law.
• No Sale or Sharing. SheRecs does not sell personal information and does not share personal information for cross-context behavioral advertising as defined under the CCPA.
• Sensitive Personal Information. SheRecs does not intentionally collect sensitive personal information as defined under the CCPA. If this changes, we will update this Policy and provide the required notice and opt-out mechanisms.
• Retention. We retain personal information for as long as necessary for the purposes described in Section 6, and in no case for longer than required by law or operational necessity.

13. Changes to This Privacy Policy

We will update this Privacy Policy from time to time to reflect changes in our practices, the Services, or applicable law. We always indicate the date of last update at the top of this Policy. If changes are significant, we will provide more prominent notice, for example, by emailing you or posting a notice within the Services, as required by applicable law. Continued use of the Services after the effective date of an updated Policy constitutes your acceptance of the revised terms.

14. Contact Us

We welcome your questions and feedback about this Privacy Policy or how we process your information.

• General privacy questions and rights requests: contact@sherecs.com
• Technical issues and security vulnerabilities: tech@sherecs.com
• Partnerships, advertising, and business inquiries: partner@sherecs.com
• Service provider listing management: sherecs.com/providers

For more, see our Terms of Service  •  Community Guidelines  •  © 2026 SheRecs LLC. All rights reserved.