Fypro Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how Genstore Inc. (“Genstore,” “we,” “our,” or “us”), as the owner and operator of Fypro, collects, uses, discloses, and protects personal information when you access or use the fypro.ai website, platform, products, tools, and related services, including any AI-powered features made available through fypro.ai (collectively, the “Services”).

This Privacy Policy does not apply to the personal data of end-consumers who purchase products from a Creator’s storefront. End-consumers who purchase products from a Creator’s Storefront should review the applicable Creator’s privacy policy for information about how the Creator collects, uses, and shares buyer information in connection with the Creator’s customer relationship, marketing, and sales activities.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Services.

2. Who We Are

Fypro is responsible for personal information collected through the Services. Our registered address is: 5716 Corsa Ave, Suite 110, Westlake Village, California 91362.

For privacy-related inquiries, please contact us at support@fypro.ai.

3. Information We Collect

3.1 Account and Identity Information

When you create an account, we collect:

• Email address and password (for direct registration);

• Third-party OAuth identifiers and linked email address when you register or log in via Google; and

• Contact information you choose to provide.

We use this information for account creation, identity verification, login authentication, and account management.

3.2 Tax and Payout Information

To enable withdrawals from your earnings, we collect:

• A completed Form W-9 (for U.S. persons) or Form W-8BEN / W-8BEN-E (for non-U.S. persons);

• Tax identification number (e.g., SSN, EIN, or foreign tax ID), to the extent required by U.S. tax law;

• PayPal account or other payout destination details; and

• Bank account information where you elect a bank-transfer payout method.

We collect this information at or before your first withdrawal and on an ongoing basis as required by applicable tax and financial reporting law (including reporting on IRS Forms 1099-K and 1042-S, where applicable).

Some tax, payout, and verification information may be considered sensitive personal information under applicable privacy laws. We use such information only for payment, tax, compliance, fraud prevention, and account-security purposes.

3.3 Verification Information (Where Applicable)

For payment options that require enhanced due diligence — including Drop Pay where required or enabled for the relevant transaction or payout flow — we collect identity documents, beneficial-owner information, business registration documents, and other Know-Your-Customer (“KYC”) information required under applicable anti-money-laundering, sanctions, and financial regulation.

3.4 Storefront, Product, and Order Data

We collect information you provide to set up and operate your storefront, including: storefront name and configuration, custom domain settings, product selections (DS / POD catalog selections, product albums, listings), pricing, fulfillment preferences, and order history.

In connection with orders placed by your buyers, we process buyer name, shipping address, contact details, order and payment data, and communications with the buyer that pass through our platform. With respect to such buyer data:

• For buyer information processed through the Services, the applicable privacy responsibilities depend on the product type, payment method, and processing purpose. The Creator is responsible for its own customer relationship, marketing, advertising, and merchant-controlled use of buyer information. Fypro processes buyer information as a platform provider and service provider to the extent necessary to operate the Services, process orders, coordinate fulfillment, support payment and settlement, prevent fraud, maintain security, and comply with tax and legal obligations. For DS/POD orders processed through Drop Pay, Fypro and/or its affiliates may also process certain buyer information for their own compliance, payment, settlement, fraud-prevention, and tax-reporting purposes

• For sales using third-party payment processors (e.g. PayPal), the Creator is the controller of buyer data, and Fypro acts as a service provider on the Creator’s behalf to the extent we process such data through the platform.

• Creators are responsible for providing any buyer-facing privacy notices required for their own Storefront, customer relationship, marketing, and sales activities.

3.5 Content and Creative Materials

When you use our content creation, ideation, and project tools, the topic library, scheduled posts, and project workflows — we collect drafts, scheduled content, media uploads, and project metadata.

3.6 Third-Party Platform Connection Data

Our services allow you to connect third-party platforms (“Connectors”) that you choose to enable. When you activate a Connector, we may access and process data from the authorized platform to provide the requested functionality, including analytics, scheduled posting, account diagnostics, and competitor tracking.

The platforms supported at launch include: TikTok.

