Privacy Policy
Last updated: August 22, 2026
This Privacy Policy explains how [Shiopp LLC] (“Shiopp,” “we,” “us”) collects, uses, shares, and protects personal information when you use https://www.shiopp.com and related services (the “Service”).
Contact for privacy requests: [privacy@shiopp.com]
Notice address: [Registered agent / principal address], Cheyenne, Wyoming, United States
1. Who we are
Shiopp operates a product-validation marketplace. We are the business responsible for deciding how personal data described here is processed for the Service. We use processors (listed below) to help us operate.
2. Information we collect
2.1 You provide
- Account: email address, password (handled by our auth provider; we do not store plaintext passwords), username
- Profile: bio, profile picture (avatar), preferred language (
en/es) - Roles: validator and/or creator flags associated with your account
- Creator content: product titles, descriptions, specifications, prices, thumbnails, images, videos, changelogs, and related listing data
- Communications: messages you send to support or legal inboxes
- Feedback (when enabled): survey/question answers tied to products you interact with
2.2 Collected automatically
- Authentication session: cookies and tokens needed to keep you signed in (via Supabase Auth / SSR)
- Locale preference: language path and related preference storage
- Theme preference: light/dark/system preference (typically in local browser storage)
- Technical logs: standard server and security logs (e.g., approximate timing, request metadata) as generated by our hosts
We do not currently operate a separate advertising pixel suite. If we add analytics (e.g., product analytics or error monitoring), we will update this Policy and, where required, the Cookie Notice.
2.3 Payments (when enabled)
When Stripe checkout is enabled, we and/or Stripe may process: payment amounts, currency, status, Stripe Checkout Session IDs, Payment Intent IDs, and limited billing metadata. Full card numbers are processed by Stripe, not stored by Shiopp.
2.4 Social graph
- Follow relationships between validators/users and creators
2.5 Information we do not intentionally collect today
We do not currently maintain shipping-address tables, government ID numbers, or phone numbers as core profile fields. Do not submit sensitive government identifiers unless we expressly request them for a verified process.
3. How we use information
We use personal information to:
- Create and secure accounts; authenticate you
- Operate profiles, follows, product discovery, and creator tools
- Process validation purchases and related records (when payments are live)
- Host and display user-generated content you choose to publish
- Communicate about the Service (auth emails such as verification and password reset; transactional notices)
- Enforce Terms, Acceptable Use, and Take-Down / DMCA processes
- Protect security, prevent fraud and abuse
- Improve and debug the Service
- Comply with law and respond to lawful requests
4. Legal bases / purposes (summary)
For users in jurisdictions that require a “legal basis,” we generally rely on: contract (providing the Service you request), legitimate interests (security, product improvement, marketplace integrity), consent where we ask for it, and legal obligation when applicable.
5. How we share information
We share information with:
| Recipient | Role |
|---|---|
| Supabase | Authentication, database, file storage (avatars, product media) |
| Vercel | Hosting the web application |
| Railway | Hosting the API |
| Stripe | Payment processing (when enabled) |
| Email infrastructure | Auth and (later) product email delivery via our providers |
| Font / CDN providers | e.g., Google Fonts delivery for typography |
We may also share information with professional advisors, in connection with a corporate transaction (merger, financing, sale), or when required by law, legal process, or to protect rights, safety, and integrity of the Service or users.
We do not sell personal information as “sell” is commonly understood (money for contact lists). If that changes, we will update this Policy.
Public information: usernames, bios, avatars, creator profiles, follows (as displayed), and published product content are visible to other users and may be indexed or shared as part of normal marketplace use.
6. Cookies and similar technologies
See our Cookie Notice for details on session cookies, locale, and theme storage.
7. Retention
We retain account and transaction records for as long as your account is active and as needed for legitimate business, security, dispute, and legal compliance purposes. Creator content remains while published or as required for backups and legal holds. You may request deletion as described below; some records may remain in backups or where law requires retention.
8. Security
We use reasonable administrative, technical, and organizational measures appropriate to our size and risk profile (including encrypted transport, access controls via our providers, and authenticated APIs). No method of transmission or storage is 100% secure.
9. International transfers
We and our processors may process data in the United States and other countries. Those countries may have different data-protection laws than your home country. By using the Service you understand that your information may be transferred to such locations.
10. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, or export certain personal information, or to object to or restrict certain processing.
- Access / correction: update profile fields in Settings where available
- Deletion / other requests: email [privacy@shiopp.com] from your account email with the subject “Privacy request”
- Marketing: we do not currently run a marketing email list separate from transactional/auth mail; if we do, you will be able to opt out
We will respond within a reasonable period as required by applicable law. We may need to verify your identity. Account deletion tooling in-product may be added later; until then, email requests are the path.
11. Children
The Service is for users 18+ only. We do not knowingly collect personal information from anyone under 18. If you believe a minor has registered, contact [privacy@shiopp.com] and we will take appropriate steps to delete the account.
12. California and other U.S. state notices
If you are a resident of California or another U.S. state with consumer privacy laws, you may have rights to know, delete, and correct personal information, and to non-discrimination for exercising rights. We do not “sell” or “share” personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA based on our current practices. To exercise rights, contact [privacy@shiopp.com].
Categories of personal information collected in the prior 12 months align with Section 2 (identifiers, commercial/validation records when payments exist, internet activity limited to service logs/cookies as described, and user content).
13. Changes
We may update this Policy by posting a new version with an updated date. Material changes may be highlighted in-product or by email when reasonably feasible.
14. Contact
[Shiopp LLC]
[Registered agent / principal address], Cheyenne, Wyoming, United States
Privacy: [privacy@shiopp.com]
Legal: [legal@shiopp.com]
This Policy is an operational template and does not constitute legal advice.