Fypro Privacy Policy

Policy owner: Caelith Inc.

1. Introduction and Scope

This Privacy Policy explains how Caelith Inc. ("Fypro," "we," "our," or "us"), as the owner and operator of FYPRO.AI, collects, uses, discloses, and protects personal information when you access or use the FYPRO.AI website, mobile applications (including iOS and Android applications), platform, products, tools, and related services, including AI-powered features (collectively, the "Services").

A "Creator" is a person or business that uses the Services to create content or operate an online store (a "Storefront"). A "buyer" is an end-consumer who purchases products from a Storefront. In this Policy, "DS" means dropshipping, "POD" means print-on-demand, and "GMV" means gross merchandise value.

This Privacy Policy also describes our processing of buyer information through the Services. Where we process buyer information on a Creator's behalf, the Creator's privacy notice explains the Creator's purposes and instructions. Where we determine the purposes and means of processing buyer information for our own activities, this Policy describes our practices. Creators are responsible for providing privacy notices covering their own customer relationships, marketing, and sales activities. Section 3.4 explains these responsibilities in more detail.

This Privacy Policy explains our information practices. Reading this Policy or using the Services does not, by itself, constitute consent to sharing your personal information with a third-party AI service provider. We obtain the explicit permission described in Section 5.4 before that sharing occurs.

2. Who We Are

Caelith Inc., which operates Fypro, is responsible for the personal information we process as described in this Policy, subject to the allocation of responsibilities for buyer information in Section 3.4.

For privacy-related inquiries, please contact us at support@fypro.ai.

3. Information We Collect

3.1 Account and Identity Information

When you create an account, we collect your email address and password for direct registration and contact information you choose to provide.

When you register or sign in using a third-party login service, we receive the provider-specific account identifier, authentication information, and the profile fields disclosed by that provider based on your authorization and the login method. The login methods available through the Services are Google Sign-In and Sign in with Apple.

Depending on the provider and your choices, this information may include your email address, name, and, where supported, profile image. The fields received may differ between providers. We do not receive your password for that third-party account.

We use this information for account creation, identity verification, login authentication, account linking where requested, and account management. Section 5.5 explains the authentication data exchanged with login providers.

3.2 Tax and Payout Information

Where necessary to enable withdrawals, process payouts, or comply with applicable law, we or the relevant payment service provider collect the following information:

• Tax forms or certifications required for the applicable payment or reporting obligation;
• Tax identification information, to the extent required by applicable law;
• Payout account or destination details; and
• Other account or transaction information necessary for the selected payout method.

The information required depends on your location, account type, selected payment method, and applicable tax and financial reporting requirements. Where a payment provider collects information directly, its privacy notice applies to its processing.

Some tax, payout, and verification information may be considered sensitive personal information under applicable privacy laws. We use such information only for payment, tax, compliance, fraud prevention, and account-security purposes.

3.3 Verification Information (Where Applicable)

Where identity or business verification is necessary for a payment, payout, or applicable legal requirement, we or the relevant service provider may collect identity documents, business information, and other verification information necessary for that purpose. The information requested depends on the relevant service and applicable requirements.

3.4 Storefront, Product, and Order Data

We collect information you provide to set up and operate your storefront, including: storefront name and configuration, custom domain settings, product selections (DS / POD catalog selections, product albums, listings), pricing, fulfillment preferences, and order history.

In connection with orders placed by your buyers, we process buyer name, shipping address, contact details, order and payment data, and communications with the buyer that pass through our platform. With respect to such buyer data:

• The responsibilities for buyer information depend on the purpose of processing and the parties' actual roles. A Creator determines how buyer information is used for its customer relationships, marketing, advertising, and other activities it controls. Where Fypro processes buyer information on a Creator's behalf to provide the Services, such as operating the Storefront, processing orders, or coordinating fulfillment, we act under the applicable service arrangement and the Creator's instructions. Where Fypro determines the purposes and means of processing for its own payment, settlement, fraud-prevention, security, tax-reporting, or legal-compliance activities, we are responsible for that processing under applicable law.
• Third-party payment processors may process buyer information in connection with transactions. The responsibilities of Fypro, the Creator, and the payment processor depend on the relevant processing activity and applicable arrangements. The payment processor's own privacy notice applies to processing for which it is independently responsible.
• Creators are responsible for providing any buyer-facing privacy notices required for their own Storefront, customer relationship, marketing, and sales activities.