TikTok Account Connection. If you choose to connect your TikTok account to Fypro, we may access and process certain TikTok account information authorized by you and permitted by TikTok, including your profile information, profile image, display name, username or profile ID, access tokens, content you upload, post, or schedule through the Services, and engagement or performance metrics such as likes, comments, shares, re-shares, impressions, reach, views, and other general engagement counts. We use TikTok Connector data only to provide the TikTok-related features you request, including account connection, content scheduling or posting, analytics, account diagnostics, campaign or performance tracking, and related service functionality. We do not sell TikTok Connector data or use it for unrelated purposes. We may share such data only as necessary to provide the Services, comply with applicable law, protect security, or as otherwise authorized by you. TikTok may independently process your information under its own terms and privacy policy.

You can view and manage Connectors in your account settings. We only access data from platforms you have explicitly authorized and only for the purposes you have directed. We use this data solely to perform the tasks you direct us to carry out on your behalf and do not use it for unrelated purposes.

API Key Security: Credentials and access tokens you provide are encrypted at rest using AES-256 and in transit using TLS 1.2 or higher, and accessed only to the extent necessary to carry out your authorized tasks.

3.7 Device and Network Information

We automatically collect IP address, browser type and version, operating system, device identifiers, and log data (access times, pages visited, error logs). We use this information for security monitoring, fraud prevention, service stability, and audit logging.

3.8 Usage Data

We collect records of how you use the Services, including session history, module usage, scheduled task execution records, GMV data, and content output history. We use this to provide session continuity and history display features, and may use aggregated, de-identified data for product improvement.

3.9 Subscription Payment Information

Payment processing for subscription fees and credits, where applicable, is handled by our third-party payment processor. We do not store your full credit card number. We receive only the last four digits, transaction date, amount, and card type for billing and support purposes.

3.10 AI-Assisted Features

If you use AI-assisted features, we collect and process your inputs (text prompts, uploaded files, account data necessary for analysis) to generate the requested output. AI inputs may be transmitted to and processed by third-party AI service providers acting as our service providers. Such providers are contractually prohibited from using your inputs to train their models. See Section 5 for details.

3.11 Cookies, Analytics, and Do Not Track Signals

We may use cookies, pixels, SDKs, local storage, and similar technologies for authentication, security, analytics, service operation, product improvement, and, where applicable, marketing attribution.

We do not currently sell personal information or share personal information for cross-context behavioral advertising. If our practices change, we will update this Privacy Policy and provide any legally required opt-out mechanism.

Some browsers offer “Do Not Track” signals. Because there is no uniform industry standard for responding to such signals, we do not currently respond to browser Do Not Track signals. We will honor legally required opt-out preference signals, such as Global Privacy Control, where required by applicable law.

4. How We Use Your Information

We will not use your personal information for purposes materially different from those described above without providing you prior notice and, where required, obtaining your consent.

5. How We Share Your Information

We do not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising. We disclose your information only as described below.

5.1 Payment, Settlement, and Payout Service Providers

We share information with our payment partners — including PayPal and other payout or payment partners where applicable, strictly for the purposes of processing transactions, calculating and settling amounts due to you, paying out funds, and complying with anti-fraud, anti-money-laundering, and tax reporting obligations.

5.2 Fulfillment and Supplier Partners

For DS and POD orders, we share necessary order details (including buyer shipping address and product configuration) with the third-party supplier or print-on-demand provider responsible for fulfilling the order. We do not share more information than is necessary to fulfill the order.

5.3 Tax Authorities

We file required tax forms (e.g., Form 1099-K, Form 1042-S) and report withholdings to the U.S. Internal Revenue Service and, where applicable, to state or foreign tax authorities.

5.4 AI Service Providers

We use third-party AI service providers to operate AI-assisted features. When you use such features, your inputs may be transmitted to and processed by these providers for the purpose of generating responses and delivering requested functionality. We do not authorize these service providers to use your data for purposes other than providing services to us, and they are contractually prohibited from using your inputs to train their models.

5.5 OAuth Login Providers

If you log in via Google, we exchange identity tokens with those platforms solely to authenticate you.

We do not use information from these providers for advertising and do not share your Fypro data back to them.

5.6 User-Authorized Connectors

When you enable a Connector, we access the authorized platform data solely to carry out your instructions. We do not proactively transmit your data to those platforms beyond what is required to complete your authorized tasks. Third-Party Services may independently process information under their own terms and privacy policies.

5.7 Other Service Providers

We engage service providers for cloud hosting, analytics (aggregated data only), email delivery, and customer support. All are bound by contractual data protection obligations consistent with this Privacy Policy.

5.8 Legal Requirements and Business Transfers

We may disclose your information: (a) when required by applicable law or court order; (b) to enforce our Terms of Service or protect our rights; (c) to prevent fraud or harm; or (d) in connection with a merger, acquisition, or asset sale, provided the acquiring entity is bound by obligations at least as protective as this Privacy Policy.

6. AI Model Training

We do not use your conversation data, uploaded files, content drafts, or task instructions to train any AI model. Our AI service providers are contractually prohibited from using your data for model training.

Your data is used solely to provide the Services to you.

If we decide in the future to use Creator data for AI training, we will: (a) update this Privacy Policy and provide you prior notice; (b) operate any such program on an opt-in basis only; (c) provide a clear opt-in control in your account Settings; and (d) upon withdrawal of consent, exclude your historical data from future training datasets.

7. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes in this Privacy Policy or as required by law.

Legal Hold: We may retain data beyond the periods above where required to comply with a legal obligation, establish or defend legal claims, or respond to a regulatory inquiry or preservation order.

You may request deletion of your data or account at any time (see Section 8). We will delete or de-identify personal information associated with your active account within a reasonable period after account deletion, subject to backup rotation, fraud-prevention, payment, tax, legal, regulatory, dispute-resolution, and security-retention requirements.

8. Your Privacy Rights

You have the following rights with respect to your personal information, depending on your location and applicable law:

To exercise any right, contact us at support@fypro.ai or through the Privacy Rights section of your account Settings. We will respond within 45 days. We may verify your identity before processing your request.

8.1 California Residents (CCPA / CPRA)

If you are a California resident, this Section 8.1 supplements the other provisions of this Privacy Policy and describes your rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”).

Subject to applicable law, California residents may have the following rights:

• Right to Know / Access. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected such information, the purposes for collecting, using, or disclosing such information, and the categories of third parties to whom we disclose such information.

• Right to Delete. You may request that we delete personal information we have collected from you, subject to certain exceptions, such as where the information is necessary to provide the Services, complete transactions, prevent fraud, comply with legal obligations, resolve disputes, enforce our agreements, or maintain security.

• Right to Correct. You may request that we correct inaccurate personal information that we maintain about you.

• Right to Opt Out of Sale or Sharing. We do not sell your personal information or share your personal information for cross-context behavioral advertising. If our practices change in the future, we will update this Privacy Policy and provide any legally required opt-out mechanism.

• Right to Limit Use and Disclosure of Sensitive Personal Information. We may collect certain sensitive personal information, such as tax identification information, payout information, identity verification information, and KYC-related information, where necessary for payment, tax, compliance, fraud prevention, account security, and legal purposes. We use sensitive personal information only for purposes permitted by applicable law and do not use it to infer characteristics about you.

• Right to Non-Discrimination. We will not discriminate against you for exercising your privacy rights, including by denying Services, charging different prices, or providing a different level or quality of Services, except as permitted by applicable law.

For purposes of the CCPA, the categories of personal information we collect, the sources of such information, the purposes for which we use it, and the categories of third parties to whom we disclose it are described in Sections 3, 4, and 5 of this Privacy Policy.

To exercise your California privacy rights, you may contact us at support@fypro.ai or submit a request through the Privacy Rights section of your account Settings. We may verify your identity before processing your request. You may also authorize another person to submit a request on your behalf, where permitted by applicable law.

We will respond to verified requests within the time period required by applicable law. If we need additional time, we will notify you in accordance with applicable law.

To submit a CCPA request, contact us at support@fypro.ai.

9. International Data Transfers

Creators may be located worldwide. Where you are located outside the United States, we may transfer your personal information to the United States or to other countries where our service providers are located.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS 1.2 or higher;

• Encryption of sensitive credentials at rest using AES-256;

• Access controls and least-privilege principles;

• Regular security assessments and vulnerability monitoring; and

• Incident response and breach notification procedures.

No method of electronic transmission or storage is 100% secure. In the event of a breach triggering notification obligations under applicable law, we will notify affected individuals and regulators as required.

11. Third-Party Links

The Services may contain links to or integrate with third-party platforms. This Privacy Policy does not apply to those services. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on our website, updating the “Last Updated” date, and, where required by law or where appropriate, providing additional notice through email or in-product notification.

13. Contact Us