Privacy Policy

1. Who we are

Kupa is run by Kupa LLC. You can reach us at support@usekupa.com.

2. What we collect from Merchants

• Account and business details, such as names, emails, business name, addresses and logo.
• Staff accounts the business creates.
• Products, prices and sales records.
• Payout and subscription status.
• Device information, such as browser and device type.

Tax IDs are stored encrypted.

3. What we collect from shoppers

When you shop at a store that uses Kupa, or use the Kupa customer app, we may collect:

• Your name, and your email or phone number if you provide them.
• Your order history, receipts and rewards balance.
• Your location, only when you allow it. We use it for “near me” search and to show trade-show stores while you're at the venue. Kupa does not track your location in the background.

4. Card payments

Card payments are handled by Stripe. Kupa never sees or stores full card numbers.

5. Service providers

We use service providers to run Kupa: Stripe for payments, our hosting and database providers, email providers for receipts and notifications, and AI providers for AI features. They only get the information they need to provide their service.

6. We don't sell your information

We do not sell personal information. We don't share it for anyone else's advertising.

7. Your choices

Merchants control their own customer data. Shoppers can ask the store, or Kupa, to access or delete their data. Send requests to support@usekupa.com.

8. How long we keep data

We keep data while the account is active. Merchant data is kept for 30 days after cancellation, unless the law requires us to keep it longer (for example, tax records).

9. Security

We use encryption, access controls and other safeguards to protect your information. No system is perfectly secure, so please keep your logins private.

10. Cookies

Kupa uses cookies and similar browser storage that are needed for signing in and for the app to work. Lovable, the platform that hosts Kupa, counts page visits on our public site without cookies; it stores nothing on your device, doesn't keep IP addresses and doesn't identify visitors. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

11. Children

Kupa is not directed at children under 13, and we don't knowingly collect their information.

12. Changes to this policy

If we change this policy, we'll update the date at the top. For important changes, we'll also let account owners know by email or in the app.