StoreUp Privacy Policy

1. Introduction

This Privacy Policy outlines how StoreUp, referred to as "we", "our", or "us", collects, uses, discloses, and protects personal information in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy applies to merchants who sell on StoreUp, customers who purchase from them, and visitors to the website. By using the StoreUp platform and services, you consent to the handling of your personal information in line with this Privacy Policy.

2. Types of Personal Information We Collect

We collect personal information in line with how you use StoreUp. Sign in and sign up are handled by our authentication provider. That provider processes the credentials and optional profile details you supply there (for example email address, and any name, image, phone number, or social login identifiers you connect, depending on the options you use). In our own database we store your account identifier from that provider, the email address associated with your StoreUp account, and a unique referral code we assign to you. When you complete onboarding or account flows, we may also record referral relationships when you arrive through another user’s referral link. For signed in users we may derive and store a country code and a truncated (anonymized) IP address together with a detection timestamp to support regional features such as payout and tax experiences. Store and profile information you enter in the dashboard or onboarding can include your store name and URL slug, biography text, theme choices, social profile links, optional booking link and label, and images you upload for your profile or cover. Product creation and editing can include product names, short and long descriptions, prices, URL slugs, external URLs for link-based products, product images, digital files you upload, collection names, draft or live status, and aggregated review statistics shown on listings. When someone purchases from your store we record order details including customer name, email, and country where provided, line items and amounts, and internal order references. When buyers access downloadable content we may log the time of download, truncated IP address, and browser user agent for security and abuse prevention. Optional product reviews can include the reviewer’s name, star rating, and written comment. If you save payout details, we store bank or payout account information you submit in encrypted form plus masked values for display, along with the country you select for payout setup. If you submit support, partnership, or affiliate inquiries through our forms, we collect your name, email, message, and inquiry type. If you join an early access or waitlist where we offer one, we collect the email address you submit. We also collect technical and usage information as described in the Cookies and Analytics section. We do not intentionally collect sensitive information as defined under the Privacy Act. If we ever need that kind of information we will tell you and seek consent where the law requires.

3. How We Collect Personal Information

We collect personal information directly from you when you type it into forms, upload files or images, or adjust settings in the product. We collect information automatically when you browse or use the Service, including through cookies and similar technologies. We receive information from integrated services when you take actions that involve them: our authentication provider for account access; payment processors such as Stripe and PayPal for checkout and related fraud and receipt data; and infrastructure or file storage partners that host content you upload. To estimate country for eligible signed in users we may send your IP address or a derived value to third party geolocation services (for example ipapi.co) and, in limited cases, use a public IP lookup endpoint when headers do not yield an address. Most information is collected directly from you, while some is generated by your device or supplied by partners as part of providing the Service.

4. How We Use Your Personal Information

We use personal information to operate and deliver the platform, create and link your store to your account, authenticate you, manage collections and products, host and deliver digital goods, process and record payments and payouts, show analytics to sellers (such as visit counts), send transactional messages such as receipts or security notices, operate referral features, handle support and partnership requests, troubleshoot and secure the Service, run product analytics and experiments, comply with law, and respond to valid legal requests.

5. Disclosure of Personal Information

Personal information may be shared with the seller when you place an order so they can fulfil digital delivery and support. It may be processed by service providers that help us run StoreUp, including authentication, payments, banking and payout verification, hosting, database, file storage, email, customer support tooling, analytics, and security vendors. Information may be disclosed as part of a business transfer such as a merger or acquisition, or when required by law, regulation, court order, or to protect rights, safety, or integrity of users and the Service.

6. Overseas Disclosure of Personal Information

We may store or process data in jurisdictions such as the United States or other regions where our service providers operate. Where this happens, we take steps to make sure overseas recipients handle personal information in line with Australian Privacy Principle 8.

7. Cookies and Analytics

We use cookies and similar technologies that your browser stores for session continuity, preferences, and security where applicable. We use product analytics tools such as Amplitude, and Google Tag Manager with Google measurement tags, to understand usage, conversion, and ecommerce related events (for example views, cart, checkout, purchases, sign in, or sign up, depending on configuration). Those providers may receive identifiers, coarse location, and interaction data according to their own policies. You can control many cookies through your browser settings and can use opt out tools some vendors provide.

8. Security of Personal Information

We use encryption, secure infrastructure, access controls, and monitoring to protect personal information. Payout details are stored in encrypted form. You are responsible for keeping your login details secure and for the content you upload.

9. Data Retention

We keep personal information for as long as needed to provide services, meet legal, tax, and accounting obligations, resolve disputes, and enforce agreements. De-identified or aggregated information may be retained longer.

10. Notifiable Data Breaches

We comply with the Notifiable Data Breaches scheme and will notify affected individuals and the Office of the Australian Information Commissioner if a breach is likely to cause serious harm.

11. Access and Correction of Information

You can request access to or correction of your personal information by contacting hello@storeup.io. We may need to verify your identity before processing the request.

12. Your Rights and Choices

You can update much of your store and profile information inside the dashboard. You can opt out of non-essential communications where we offer them, request account deletion or other privacy requests, or withdraw consent where processing is consent based, by contacting us. Some retention may still apply for legal or security reasons.

13. Children’s Privacy

StoreUp is not intended for users under 16. We do not knowingly collect personal information from children. If you believe we have done so, contact us so we can remove the information.

14. Third-Party Websites

We are not responsible for the privacy practices of external websites linked from StoreUp. You should review their policies independently.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time and will notify users through the website or by email where appropriate. Continued use of StoreUp after an update means you accept the revised policy where the law allows.

16. Contact Us

For privacy questions, contact us at hello@storeup.io. If your concern is unresolved, you may also contact the OAIC.

https://www.oaic.gov.au/privacy/privacy-complaints