3.5 Content and Creative Materials

When you use our content creation, ideation, and project tools, including the topic library, scheduled posts, and project workflows, we collect drafts, scheduled content, media uploads, and project metadata.

If you choose to use these materials with an AI-assisted feature, the data used as AI input and the conditions for sending it to an AI provider are described in Sections 3.10 and 5.4. Collecting a draft or media file for a non-AI feature does not, by itself, authorize sending it to a third-party AI provider.

3.6 Third-Party Platform Connection Data

Our Services allow you to connect supported third-party platforms ("Connectors") that you choose to enable. When you activate a Connector, we access and process authorized platform data as necessary to provide the functionality you request.

Connected-platform information may include account profile information, content, engagement information, and related metadata made available through your authorized connection. The specific information accessed depends on the platform, the functionality you enable, and the permissions you grant.

You can view and manage Connectors in your account settings on the website or in the mobile application, where available. We only access data from platforms you have explicitly authorized and only for the purposes you have directed. We use this data solely to perform the tasks you direct us to carry out on your behalf and do not use it for unrelated purposes.

Credential Security: We apply appropriate safeguards to credentials and access tokens and limit access to what is necessary to carry out your authorized tasks.

Permission to connect a platform is separate from permission to share personal information from that platform with an AI service provider. If an AI-assisted feature uses connected-platform data, we identify the data and recipient and obtain the permission described in Section 5.4 before sharing it.

3.7 Device and Network Information

We automatically collect information such as IP address; browser or application type and version; device type and model; operating system and version; mobile device identifiers (including advertising identifiers where available and permitted); network and mobile carrier information; language and time-zone settings; and log, crash, diagnostic, and usage data (including access times, pages or screens viewed, and error logs). We use this information for security monitoring, fraud prevention, service stability, diagnostics, and audit logging.

3.8 Usage Data

We collect records of how you use the Services, including session history, module usage, scheduled task execution records, GMV data, and content output history. We use this to provide session continuity and history display features, and may use aggregated, de-identified data for product improvement.

3.9 Subscription Payment Information

Payment processing for subscription fees and credits, where applicable, is handled by third-party payment providers. We do not store your full credit card number. We receive transaction and payment-status information necessary for billing, account administration, and customer support.

3.10 AI-Assisted Features

When you use AI-assisted features, we collect and process the information submitted for that feature to generate responses, analyze the submitted material, and deliver the requested functionality. The data used as AI input is described below.

• User submissions: the text prompts, conversation messages, instructions, and files or attachments you choose to submit to the AI feature, including information contained in those files.
• Conversation context: previous messages, AI responses, summaries, and saved preferences, to the extent included in the request and disclosed for the selected feature.
• Account and connected-platform context: relevant account information, content, and related metadata from your Fypro account or an authorized platform connection, to the extent necessary for the selected AI feature and identified before you consent.

We obtain this information from what you submit, the relevant information already held in your account, and platforms you have authorized us to connect, as applicable to the specific feature. We also process the AI-generated outputs to display results and provide the conversation or project history associated with the feature.

After you give the permission described in Section 5.4, we transmit the disclosed AI inputs to the identified AI service provider for the stated purpose. Only the information necessary for that feature is sent. A transfer remains subject to these requirements when it takes place through Fypro servers or a cloud or intermediary service.

Information collected for payment, tax, verification, or other non-AI functions is not automatically included in AI input merely because it appears elsewhere in this Policy. Only the categories described in this section and identified in the disclosure shown before you consent are included for the selected feature. Do not include information about another person unless you are authorized to provide it for that purpose.

Section 5.4 explains how recipients are identified and how permission is obtained, Section 6 explains model-training restrictions, and Sections 7 and 8 explain retention, deletion, and withdrawal of consent.

3.11 Cookies, Analytics, and Do Not Track Signals

On our website, we may use cookies, pixels, browser local storage, and similar technologies. In our mobile applications, we may use software development kits (“SDKs”), device or application storage, mobile identifiers, and similar technologies. We use these technologies for authentication, security, analytics, service operation, product improvement, and, where applicable, marketing attribution.

