Privacy Policy

HypeUp ("us", "we", or "our") operates a software-as-a-service platform that helps businesses create and manage their own branded online stores, manage inventory, orders, customers, payments, and run day-to-day operations. This Privacy Policy applies to all visitors, merchants, store owners, and end customers who interact with the Services.

By signing up, accessing, or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not use the Services. Where we act on behalf of a merchant, the merchant determines the purposes for which the relevant data is processed.

We collect information that you provide to us directly, including when you create an account, set up your store, contact us, or otherwise use the Services. This includes:

• Account and identity details such as your full name, email address, and phone number.
• Business information such as your business or store name, industry type, country, city, business type, store logo and branding assets, and subscription plan.
• Store content that you add, including products, product descriptions, categories, pricing, inventory levels, suppliers, orders, customers, and other business data you enter into the platform.
• Profile and settings information, including your store profile, delivery and pickup settings, currency, timezone, contact person details, and configuration choices.
• Inquiries and support requests, including the contents of any message you send us through our contact form or support channels.

When a customer places an order or uses features on a merchant's store that is powered by HypeUp, the merchant collects and controls information we process on their behalf. This may include the customer's name, phone number, delivery address, order details, payment information, and communications.

HypeUp processes this information to provide the Services to the merchant. We do not sell this information, and we only use it to deliver and improve the Services. Merchants are responsible for the customer data they collect and for complying with applicable laws, including any privacy notices they must provide to their customers.

We use the information we collect to provide, operate, maintain, and improve the Services. Specifically, we use your information to:

• Create and manage your account and merchant profile, and authenticate you when you sign in.
• Operate your online store, process orders and transactions, manage inventory, deliver products and services, and provide analytics and dashboard features.
• Communicate with you about your account, respond to support requests, and send service-related notices.
• Secure the platform, prevent fraud, abuse, and unauthorized access, and investigate suspicious activity.
• Improve and develop our products, features, and customer experience, and comply with legal obligations.

We do not sell your personal information. Where we use third-party analytics or AI-assisted services, we share only the information needed for those services to work as described in this policy.

When you visit or use the Services, we automatically collect certain information about your device and usage. This includes your IP address, browser type and version, device identifiers, operating system, pages viewed, referring URLs, and the dates and times of your visits.

We record login activity such as the time of sign-in, your IP address, and user-agent information to help keep your account secure. We also use security tools, including Cloudflare Turnstile, which may process limited device and network information to help verify that interactions are not fraudulent.

We use cookies and similar technologies, including local storage, to keep you signed in, remember your preferences, and improve the Services. For example, we use cookies to maintain your authentication session, remember items in your cart or wishlist, remember recently viewed or searched items, store your language preference, and support features such as reordering and product comparison.

We also use third-party analytics services, such as Google Analytics, which may set their own cookies to understand how visitors use our sites.

None of the cookies we use are used to sell your personal information. You can control or disable cookies through your browser settings; however, some parts of the Services may not function properly if you do.

We do not sell, rent, or trade your personal information. We only share information in the following circumstances:

• With service providers who process data on our behalf to operate the Services, such as hosting, database, email, analytics, payment, security, and AI providers.
• With payment processors necessary to complete a transaction, such as subscription billing or merchant payment collection.
• With merchant partners where required to operate the merchant's store and fulfill its services to customers.
• Where required by law, regulation, legal process, or a legitimate request by public authorities, or where we believe disclosure is necessary to protect our rights, the safety of any person, or to enforce our Terms of Service.
• In connection with a corporate transaction, as described in the Business Transfers section below.

