Privacy Policy

What information we collect

When you message us on Instagram (@cornerbeverlyhills), we receive and store:

• The message content you send (text, images, voice notes, attachments)
• Your Instagram account identifier (your IG user ID and handle)
• Your Instagram display name and profile photo (as Instagram makes them visible to us)
• The timestamp and conversation thread the message belongs to
• If you mention us in an Instagram Story, the Story media (image or video) for 24 hours

We do not request, collect, or store any other Instagram data about you (we do not access your followers list, your other conversations, your posts that don’t mention us, or any analytics about your account).

When you visit our store in person, our point-of-sale system records standard transaction information (items purchased, payment method, sale date) handled by our retail platform Lightspeed.

When you visit our website (cornerusa.com), our hosting provider may log standard web request metadata (IP address, user agent, requested URL, timestamp) for the purpose of running the website and preventing abuse. This information is not joined to your Instagram identity.

Why we collect this information

We collect Instagram message data for one purpose only: to respond to your inquiries efficiently and accurately. Our store staff use an internal customer-service tool (“Corner USA Messaging AI”) that helps them classify incoming messages by intent (for example, distinguishing a buyback inquiry from a store-visit question), so the right staff member can respond promptly with the right information.

We do not use your messages or your Instagram profile information for advertising, profiling, training third-party AI models, or any purpose other than answering your inquiry.

How we store and protect your information

• In transit: all data flowing between Instagram’s servers, our customer-service infrastructure, our internal Slack workspace, and our on-premise classification system is encrypted using TLS 1.3 or equivalent.
• At rest: your messages are stored in an encrypted database, with server-side encryption applied by our hosting provider.
• On-premise: the classification model that reads your messages to determine intent runs on hardware we own and operate. Your messages are not sent to any third-party AI provider (OpenAI, Anthropic, Google, or others) for processing.
• Access: only Corner Harajuku LLC employees and authorized contractors with a legitimate business reason can access stored messages.

Who we share information with

We share information only with:

• Meta Platforms, Inc. (Instagram): required, because Instagram is the platform on which you sent us the message. Meta’s own privacy policy governs how Meta handles your data on their side. See facebook.com/privacy/policy.
• Our hosting provider (cloud infrastructure): required, to operate the customer-service tool. Our hosting provider does not access the content of your messages.
• Internal Slack workspace: required, so that store staff can receive alerts and respond. Our Slack workspace is operated by Corner Harajuku LLC and is not shared with any third party.

We do not share, sell, or rent your information to advertisers, marketing agencies, data brokers, or any other third parties.

How long we keep your information

• Instagram message content and classification metadata: up to 24 months from the date of the message, after which it is automatically deleted from our systems.
• Story-mention media: 24 hours from receipt, after which it is automatically deleted.
• Aggregate, anonymized statistics (such as “how many messages did we receive last month”) may be retained indefinitely, but do not identify you.

Your rights

You have the right to:

• Access the information we hold about you — request a copy of the messages and metadata we have stored
• Delete your information — request that we remove your messages and identifiers from our systems
• Opt out — request that we stop using your information for customer-service classification (in which case, your messages will still be received by our staff, but not classified or routed automatically)
• Object to specific processing, or complain to a regulator (in California, the California Privacy Protection Agency; in the EU, your local Data Protection Authority)

To exercise these rights, contact us at privacy@cornerusa.com. We will respond within 30 days.

If you’d prefer not to have your Instagram messages processed by our customer-service tool at all, you are welcome to contact us by phone or in person at our store instead — our store contact information is on cornerusa.com.

Children

Our services are not directed at children under 13, and we do not knowingly collect information from children under 13. If we learn that we have collected information from a child under 13, we will delete it.

California residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what categories of personal information we collect, the sources, and the purposes
• The right to delete personal information we hold about you, subject to exceptions
• The right to correct inaccurate personal information
• The right to opt-out of the sale or sharing of personal information — we do not sell or share your personal information
• The right not to be discriminated against for exercising your CCPA rights

To exercise any California-specific right, contact us at privacy@cornerusa.com and indicate which right you wish to exercise. You may also designate an authorized agent to make a request on your behalf.

Changes to this policy

If we update this Privacy Policy in a material way, we will update the “Last updated” date at the top, and (for material changes) will post a notice on our website.

Contact us

Corner Harajuku LLC
479 N. Rodeo Drive
Beverly Hills, CA 90210
United States

Email: privacy@cornerusa.com
Website: cornerusa.com