Privacy Policy

We may collect the following categories of information:

• Account information, such as name, email address, phone number, company name, login credentials, and account settings.
• Customer and order information, such as subscription selections, order history, skip requests, cancellation requests, pickup location selections, and related interactions.
• Merchant content, such as storefront text, product listings, pricing, images, business profiles, and other uploaded content.
• Payment information, processed by Stripe. We do not directly store full card numbers on our systems.
• Usage and device information, such as IP address, browser type, device identifiers, operating system, pages viewed, logs, and referral data.
• Cookies and similar technologies used for analytics, functionality, and, where applicable, marketing.
• Support communications and feedback you provide to us.

We use personal information to:

• Provide, operate, and maintain the platform.
• Create and manage accounts.
• Process subscriptions, recurring orders, and billing activity.
• Process payments through Stripe and related payment workflows.
• Enable storefront features, including enrollment, skips, pickup changes, and cancellations.
• Provide support and respond to inquiries.
• Improve product performance, analytics, security, and user experience.
• Detect, prevent, investigate, and respond to fraud, misuse, abuse, security incidents, or policy violations.
• Comply with legal, accounting, tax, and regulatory obligations.
• Send transactional and service-related communications.

We may share information with:

• Stripe and other payment, hosting, analytics, email, support, security, or infrastructure providers.
• Merchants using Subsup, where a customer interacts with that merchant's storefront or subscription flow.
• Service providers and subprocessors that help us operate and secure our services.
• Professional advisors, auditors, regulators, courts, or law enforcement where required by law or necessary to protect rights, safety, or property.
• Affiliated entities or successors in connection with a merger, acquisition, financing, or sale of assets.

We do not sell personal information in the ordinary sense of exchanging data for money. If our practices change, we will update this policy and provide any required notices.

Where GDPR or similar laws apply, we process personal data based on one or more of the following legal bases:

• Performance of a contract.
• Legitimate interests.
• Compliance with legal obligations.
• Consent, where required.
• Protection of vital interests, where applicable.

We use cookies and similar technologies to keep you signed in, remember preferences, measure traffic and usage, improve product functionality, and support analytics. Where required by law, we will obtain consent before using non-essential cookies or similar tracking tools. You can manage cookies through your browser settings and any consent tools we provide.

We retain personal information for as long as necessary to provide the services, comply with legal obligations, resolve disputes, enforce agreements, and maintain legitimate business records. Retention periods vary depending on the type of data and the purpose for which it was collected.

We maintain administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If you access our services from outside the United States, your information may be transferred to and processed in the United States or other countries. Where required, we implement lawful transfer mechanisms and safeguards.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your information, receive a copy of certain data in portable form, and withdraw consent where processing is based on consent. To exercise these rights, contact us at support@subsup.io.

Subsup is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. If changes are material, we will provide notice as required by law.

Subsup Inc. · 1 Belvedere Place, Mill Valley, CA 94941 · support@subsup.io