The Services rely on a limited number of carefully selected third-party services to function. These providers process information on our behalf under our instructions and have their own privacy policies. These include:

• Supabase: hosts our database, authentication, and object storage.
• Vercel: hosts and serves our website and applications.
• Resend: delivers transactional email such as verification, password reset, and notification emails.
• Stripe: processes subscription billing and payments for paid plans.
• Cloudflare Turnstile: helps prevent bots and fraudulent signups.
• Google Analytics: measures site usage and performance.
• Google sign-in: allows you to sign in with your Google account.
• Google Gemini and Cohere: power AI-assisted features such as the Aria assistant and AI-generated content.
• OpenStreetMap: provides map tiles for delivery zone configuration.
• DiceBear: generates default avatar images.
• QR Server: generates QR codes for referral and sharing features.
• JazzCash and Easypaisa: may be used for certain payment flows where available.

When you purchase a paid plan, your payment is processed by our payment partner, Stripe. Card details are handled by the payment provider under its own security standards and are not stored on our servers.

Merchants may also enable customer payment methods through supported providers such as JazzCash or Easypaisa. We process only the information needed to complete and reconcile those transactions.

HypeUp includes AI-assisted features, such as the Aria assistant and AI-powered content generation. When you use these features, the text and context you provide may be sent to AI providers such as Google Gemini or Cohere to generate a response or content.

We recommend that you do not enter sensitive personal or confidential business information into AI features. AI-generated output is provided as a convenience and should be reviewed by you before use. We do not use AI features to profile individuals or to make automated decisions about you.

We implement reasonable technical and organizational measures designed to protect your information, including encryption of data in transit and at rest, access controls, and monitoring of our platform for security issues.

No method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use industry-standard safeguards, we cannot guarantee the absolute security of your information. You are responsible for safeguarding your account credentials.

We retain your information for as long as your account is active or as long as needed to provide the Services, comply with our legal obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests.

When you request deletion of your account or data, we will remove or anonymize the information we hold about you as described in the next section, unless retention is required by law or for the legitimate operational purposes described above.

You may update or correct much of your account and store information at any time through your dashboard settings.

If you wish to delete your account and the data associated with it, please contact our support team and we will process your request. We will delete your account and remove your store and associated business data from the platform, subject to legal and operational retention requirements. Data of a merchant's customers is controlled by that merchant.

Depending on your location, you may have rights with respect to your personal information, including the right to access, correct, update, or request deletion of your information, and to object to or restrict certain processing.

You can exercise most of these rights directly from your account settings or by contacting us. We respond to legitimate requests within a reasonable time and in accordance with applicable law.

We may send you service-related emails, such as password resets, security notifications, and transaction confirmations, which are necessary to provide the Services.

We also send sign-in notification emails to help protect your account. We may send occasional product or promotional communications where permitted. You can opt out of promotional communications at any time using the unsubscribe link in those emails or by contacting us.

HypeUp services are intended for individuals who are 15 years of age or older.

We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information without appropriate consent, please contact us and we will take steps to remove that information. Where you operate a store serving customers, you are responsible for ensuring compliance with any local age requirements and parental consent obligations that may apply.

Our Services are hosted on cloud infrastructure provided by third parties, such as Supabase and Vercel, which may store and process data in data centers located in countries other than the country in which you reside, including the United States and the European Union.

When we transfer personal information across borders, we rely on appropriate safeguards and contractual protections designed to keep your data secure. By using the Services, you understand and consent to this processing.

The Services may contain links to third-party websites, apps, and resources that are not operated by us. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies before providing them with any information.

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will take reasonable steps to ensure that any successor treats your information consistently with this Privacy Policy.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will revise the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through the Services.

We encourage you to review this page periodically so that you stay informed about how we protect your information. Your continued use of the Services after changes take effect constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please reach out to us:

• Email: support@hypeup.pk
• Phone / WhatsApp: +92 346 9815625
• Office: Sargodha, Punjab, Pakistan
• Hours: Mon - Sat, 9:00 AM - 8:00 PM
• Or visit our contact page at https://www.hypeup.pk/contact

To request deletion of your account, deletion of data, or for any other privacy request, contact our support team and we will assist you.