Popup Privacy Policy

Last Updated: February 2026

1. Introduction

Popup Moments Inc., a Delaware corporation ("Popup", "we", "us", or "our"), operates the Popup

platform, including virtual venues, Live Events, subscriptions, digital courses, VOD libraries, and

Creator product stores (the "Service").

This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, and

your rights regarding your data. This Policy applies to all users of our Service, including Creators and

End Users.

By using our Service, you agree to the collection and use of information in accordance with this Policy.

If you do not agree with this Policy, please do not use our Service.

This Privacy Policy is incorporated into and subject to our Creator Terms of Service and End User

‍

2. Scope

This Privacy Policy applies to personal data that Popup processes related to:

• End Users who access, purchase, or participate in Products, Live Events, or content offered by

Creators through the Service;

• Creators who use the Service to sell Products, host Live Events, or offer subscriptions and

memberships;

• Individuals who communicate with us for customer support or other inquiries;

• Individuals who subscribe to receive news, updates, or marketing communications from us;

• Visitors to our website and users of our mobile applications.

This Policy does not apply to third-party websites or services that may be linked from our Service. We

encourage you to review the privacy policies of those third parties.

‍

3. Data We Collect

3.1 Account Registration Data

To use Popup, you must register using one of the following login methods:

• Google account

• Email address

We collect your name, email address, and any other basic information provided by your authentication

provider. If additional login methods are added in the future, we will update this Policy.

‍

3.2 Profile and Identity Data

For Creators, we may collect additional information to verify your identity and enable payouts, including:

• Full legal name

• Date of birth

• Address

• Tax identification numbers (e.g., SSN, EIN, VAT ID)

• Government-issued ID (for identity verification)

• Bank account or payment information

‍

3.3 Usage Data

We collect data about how you use the Service, including:

• Activity inside virtual venues and Live Events

• Subscription status and benefits

• Events you attend or host

• VOD and digital course usage (e.g., watch history, progress)

• Interactions with Creators, End Users, and other members

• Posts, comments, and content you share

• Engagement signals (likes, reactions, responses)

• Pages visited, features used, and time spent on the Service

‍

3.4 Purchase and Payment Data

When you purchase subscriptions, Live Event tickets, VOD, digital courses, or Products, we collect:

• Billing name and address

• Purchase confirmation and transaction details

• Items purchased and subscription status

• Payment method type (e.g., credit card, PayPal)

We do NOT store full credit card numbers. Payment processing is handled by our third-party

payment processors (such as Stripe), which are PCI-compliant.

‍

3.5 Shipping Information (Physical Products)

For physical product purchases, we collect your name, shipping address, phone number, and delivery

instructions to fulfill your order.

‍

3.6 Communications and Support Data

When you contact us for support or communicate with us, we collect:

• Your contact information

• The content of your messages and inquiries

• Any attachments or files you provide

‍

3.7 Device and Technical Data

We automatically collect technical data when you use our Service, including:

• IP address

• Browser type and version

• Device type and operating system

• Unique device identifiers

• Referring URLs and exit pages

• Date, time, and duration of visits

• Pages viewed and actions taken

‍

3.8 Location Data

We may collect general location information based on your IP address. We do not collect precise

geolocation data unless you explicitly grant permission.

‍

4. How We Use Your Data

We use your personal data for the following purposes:

4.1 Providing and Operating the Service

• Creating and managing your account

• Processing transactions and fulfilling orders

• Delivering subscriptions, Live Event access, and digital content

• Enabling Creators to manage their communities and offerings

• Providing customer support and responding to inquiries

‍

4.2 Sharing Data with Creators

If you join, subscribe to, or interact with a Creator's venue or purchase their Products or Live Events,

we share relevant data with that Creator, including:

• Your username and email address

• Subscription status and purchase history of their offerings

• Event attendance and VOD/course progress

• Posts and interactions within their venue

Creators never receive your payment method information.

‍

4.3 Communications

We may send you:

• Service-related messages (e.g., account notifications, purchase confirmations)

• Security alerts and important updates

• Marketing and promotional communications (with your consent)

Creators may send messages to their subscribers and community members through the Service. You

may unsubscribe from marketing emails at any time.

‍

4.4 Analytics and Improvement

We use anonymized and aggregated data to:

• Understand how users access and use the Service

• Analyze trends and user behavior

• Improve our Service, features, and user experience

• Conduct research and develop new offerings

This data cannot be used to identify you personally.

‍

4.5 Safety and Security

We use anonymized and aggregated data to:

• Detect, prevent, and investigate fraud, abuse, and security incidents

• Protect the rights, property, and safety of Popup, Creators, End Users, and others

• Enforce our Terms of Service and other policies

In some cases, we may need to use identifiable data to investigate specific security incidents or

respond to legal requirements.

