1. About this policy

Shaupa helps shoppers in Australia discover, save and organise fashion, furniture and home products. This policy describes the personal information and service data Shaupa handles, why it is handled, and the choices available to you.

2. Your choices

Authentication, security, essential storage and service operations are necessary to provide Shaupa. The first privacy prompt lets you choose Necessary only or Allow full analysis. Privacy details lets you control each optional purpose separately:

Product analytics: Measures feature and product use through PostHog using minimised identifiers.
Search-quality improvement: Allows privacy-screened search evidence to enter a separate quality dataset.
Retailer insights: Allows eligible product activity to support protected aggregate reporting.

Changing a choice stops new optional collection for that purpose on the browser where you changed it. It does not automatically erase records collected while consent was on. You can request deletion or ask what Shaupa holds by contacting us.

3. Information we collect and why

Account and service information. If you create an account, we use the name, email address, authentication identifiers, subscription status and service settings needed to provide and secure it.

Shopping content. Searches, conversations, likes, boards, preferences and images may be stored when needed to provide features you request, maintain your history and carry choices between devices.

Product analytics. When allowed, Shaupa measures interactions with search, products, boards, subscriptions and other features. Signed-in activity may use a pseudonymous account identifier across devices. Shaupa excludes names, email addresses, uploaded images, private conversations and full search text from PostHog event properties.

Search-quality improvement. When separately allowed and enabled by Shaupa, a privacy-screened search record may be copied into an account-separated quality dataset. Direct identifiers are screened and unsafe text is reduced to structured, non-language signals. Screening reduces risk but cannot guarantee that every indirect identifier is removed.

Operational information. Limited security, error, performance and service-health information is handled to keep Shaupa reliable and protect accounts. Shaupa does not use this necessary information to build an optional shopper behaviour profile.

4. Retailer insights

When separately allowed, eligible product interactions may be associated with a protected pseudonymous subject token and contribute to aggregate retailer analysis. Shaupa does not include your account details, search text, photos or private conversations in retailer insight events. Customer reporting is subject to traffic, contribution, cohort, aggregation and access safeguards before it is enabled.

5. Payments and service providers

Stripe processes payments; Shaupa does not store full card details. We use providers including Google and Firebase for authentication, hosting and storage, Stripe for payments, and PostHog for optional product analytics. They process information under their own security, privacy and data-processing terms.

Shaupa does not sell personal information or use advertising pixels to follow you across other services.

6. Overseas processing

Shaupa serves Australian shoppers, while some providers process information overseas. Shaupa's current PostHog analytics endpoint is in the United States. Google, Firebase, Stripe and other providers may process information in countries where they operate. We assess provider safeguards and take reasonable steps appropriate to the information.

7. Retention and deletion

Account content is kept while needed to provide the service or until it is deleted, subject to legal, fraud-prevention, backup and operational requirements. Search-quality records receive an expiry time scheduled for 90 days after collection. Manually reviewed, de-identified evaluation cases and aggregate statistics may be retained longer.

You may delete supported content in Shaupa or request account deletion. Some provider deletion steps, including analytics or payment records, can require external follow-up; Shaupa will not describe a request as fully complete until required follow-up is resolved.

8. Access, correction and complaints

You may ask to access or correct personal information Shaupa holds about you, request deletion, withdraw optional consent, or make a privacy complaint. We may need to verify that a request relates to your account. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

9. Security

Shaupa uses technical and organisational safeguards designed to protect information from misuse, interference, loss and unauthorised access, modification or disclosure. No system can guarantee absolute security, and you are responsible for safeguarding your credentials.

10. Changes to this policy

We may update this policy as Shaupa changes. The current effective date appears above. We will provide an appropriate notice or ask for a new choice when a material change affects an optional purpose.

11. Contact

For privacy questions, requests or complaints, email [email protected].

This policy is governed by the laws of Australia.