PopHatch Privacy Policy

Effective Date: April 2, 2026

PopHatch, Inc. ("PopHatch," "we," "our," or "us") provides an AI-powered software platform for founders and builders. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use our website, applications, software, integrations, tools, features, and related services (collectively, the "Service").

This Privacy Policy should be read together with the PopHatch Terms of Service.

1. Scope

This Privacy Policy applies to personal information we collect:

  • directly from you;
  • automatically when you use the Service;
  • from third-party services you connect; and
  • from service providers, analytics providers, and other third parties as described below.

For purposes of this Privacy Policy, "personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with you, as defined by applicable law.

This Privacy Policy does not apply to:

  • deidentified information;
  • aggregated information that cannot reasonably be linked to you;
  • information publicly available from government records; or
  • information excluded from applicable privacy laws.

Where provider-specific restrictions apply to data obtained through a third-party integration, including Google API Services data, those restrictions supplement this Privacy Policy.

2. Personal Information We Collect

2.1 Information you provide to us

Depending on how you use the Service, we may collect:

  • account information, such as your name, email address, password, username, profile details, company or project information, and onboarding responses;
  • content you submit, such as prompts, notes, files, links, documents, uploads, support communications, business materials, hypotheses, tasks, goals, and other User Content;
  • communications, such as support requests, survey responses, feedback, and other correspondence; and
  • billing and transaction information, such as plan selection, subscription status, billing address, and payment-related metadata. Payment card information is typically processed directly by our payment processor and not stored by PopHatch, except as necessary to confirm transactions, prevent fraud, or comply with law.

2.2 Information we collect automatically

When you use the Service, we may automatically collect:

  • device and browser information, such as device type, operating system, browser type, language, and settings;
  • network and usage information, such as IP address, approximate location derived from IP, pages viewed, clicks, referring URLs, timestamps, session information, interactions with the Service, and crash or performance logs; and
  • cookie, local storage, and similar technical information used for site functionality, analytics, security, and performance.

2.3 Information from third parties and connected services

If you connect a third-party account or integration, we may receive information from that service as authorized by you. This may include analytics data, files, documents, calendar data, communications data, workspace data, or other connected-service data depending on the integration you choose to enable.

We may also receive information from:

  • payment processors;
  • analytics providers;
  • cloud and infrastructure providers;
  • identity, fraud prevention, and security vendors; and
  • other service providers that help us operate the Service.

3. How We Use Personal Information

We may use personal information to:

  • provide, operate, maintain, and support the Service;
  • create and manage accounts;
  • process subscriptions, payments, renewals, and billing;
  • authenticate users and secure accounts;
  • generate outputs, summaries, recommendations, signals, and other user-facing features;
  • personalize your experience and improve the relevance of recommendations and workflows;
  • analyze usage, performance, reliability, and product trends;
  • develop, test, improve, fine-tune, and optimize our models, systems, safety mechanisms, and related technology, as described below;
  • communicate with you about the Service, your account, updates, transactions, support matters, and marketing communications you choose to receive;
  • prevent fraud, abuse, security incidents, and other harmful or unlawful activity;
  • enforce our terms, policies, and legal rights; and
  • comply with law, legal process, tax, accounting, and regulatory obligations.

4. AI Features, Model Improvement, and User Content

PopHatch uses artificial intelligence, automation, and related technologies to provide the Service.

4.1 Inputs and outputs

When you use AI features, we may process prompts, instructions, notes, files, connected-service data, and other content you submit, as well as the outputs generated in response.

4.2 Training and improvement

Except as otherwise described in this Privacy Policy or disclosed for a specific integration or feature, we may use your User Content, Inputs, and Outputs to:

  • provide the Service;
  • improve product quality and performance;
  • evaluate and test model behavior;
  • fine-tune and optimize our systems;
  • develop new features and workflows; and
  • improve the accuracy, safety, and usefulness of the Service.

4.3 What we do not use for generalized model training

We do not use:

  • payment card data for generalized AI model training;
  • sensitive personal information that you are prohibited from providing through the Service for generalized AI model training; or
  • Google user data or other provider-restricted data for generalized or cross-user AI model training where the relevant provider's rules prohibit that use.

4.4 Outputs

AI-generated outputs may not be unique, may contain errors, and may be similar to outputs generated for other users. Please review outputs carefully before relying on them.

5. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients:

5.1 Service providers, contractors, and processors

We disclose personal information to vendors and service providers that help us operate the Service, including hosting, storage, infrastructure, customer support, analytics, communications, payment processing, security, fraud prevention, and AI or model providers.

5.2 Analytics and measurement providers

We may disclose identifiers, device information, usage information, and similar data to analytics and measurement providers to understand traffic sources, measure product usage, analyze performance, and improve the Service.

5.3 Connected services at your direction

If you connect a third-party service, we may disclose or exchange data with that service as necessary to provide the integration or complete your request.

5.4 Legal and compliance disclosures

We may disclose personal information to courts, regulators, law enforcement, government authorities, or other third parties when we believe disclosure is required or appropriate to:

  • comply with law or legal process;
  • protect safety, rights, or property;
  • detect, investigate, or prevent fraud, abuse, or security issues; or
  • enforce our agreements and policies.