‍

4.6 Legal Compliance

We may use your data to comply with applicable laws, regulations, legal processes, or governmental

requests.

‍

5. Data Sharing

We may share your personal data with the following parties:

5.1 Creators

As described above, we share relevant data with Creators whose Products, Live Events, or

subscriptions you purchase or interact with.

‍

5.2 Service Providers

We share data with third-party service providers who perform services on our behalf, including:

• Payment processors (e.g., Stripe)

• Cloud hosting providers

• Analytics providers

• Email and communication services

• Customer support tools

• Shipping and fulfillment providers (for physical products)

These providers are authorized to use your data only as necessary to provide services to us.

‍

5.3 Legal and Safety Disclosures

We may disclose your data:

• To comply with applicable laws, regulations, or legal processes

• To respond to lawful requests from government authorities, including law enforcement

• To protect the rights, property, or safety of Popup, our users, or others

• To detect, prevent, or address fraud, security, or technical issues

‍

5.4 Business Transfers

If Popup is involved in a merger, acquisition, sale of assets, or bankruptcy, your personal data may be

transferred as part of that transaction. We will notify you of any such change and any choices you may

have regarding your data.

‍

5.5 With Your Consent

We may share your data with other parties when you have given us explicit consent to do so.

‍

5.6 Aggregated and Anonymized Data

We may share aggregated or anonymized data that cannot reasonably be used to identify you for

analytics, research, marketing, or other business purposes.

‍

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help us recognize

your device, remember your preferences, and understand how you use our Service.

‍

6.2 Types of Cookies We Use

• Essential Cookies: Required for the Service to function (e.g., authentication, security, payment processing)
• Analytics Cookies: Help us understand how users interact with our Service (e.g., Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant ads and measure ad campaign effectiveness

‍

6.3 Third-Party Analytics

We use third-party analytics services, such as Google Analytics, to collect and analyze usage data.

These services may use cookies and similar technologies. You can learn more about Google's

practices at google.com/policies/privacy/partners and opt out at tools.google.com/dlpage/gaoptout.

‍

6.4 Managing Cookies

Most browsers allow you to control cookies through their settings. You can set your browser to:

• Block all cookies

• Accept only first-party cookies

• Notify you when a cookie is set

Please note that blocking cookies may affect your ability to use certain features of our Service.

‍

6.5 Do Not Track

Some browsers offer a "Do Not Track" (DNT) setting. Currently, our Service does not respond to DNT

signals. However, you can manage your privacy preferences through the cookie settings described

above.

‍

7. Your Privacy Choices

7.1 Account Deletion

To delete your account, contact us at info@popup.fm. Please note:

• Deleting your account ends access to subscriptions, Live Events, VOD, courses, and purchased

content

• Some data may be retained for legal compliance, dispute resolution, or fraud prevention

• We will delete or anonymize your data within six (6) months after it is no longer needed

‍

7.2 Email Preferences

You may unsubscribe from marketing emails by clicking the "unsubscribe" link in any email or by

contacting us at info@popup.fm. Please note that you cannot opt out of service-related

communications (e.g., account notifications, security alerts).

‍

8. Data Security

We implement industry-standard security measures to protect your personal data from unauthorized

access, use, or disclosure. These measures include:

• Encryption of data in transit and at rest

• Secure hosting and infrastructure

• Access controls and authentication

• Regular security assessments

Payment data is handled by PCI-compliant payment processors.

However, no method of transmission over the Internet or electronic storage is 100% secure.

While we strive to protect your data, we cannot guarantee absolute security. You are responsible for

maintaining the confidentiality of your account credentials.

‍

9. Data Retention

We retain your personal data for as long as necessary to:

• Fulfill the purposes for which it was collected

• Provide our services to you

• Comply with legal obligations (such as tax and accounting requirements)

• Resolve disputes and enforce our agreements

When personal data is no longer needed for these purposes, we will delete or anonymize it within six

(6) months.

‍

10. International Transfers

Popup is headquartered in the United States. Your personal data may be transferred to, stored, and

processed in the United States or other countries where our service providers operate.

If you are located outside the United States, please be aware that data protection laws in the United

States and other countries may differ from those in your jurisdiction.

By using our Service, you consent to the transfer of your data to the United States and other countries.

We will take appropriate measures to ensure that your data receives an adequate level of protection,

including the use of standard contractual clauses where required.

‍

11. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal

data from children under 13.

If you are a parent or guardian and believe that your child has provided us with personal data, please

under 13, we will take steps to delete that information promptly.