Where Apple's App Tracking Transparency permission is required for tracking or access to the advertising identifier, we obtain that permission before the relevant activity occurs and respect your choice. Declining tracking does not prevent you from using features that do not require that activity. Tracking permission is separate from permission to share personal information with a third-party AI service provider.

Some browsers offer “Do Not Track” signals. Because there is no uniform industry standard for responding to such signals, we do not currently respond to browser Do Not Track signals. Mobile operating systems and devices may provide privacy controls, permissions, or identifier settings that you can manage through your device settings. We will honor legally required opt-out preference signals, such as Global Privacy Control, where required by applicable law.

4. How We Use Your Information

We will not use your personal information for purposes materially different from those described above without providing you prior notice and, where required, obtaining your consent.

If we propose to share additional personal information with a third-party AI provider for a purpose or recipient not covered by your existing permission, we provide an updated disclosure and obtain fresh explicit permission before that sharing.

5. How We Share Your Information

We disclose personal information as described in this section. Section 3.11 describes cookies and related technologies, and Section 8.1 describes applicable California privacy rights.

5.1 Payment, Settlement, and Payout Service Providers

We share the account, payment, transaction, and verification information necessary for payment and payout service providers to process transactions, calculate and settle amounts due, pay out funds, and meet applicable fraud-prevention and legal requirements.

Where information is needed to review a payment or refund request, we may share relevant transaction and service-usage information with the applicable payment provider or app store for that purpose. Where consent is required, we obtain it before sharing. You may withdraw consent to future sharing by contacting support@fypro.ai. Withdrawal does not reverse a completed disclosure.

5.2 Fulfillment and Supplier Partners

For DS and POD orders, we share necessary order details (including buyer shipping address and product configuration) with the third-party supplier or print-on-demand provider responsible for fulfilling the order. We do not share more information than is necessary to fulfill the order.

5.3 Tax Authorities

Where required by applicable law, we provide relevant tax, payment, and transaction information to the appropriate tax authorities.

5.4 AI Service Providers

We use third-party AI service providers to generate responses, assist with content creation, and analyze material submitted for an AI feature. Before sharing personal information, we identify the recipient, the purpose, and the information to be sent in the relevant interface. The input categories are described in Section 3.10; only information necessary for the selected feature and covered by your permission is sent. This requirement also applies to any intermediary that receives the information to process the request. Sections 6 and 7 describe our model-training restrictions and retention and deletion commitments.

Before we send your personal information to a third-party AI provider, we explain in the app or other interface which data will be sent, the recipient, and the purpose, and ask for your explicit permission. We do not make that transfer unless you agree. This requirement applies to all AI entry points, including any background or scheduled processing that sends personal information to an AI provider.

You may decline the request. If you decline, the operation that requires this sharing will not run, while features that do not require it remain available. Accepting general terms, reading this Policy, connecting a third-party account, or granting device or tracking permissions does not replace this AI-sharing permission.

You can withdraw permission by contacting us at support@fypro.ai. After withdrawal, we stop new transfers covered by that permission, including subsequent transfers for affected scheduled tasks. Withdrawal does not reverse a completed transfer or automatically delete previously retained information; you can request deletion as described in Sections 7 and 8.

We require AI service providers to protect personal information consistently with this Policy and applicable requirements, use it only for the disclosed services and related security or legal purposes, and apply appropriate confidentiality, security, retention, and deletion safeguards. Section 6 describes our restrictions on model training.

We do not authorize AI providers to use your personal information for unrelated advertising or other independent purposes outside the disclosed processing. If a change introduces a recipient, data category or purpose not covered by your existing permission, we update the relevant disclosures and obtain fresh explicit permission before the new sharing.

5.5 OAuth Login Providers

If you choose a third-party login method, we use Google Sign-In or Sign in with Apple to authenticate that login. The account data we receive is described in Section 3.1.

During authentication, we exchange the authorization codes, identity or access tokens, and other protocol information necessary to complete the sign-in request with the selected provider. We use the resulting identity information to create or link your Fypro account, verify the login and maintain account access.