5.5 Corporate transactions

We may disclose personal information in connection with an actual or proposed merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction.

5.6 With your direction or consent

We may disclose personal information when you direct us to do so or otherwise consent.

6. Cookies, Analytics, and Similar Technologies

We and our service providers may use cookies, local storage, and similar technologies to:

  • keep you signed in and remember preferences;
  • operate core site and application functionality;
  • measure traffic, product usage, and performance; and
  • improve the Service.

Depending on your browser and device, you may be able to control cookies through browser settings. Blocking some cookies may affect the functionality of the Service.

7. Google User Data and Other Provider-Restricted Data

If you choose to connect a Google account or another provider subject to provider-specific data restrictions, we will handle that data in accordance with the permissions you grant, this Privacy Policy, and any applicable provider rules.

For Google user data accessed through Google APIs:

  • we request only the permissions reasonably necessary for the user-facing features we offer;
  • we use the data only for the features and purposes disclosed to you;
  • we do not use Google user data to serve ads;
  • we do not sell Google user data;
  • we do not use Google user data to create, train, or improve generalized or cross-user machine learning or artificial intelligence models where Google's policies prohibit that use;
  • we may process Google user data to provide or improve the specific user-facing feature for the relevant user, subject to applicable Google policy restrictions; and
  • you may revoke our access through your Google account settings at any time.

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Retention

We retain personal information only for as long as reasonably necessary and proportionate for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention depends on the type of information and the reason we have it. In general:

  • account, profile, and subscription data are retained while your account is active and for a reasonable period afterward to maintain the Service, complete transactions, resolve disputes, enforce agreements, and comply with law;
  • User Content, Inputs, Outputs, and connected-service data are retained for as long as needed to provide the Service and maintain backups, support security and fraud prevention, investigate issues, comply with law, and support permitted service improvement, subject to applicable law and provider-specific restrictions;
  • billing and transaction records are retained as needed for accounting, tax, payment processing, dispute resolution, and legal compliance;
  • communications and support records are retained as needed for support, service improvement, dispute resolution, and legal compliance;
  • analytics, log, and technical data are retained for as long as needed for security, debugging, fraud prevention, usage analysis, and product improvement; and
  • deidentified and aggregated information may be retained so long as it cannot reasonably be used to identify you.

If you request deletion, we will process your request in accordance with applicable law. We may retain information only where permitted by law, including for security, fraud prevention, legal compliance, dispute resolution, backup integrity, and deidentified or aggregated use.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information. These measures include access controls, encryption where appropriate, logging, monitoring, and vendor management.

No method of transmission or storage is completely secure. You are responsible for keeping your account credentials confidential and for notifying us promptly if you suspect unauthorized use of your account.

10. Your Rights and Choices

Depending on where you live and subject to applicable exceptions, you may have the right to:

  • know what personal information we collect, use, or disclose;
  • access or obtain a copy of your personal information;
  • correct inaccurate personal information;
  • delete personal information;
  • receive personal information in a portable format, where required by law and technically feasible;
  • withdraw consent where we rely on consent;
  • appeal a privacy request decision, where applicable; and
  • not receive discriminatory treatment for exercising privacy rights.

10.1 How to exercise your rights

You may submit privacy requests by contacting us at hello@pophatch.com.

If you have an account, you may also be able to access, update, or delete certain information through your account settings or other in-product tools.

We may take reasonable steps to verify your identity before responding to a request. You may designate an authorized agent to make certain requests on your behalf where permitted by law.

If we deny your request and applicable law provides an appeal right, you may appeal by emailing hello@pophatch.com with the subject line Privacy Appeal.

10.2 Marketing choices

You can opt out of marketing emails by using the unsubscribe link in the message or by contacting us at hello@pophatch.com. We may still send non-marketing messages about your account, subscriptions, billing, security, and the Service.

10.3 Cookie and browser choices

You may be able to control cookies and similar technologies through your browser settings, operating system settings, or industry tools.

11. International Transfers

PopHatch operates in the United States and may process personal information in the United States and other countries where we or our service providers operate. Those countries may have data protection laws that differ from the laws of your jurisdiction.

Where required by applicable law, we use contractual, technical, and organizational measures designed to provide appropriate safeguards for cross-border transfers.

PopHatch offers a Data Processing Addendum for customers subject to GDPR or similar data-processing requirements. Contact hello@pophatch.com to request one.

12. Children's Privacy

The Service is intended for users who are 18 years old or older. We do not knowingly collect personal information from children under 18 through the Service. If you believe a child has provided us personal information, contact us at hello@pophatch.com and we will take appropriate steps.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we do, we will post the updated version and revise the Effective Date above. If required by law, we will provide additional notice.

If a change materially affects how we use personal information previously collected from you, we will provide any additional notice or obtain any additional consent required by applicable law before applying the change to that previously collected information.

Your continued use of the Service after the updated Privacy Policy becomes effective means the updated Privacy Policy will apply to your use of the Service, subject to applicable law.

14. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, contact us at:

Email: hello@pophatch.com

Mailing Address:
PopHatch, Inc.
5725 S Valley View Blvd Ste 5 PMB 578653
Las Vegas, NV 89118-3122