Privacy Policy

1. Data We Collect

We collect the following categories of data:

• Account data: name, email address, company name, phone number.
• Operational data: invoices, stock movements, supplier records, recipes, and cost data you enter into the Service.
• Usage data: page views, feature interactions, error events — collected via analytics tools described below.
• Device and technical data: IP address, browser type, operating system, session identifiers.

2. Purpose of Processing

We use collected data to:

• Provide, maintain and improve the Service.
• Communicate with you about your account, support requests and product updates.
• Detect, prevent and investigate security incidents or abuse.
• Comply with legal obligations.

We do not sell personal data to third parties or use it for targeted advertising.

3. Data Storage and Security

All Customer Data is stored on servers located in the UAE region (Dubai). Data is encrypted at rest (AES-256) and in transit (TLS 1.2+). We implement access controls, audit logging, and regular security reviews to protect your data.

4. Data Retention

We retain Customer Data for the duration of your subscription and for up to 30 days after termination to allow data export. Anonymised or aggregated statistical data may be retained indefinitely. Backup copies may persist for up to 90 days following deletion.

5. Your Rights

You have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate data.
• Deletion: request deletion of your personal data, subject to legal retention obligations.
• Export: download your operational data in CSV or JSON format at any time from within the app.
• Objection: object to certain processing activities where permitted by law.

To exercise any of these rights, email hello@eypops.cloud.

6. Third-Party Services

We use the following sub-processors and third-party services:

• Resend — transactional email delivery. Your email address is shared to send account and product notifications.
• Lemon Squeezy — payment processing and subscription management. Payment card details are handled directly by Lemon Squeezy and never stored by EYP Ops.
• Sentry — application error monitoring. Error events may include anonymised stack traces; no Customer Data is intentionally sent.
• Google Analytics 4 — website usage analytics on eypops.cloud. Collects anonymised page view and interaction data. See Google's Privacy Policy for details. GA4 can be opted out via browser settings.

7. Cookies

The Service uses essential cookies for authentication session management (httpOnly, secure). The marketing site (eypops.cloud) uses analytics cookies via Google Analytics 4. We do not use advertising or tracking cookies. You can control cookies via your browser settings.

8. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email at least 14 days before taking effect. The “Last updated” date at the top of this page reflects the most recent revision.

9. Contact

Questions or data subject requests? Contact us at hello@eypops.cloud.