‍

12. Third-Party Services

Our Service may contain links to third-party websites, applications, or services. We are not responsible

for the privacy practices of these third parties.

When you click on a third-party link or use a third-party service, you are subject to that party's terms

and privacy policy. We encourage you to review their policies before providing any personal data.

Third-Party Integrations:

• Payment Processing: We use Stripe and other payment processors to handle transactions.

Your payment data is subject to their privacy policies.

• Analytics: We use Google Analytics and similar services to analyze usage. See Section 6.3 for

more information.

• Social Login: If you log in using Google or another social provider, your data is subject to their

privacy policies.

‍

13. Your Rights

Depending on your location, you may have certain rights regarding your personal data.

13.1 Rights for All Users

All users may:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request deletion of your data (subject to legal exceptions)

• Withdraw consent for processing (where applicable)

• Contact us with questions or concerns about your data

To exercise these rights, contact us at info@popup.fm.

‍

13.2 Additional Rights for EU/EEA and UK Residents (GDPR)

If you are located in the European Union, European Economic Area, or United Kingdom, you have

additional rights under the General Data Protection Regulation (GDPR), including:

• Right of Access: Request a copy of your personal data

• Right to Rectification: Request correction of inaccurate or incomplete data

• Right to Erasure: Request deletion of your personal data ("right to be forgotten")

• Right to Restriction: Request restriction of processing in certain circumstances

• Right to Data Portability: Receive your data in a structured, machine-readable format

• Right to Object: Object to processing based on legitimate interests or for direct marketing

• Right to Withdraw Consent: Withdraw consent at any time (without affecting prior processing)

• Right to Lodge a Complaint: File a complaint with your local data protection authority

Legal Bases for Processing:

We process your personal data based on the following legal bases:

• Contract: To perform our contract with you (e.g., providing services, processing transactions)

• Consent: Where you have given consent (e.g., marketing communications)

• Legitimate Interests: For our legitimate business interests (e.g., security, fraud prevention,

improving our Service)

• Legal Compliance: To comply with legal obligations

To exercise your GDPR rights, contact us at info@popup.fm. We will respond within 30 days.

‍

13.3 Additional Rights for California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act

(CCPA) and California Privacy Rights Act (CPRA):

Right to Know:

You have the right to request that we disclose:

• The categories of personal information we have collected about you

• The categories of sources from which we collected personal information

• The business or commercial purpose for collecting or selling personal information

• The categories of third parties with whom we share personal information

• The specific pieces of personal information we have collected about you

Right to Delete:

You have the right to request that we delete your personal information, subject to certain exceptions

(e.g., legal obligations, completing transactions).

Right to Correct:

You have the right to request that we correct inaccurate personal information.

Right to Opt-Out of Sale/Sharing:

You have the right to opt out of the "sale" or "sharing" of your personal information for targeted

advertising.

Popup does not sell your personal information for monetary consideration. However, some data

sharing for advertising purposes may constitute a "sale" or "sharing" under CCPA. To opt out, contact

us at info@popup.fm.

Right to Non-Discrimination:

We will not discriminate against you for exercising your CCPA rights.

Categories of Personal Information Collected:

How to Submit a Request:

To exercise your CCPA rights, contact us at:

• Email: info@popup.fm

We will verify your identity before processing your request. You may also designate an authorized

agent to submit a request on your behalf.

We will respond to verifiable requests within 45 days.

‍

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update the "Last Updated" date at the top of this Policy

• Post the revised Policy on our website

• Notify you by email or through the Service if the changes are material

Your continued use of the Service after any changes constitutes your acceptance of the revised Policy.

‍

15. TL;DR (Summary)

This summary is for convenience only and has no legal effect. Please read the full Privacy Policy

above.

1. We collect what we need to run the Service. This includes your account info, usage data, and

payment details. We don't store full credit card numbers.

2. We share data with Creators. When you purchase or subscribe, Creators receive your name,

email, and purchase history — never your payment info.

3. We use cookies. For analytics, functionality, and marketing. You can manage cookies in your

browser settings.

4. We don't sell your data. We share data with service providers (like Stripe) only to operate the

Service.

5. You can delete your account. Email info@popup.fm and we'll delete your data within 6 months.

6. We protect your data. We use encryption and industry-standard security, but no system is 100%

secure.

7. You have rights. Access, correct, or delete your data. EU and California residents have additional

rights under GDPR and CCPA.

8. We're based in the US. Your data may be transferred to and stored in the United States.

‍

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices,

please contact us at:

Email: info@popup.fm

Company: Popup Moments Inc.

Address: 108 W. 13th Street, Suite 100, Wilmington, DE 19801, USA

‍