We do not use information received solely for login authentication for advertising, and we do not send your Fypro conversations, creative materials or other non-authentication account content to a login provider as part of the login process. Any separate integration or SDK processing must be disclosed according to its actual purpose in the relevant section of this Policy.

Google's privacy policy is available at https://policies.google.com/privacy. Apple's Sign in with Apple privacy notice is available at https://www.apple.com/legal/privacy/data/en/sign-in-with-apple/.

Permission to log in through a provider does not authorize sharing your personal information with an AI provider.

5.6 User-Authorized Connectors

When you enable a Connector, we access the authorized platform data solely to carry out your instructions. We do not proactively transmit your data to those platforms beyond what is required to complete your authorized tasks. Third-Party Services may independently process information under their own terms and privacy policies.

Where a requested feature sends connected-platform personal information to an AI provider, we apply the separate disclosure and permission requirements in Section 5.4. Disconnecting a platform and withdrawing permission for AI sharing are separate controls; Section 8 explains how to exercise these choices.

5.7 Other Service Providers

We use service providers to support functions such as hosting, analytics, communications, and customer support. We disclose information only as necessary for the relevant function and require those providers to protect it consistently with this Policy. Section 3.11 describes the technologies used for analytics and related purposes.

We require service providers to apply appropriate confidentiality, security, purpose-limitation, retention, and deletion safeguards. Section 5.4 applies specifically to AI service providers.

5.8 Legal Requirements and Business Transfers

We may disclose your information: (a) when required by applicable law or court order; (b) to enforce our Terms of Service or protect our rights; (c) to prevent fraud or harm; or (d) in connection with a merger, acquisition, or asset sale, provided the acquiring entity is bound by obligations at least as protective as this Privacy Policy.

6. AI Model Training

We do not use your conversation data, uploaded files, content drafts, or task instructions to train AI models, and we do not authorize AI service providers to use that information for model training. We use this information to deliver the requested AI features and for the related retention, security, and legal-compliance purposes described in this Policy.

Permission to process your information to answer an AI request is not permission to use that information to train a model. A restriction on model training does not mean that a provider retains no information; the applicable retention and deletion arrangements are described in Sections 5.4 and 7.

If we decide in the future to use Creator data for AI training, we will: (a) update this Privacy Policy and provide you prior notice; (b) operate any such program on an opt-in basis only; (c) provide a clear opt-in control in your account settings on the website or in the mobile application, where available; and (d) upon withdrawal of consent, exclude your historical data from future training datasets.

We will not treat consent to AI-assisted processing or a general acceptance of this Policy as an opt-in to any future training program. Any such program will require a separate explanation of the participating entities, data, purposes and withdrawal controls before you choose to participate.

7. Data Retention

We retain personal information only for as long as necessary for the purposes explained in this Policy or as required by law. We consider the service being provided, whether an account or request remains active, the sensitivity of the information, and any applicable payment, tax, security, dispute-resolution or legal requirement.

You may request deletion of your information or account as described in Section 8. We complete deletion or de-identification of information covered by a valid request within 7 business days after we have verified your identity where necessary and confirmed the scope of the request, except where retention is necessary for a disclosed lawful purpose. This period applies to information in our primary systems, backup copies, and information retained by AI service providers or other service providers on our behalf. We instruct those providers to complete the required deletion within the same period.

Information retained to comply with law, preserve evidence, resolve a dispute, prevent fraud, or maintain security is limited to what is necessary for that purpose. Backup copies covered by a valid deletion request are deleted or de-identified within the same 7-business-day period described above, subject to the same lawful-retention exceptions. Withdrawal of AI-sharing permission stops subsequent transfers covered by that permission; a separate deletion request addresses information already retained.

8. Your Privacy Rights

You have the following rights with respect to your personal information, depending on your location and applicable law:

To exercise a privacy right, contact us at support@fypro.ai or use the privacy controls available within the Services. We may verify your identity where necessary before processing your request. We respond to and complete requests within the period required by applicable law, subject to the 7-business-day deletion commitment in Section 7.

You may request account deletion or assistance with disconnecting a platform by contacting support@fypro.ai, or use the relevant account controls where available. Disconnecting a platform does not by itself request deletion of previously saved information or withdraw separate AI-sharing permission. See Section 7 for retained information and Section 5.4 for withdrawal of AI-sharing permission.

