Privacy Policy

Introduction

At Hipop Markets, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website. By using Hipop, you consent to the practices described in this policy.

Data Collection

We collect information you provide directly, including:

Account Information

• Email address, display name, and authentication credentials
• User type selection (shopper, vendor, market organizer)
• Profile information and preferences
• Business details for vendors and organizers

Payment Information

• Payment method details (processed securely by Stripe)
• Subscription and billing information
• Ticket purchase history
• Transaction records and receipts
• Stripe Connect account information (for vendors/organizers)

Content and Activity

• Vendor posts, products, and popup events
• Market listings and event information
• Application submissions and responses
• Reviews and ratings
• Messages and communications
• Photos and images uploaded to profiles

Analytics and Usage Data

• App usage patterns and feature interactions
• Device information and technical specifications
• Location data (when permitted) for market discovery
• Performance metrics and error reporting
• User engagement and session analytics
• Search queries and browse history

Third-Party Integrations

We partner with trusted third-party services:

• Stripe: Payment processing, subscription management, and payouts
• Google Cloud Platform: Data storage, analytics, and infrastructure
• Firebase: Authentication, real-time database, and cloud functions
• Google Maps: Location services and market discovery
• RevenueCat: Mobile subscription management and analytics
• Apple/Google: In-app purchases and authentication

How We Use Your Data

• Provide and improve platform services
• Process payments, subscriptions, and ticket sales
• Generate analytics and insights for all user types
• Send relevant notifications and updates
• Facilitate connections between vendors, organizers, and shoppers
• Ensure platform security and prevent fraud
• Comply with legal and regulatory requirements
• Provide customer support
• Improve user experience and personalization

Data Sharing

We do not sell personal information to third parties.

We may share data in these circumstances:

Public Information

• Vendor profiles and business information
• Market listings and event details
• Public reviews and ratings
• Product catalogs and availability

Service Providers

• Payment processing (Stripe)
• Cloud hosting and storage (Google Cloud, Firebase)
• Analytics and monitoring services
• Email and notification services

Aggregate Analytics

• Market organizers receive anonymized vendor performance data
• Vendors receive customer engagement analytics
• Platform-wide trends and insights (anonymized)

Legal Requirements

• Comply with valid legal processes
• Enforce our terms and policies
• Protect rights, property, and safety
• Prevent fraud and abuse

Your Privacy Rights

Depending on your location, you have rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your data (subject to legal requirements)
• Restriction: Limit how we process your information
• Data Portability: Receive your data in a structured format
• Objection: Object to certain data processing activities
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, visit our Data Deletion Request page or contact hipopmarkets@gmail.com.

Data Protection

• End-to-end encryption for sensitive data transmission
• Secure cloud storage with access controls
• Regular security audits and penetration testing
• Employee access strictly limited and monitored
• PCI DSS compliance for payment processing
• Two-factor authentication available
• Incident response procedures in place
• SSL/TLS encryption for all communications

Data Retention

• Account data retained while account is active
• Payment records retained per legal requirements (typically 7 years)
• Analytics data may be retained in aggregate form indefinitely
• Deleted account data purged within 30 days
• Backup systems may retain data for limited periods
• Transaction history retained for fraud prevention

Cookies and Tracking

• Essential cookies for app functionality
• Analytics cookies for service improvement
• No third-party advertising cookies
• Cookie preferences manageable in settings
• Session management and authentication

Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected data from a child under 13, we will delete it immediately. Parents may contact us at hipopmarkets@gmail.com with concerns.

International Data Transfers

Your data may be processed in the United States and other countries. We ensure appropriate safeguards for international transfers and comply with GDPR (for European users) and CCPA (for California residents).

California Privacy Rights (CCPA)

California residents have the right to know what personal information we collect, use, and share, and the right to delete personal information. We do not sell personal information. Contact hipopmarkets@gmail.com to exercise your rights.

European Privacy Rights (GDPR)

European users have additional rights under GDPR, including data portability and the right to lodge complaints with supervisory authorities. We process data based on consent, contract performance, and legitimate interests.

Breach Notification

In the event of a data breach affecting your personal information:

• Users notified within 72 hours of confirmed breach
• Detailed information about affected data provided
• Steps to protect yourself communicated clearly
• Regulatory authorities notified as required by law

Changes to this Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Significant changes will be communicated via email or in-app notification. The "Last Updated" date will be revised. Continued use after changes constitutes acceptance.

Contact Us

For privacy questions, data requests, or concerns: