Privacy policy

This policy applies to the SayPop website and store, customer support, and any SayPop-connected product or service that links to it. SayPop is responsible for the personal information described here. Some checkout, payment, delivery, and connected-service providers also process information under their own privacy notices.

Depending on how you use SayPop, we may collect:

• Order information: name, email, billing and delivery addresses, order details, payment confirmation, and transaction history.
• Support information: messages, attachments, order number, return details, and feedback you send us.
• Device and creative information: device identifiers, settings, diagnostics, voice requests or transcriptions, generated prompts or images, and feature activity when connected features are used.
• Website information: IP address, browser and device type, pages viewed, referring pages, approximate location, and cookie or similar identifier data.
• Marketing preferences: whether you asked to receive or stop receiving promotional messages.

Payment card details are normally collected directly by the payment processor. We receive payment status and limited transaction details, not the full card number.

We collect information from you, automatically from the website or a connected product, and from service providers such as Shopify, payment processors, carriers, analytics providers, fulfillment partners, and customer-support tools.

We use personal information to:

• accept payment, fulfill orders, deliver purchases, and manage returns;
• provide requested voice-to-image and printing features;
• set up, secure, troubleshoot, and support products and services;
• communicate about orders, safety, service updates, and support;
• understand performance and improve our website, products, and services;
• prevent fraud, abuse, harmful content, and security incidents;
• send marketing only as allowed by law and your preferences; and
• meet legal, tax, accounting, product-safety, and regulatory duties.

Where GDPR or UK GDPR applies, we rely on performance of a contract, compliance with law, consent, or legitimate interests such as security, support, and improving our service. We balance those interests against your rights. You may withdraw consent at any time without affecting earlier lawful processing.

The store and purchasing process are intended for adults. A parent or legal guardian must purchase, set up, and supervise a child's use of connected SayPop features.

If a connected feature collects a child's voice or other personal information, we will provide the adult with notice and obtain verifiable parental consent where required before collection. We will limit the information to what is reasonably needed to provide and protect the feature, use high-privacy defaults, avoid targeted advertising to children, and retain the information only as long as reasonably needed for the disclosed purpose or required by law.

A parent or guardian may ask to review, correct, or delete a child's information, revoke consent, or stop further collection by emailing us. We may verify identity and parental authority before acting.

We may share information with:

• Shopify, payment processors, fraud-prevention providers, and banks;
• hosting, analytics, support, email, connected-device, voice-processing, and image-generation providers;
• warehouses, fulfillment partners, carriers, and returns providers;
• professional advisers, insurers, regulators, courts, and authorities where reasonably necessary; and
• a buyer or successor in a merger, financing, reorganization, or sale, subject to legal safeguards.

We do not sell personal information for money. We do not knowingly sell or share children's personal information for targeted advertising. If we later use a practice treated as a “sale,” “sharing,” or targeted advertising under applicable US state law, we will provide the required notice and opt-out method before doing so.

We and our providers may use cookies, pixels, local storage, and similar technology for checkout, security, preferences, and basic analytics. Where required, non-essential technology will not be used until you make a choice. You can also control cookies through your browser, but blocking essential cookies may prevent checkout or other features from working.

We keep information only as long as reasonably needed for the purposes above, including warranty, safety, fraud, tax, accounting, and dispute requirements. Retention varies by record type and location. We then delete or de-identify it unless the law requires longer storage.

We use reasonable administrative, technical, and physical safeguards. No system is completely secure, so please use a strong password where applicable and contact us if you suspect unauthorized activity.

SayPop and its providers may process information outside your country. Where required, we use recognized safeguards for international transfers, such as adequacy decisions or approved contractual clauses.

Depending on where you live, you may ask us to access, correct, delete, restrict, or provide a portable copy of your personal information; to object to certain processing; to withdraw consent; or to opt out of targeted advertising, sale, or sharing. You may also appeal a denied request where local law provides that right.

We will not discriminate against you for exercising a privacy right. We may need to verify your identity and authority. An authorized agent may submit a request where permitted by law. You may also complain to your local data-protection or privacy regulator, including an EU/EEA supervisory authority, the UK ICO, the OAIC in Australia, or the New Zealand Privacy Commissioner.

We may update this policy when our practices, products, or legal duties change. We will post the new date here and provide additional notice when the law requires it. Material changes will not be applied retroactively where prohibited.