8.1 California Residents (CCPA / CPRA)

If you are a California resident, this Section 8.1 supplements the other provisions of this Privacy Policy and describes your rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”).

Subject to applicable law, California residents may have the following rights:

• Right to Know / Access. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected such information, the purposes for collecting, using, or disclosing such information, and the categories of third parties to whom we disclose such information.
• Right to Delete. You may request that we delete personal information we have collected from you, subject to certain exceptions, such as where the information is necessary to provide the Services, complete transactions, prevent fraud, comply with legal obligations, resolve disputes, enforce our agreements, or maintain security.
• Right to Correct. You may request that we correct inaccurate personal information that we maintain about you.
• Right to Opt Out of Sale or Sharing. Where applicable, you may direct us not to sell your personal information or share it for cross-context behavioral advertising, including through a legally recognized opt-out preference signal. You can contact support@fypro.ai to exercise this right or obtain information about available privacy choices.
• Right to Limit Use and Disclosure of Sensitive Personal Information. We may collect certain sensitive personal information, such as tax identification information, payout information, identity verification information, and KYC-related information, where necessary for payment, tax, compliance, fraud prevention, account security, and legal purposes. We use sensitive personal information only for purposes permitted by applicable law and do not use it to infer characteristics about you.
• Right to Non-Discrimination. We will not discriminate against you for exercising your privacy rights, including by denying Services, charging different prices, or providing a different level or quality of Services, except as permitted by applicable law.

For purposes of the CCPA, the categories of personal information we collect, the sources of such information, the purposes for which we use it, and the categories of third parties to whom we disclose it are described in Sections 3, 4, and 5 of this Privacy Policy.

To exercise your California privacy rights, contact us at support@fypro.ai or use the privacy controls available within the Services. We may verify your identity before processing your request.

We will respond as described in Section 8 and complete verified requests within the period required by applicable law, subject to the deletion commitment in Section 7. If an extension is permitted and necessary, we will notify you of the reason and applicable timing as required by law.

You may submit a request through an authorized agent where permitted by applicable law. We may require evidence of the agent's authority and verify your identity as permitted by law.

9. International Data Transfers

Your personal information may be processed in the United States or other countries where we or our service providers operate. Where applicable law requires safeguards for an international transfer, we apply the required protections. You may contact us at support@fypro.ai for information about transfers relevant to your use of the Services.

10. Data Security

We apply technical and organizational safeguards appropriate to the nature of the personal information and the risks of processing to protect it against unauthorized access, use, disclosure, alteration, or loss.

No method of electronic transmission or storage is 100% secure. In the event of a breach triggering notification obligations under applicable law, we will notify affected individuals and regulators as required.

11. Children’s Privacy

The Services are intended for creators and are not directed to children under 18. Individuals below this age are not permitted to create a Fypro account or use the Services.

We do not knowingly collect personal information directly from children below this age. If we learn that we have collected such information, we will promptly investigate and take appropriate steps to stop further collection, use, and sharing, delete the information, and close the associated account, as applicable. Where we are legally required to retain certain information, we will limit its retention and use to that legal requirement.

If you are a parent or legal guardian and believe that your child has provided personal information to Fypro, or that information about your child has been included in content uploaded to the Services, please contact us at support@fypro.ai. You may request that we review the information, delete it, or stop further processing, as applicable under law. We may request limited information necessary to verify your identity and authority before responding.

12. Third-Party Links

The Services may contain links to or integrate with third-party platforms, applications, app stores, or other services. This Privacy Policy does not apply to those third-party services. We encourage you to review their privacy policies.

A third party's own privacy notice does not replace Fypro's obligations for disclosures we make under this Policy, including the permission and protection requirements applicable to our AI service providers in Section 5.4.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We make the updated policy available through our website or mobile applications. If we make material changes, we provide notice through the Services and, where required by applicable law, through additional appropriate channels before the changes take effect.

A policy update or continued use of the Services does not by itself authorize new third-party AI sharing outside the scope of your existing permission. Where a proposed recipient, data category or purpose is not covered by that permission, we provide an updated in-product disclosure and obtain fresh explicit permission before the new sharing occurs.

14. Contact Us