Legal & Policies

Cookies are small text files stored on your device when you visit a website. We may also use similar technologies such as pixels, tags, local storage, and SDKs.

We may use:

• Strictly necessary cookies to operate the site and keep it secure.
• Functional cookies to remember preferences and settings.
• Analytics cookies to understand performance and usage.
• Marketing cookies, if used, for promotional measurement or advertising.

We use cookies to maintain sessions, remember preferences, analyze traffic, improve performance, and support product functionality. Where permitted, we may also use cookies for marketing and attribution.

Where required by law, we will ask for consent before setting non-essential cookies. You can also manage cookies through your browser settings or any cookie preference controls we provide.

Some cookies may be placed by third-party service providers such as analytics or advertising partners. Those providers may collect information according to their own privacy notices.

Subscriptions are billed on the schedule shown at checkout or in the merchant storefront. Charges may recur automatically until canceled.

Subsup charges a platform and automation fee of 5% plus $0.55 per transaction unless otherwise stated. Stripe processing fees are separate and may apply.

Merchants may set order deadlines, capacity limits, skip windows, and pickup rules. If you miss a cutoff, the next available order period or skip may apply according to the storefront settings.

Customers and merchants should review the applicable subscription terms and cancel before the stated cutoff time. Cancellation generally prevents future renewals only and does not automatically reverse charges already processed or for periods already started.

Refunds, credits, and adjustments are controlled by the merchant's stated policy and applicable law. Some fees, taxes, and payment processing amounts may be non-refundable.

If a payment fails, we or the applicable payment provider may retry the charge, notify the user, suspend access, or cancel the subscription according to the applicable rules.

You may use Subsup to create, manage, discover, and subscribe to legitimate recurring food and small-business offerings, provided your use complies with law and these Terms.

You may not:

• Use Subsup for unlawful, misleading, fraudulent, or harmful activity.
• Sell prohibited, unsafe, or unauthorized products.
• Misrepresent products, ingredients, pricing, pickup instructions, or subscription terms.
• Harass, threaten, defame, or abuse other users.
• Upload malware, phishing content, or malicious code.
• Scrape, crawl, probe, or test the platform without authorization.
• Circumvent billing, access controls, or usage limits.
• Use the platform to violate intellectual property, privacy, or consumer protection laws.
• Misuse customer data for unauthorized marketing or unrelated purposes.

We may remove content, suspend accounts, restrict features, or terminate access if we reasonably believe this policy has been violated.

You are solely responsible for:

• The legality, safety, labeling, packaging, and quality of your products.
• All product descriptions, pricing, fees, taxes, and refunds.
• Fulfillment, pickup readiness, and customer communications.
• Compliance with food safety, health, consumer protection, tax, and local laws.
• Managing any licenses, permits, and registrations required for your business.

You may access customer data only as needed to operate your storefront, fulfill orders, manage subscriptions, or provide customer support. You may not use customer data for unrelated purposes or disclose it except as permitted by law or by this agreement.

Fees, processing costs, and payout timing are governed by the Subsup platform configuration, Stripe's processing flow, and any separate merchant terms. You are responsible for any taxes or chargeback-related losses attributable to your business unless otherwise required by law.

You are responsible for all storefront content you publish, including images, text, product names, pricing, and promotions. You must ensure your content is accurate, lawful, and not misleading.

We may suspend or remove a storefront if we reasonably believe it violates law, this agreement, the Terms of Service, the Acceptable Use Policy, or payment-provider requirements.

You agree to indemnify and hold Subsup harmless from claims arising out of your products, storefront content, business practices, legal violations, or customer disputes attributable to your merchant operations.

The customer acts as the controller or equivalent decision-maker for the relevant personal data, and Subsup acts as the processor or service provider to the extent it processes such personal data on the customer's behalf.

Subsup will process personal data only as necessary to provide the services, to comply with documented instructions from the customer, and to meet legal obligations.

Depending on the customer's use of the services, processed data may include names, email addresses, phone numbers, order history, subscription records, pickup location selections, and related account and support data.

Subsup will implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. Such measures may include access controls, encryption, logging, backups, monitoring, and incident response procedures.

The customer authorizes Subsup to engage subprocessors to support the services. Subsup will require subprocessors to be bound by data protection obligations no less protective than those in this DPA.

To the extent legally required and reasonably possible, Subsup will assist the customer in responding to requests to access, correct, delete, restrict, or export personal data.

Subsup will notify the customer without undue delay after becoming aware of a personal data breach affecting customer personal data.

Upon termination of the services or upon customer request, Subsup will delete or return personal data, unless retention is required by law or for legitimate recordkeeping purposes.

We may use measures such as:

• Role-based access control and least-privilege access.
• Encryption in transit and, where appropriate, encryption at rest.
• Logging, monitoring, and alerting.
• Backups and recovery procedures.
• Secure development practices and change management.
• Incident response and vulnerability remediation processes.

Payment information is processed by Stripe, and Subsup does not directly store full card numbers on its systems.

If you believe you have identified a security issue, contact support@subsup.io.

No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.