Hit Plus Privacy Policy
Platform Operator: POPisM INC
Hit Plus (collectively, the “Product,” “Hit Plus,” or the “Service”) is operated by POPisM INC.
The Platform Operator complies with applicable U.S. federal and state privacy and data protection laws, regulations, and industry standards. To protect users’ personal information and address privacy-related inquiries, complaints, and disputes in a timely and effective manner, the Platform Operator has adopted and published this Privacy Policy.
By accessing or using the Product or any of its features, you acknowledge that you have read, understood, and agreed to this Privacy Policy. The Platform Operator may update this Privacy Policy from time to time by posting the revised version on the official website or within the App. Unless otherwise required by applicable law, any update will take effect upon posting or on the effective date specified in the revised policy. You are encouraged to review this Privacy Policy periodically. Your continued use of the Service after an updated Privacy Policy takes effect constitutes your acknowledgment of the revised policy.
Individuals under 18 years of age may not register for, access, or use the Service unless a parent or legal guardian has first reviewed, understood, and expressly agreed to this Privacy Policy, including any amendments thereto. By submitting a registration application, creating an account, or otherwise accessing or using the Service, the User represents and warrants that all required parental or legal guardian consent has been duly obtained.
1. Network Access and Privacy Principles
An active internet connection is required to access and use the Service. You are responsible for maintaining a working Wi-Fi or mobile data connection and for any fees charged by your internet or wireless service provider. If internet access is unavailable or disabled, some or all features of the Service may not function properly. The Platform Operator will provide appropriate notice regarding its data practices and obtain consent where required by applicable law. Personal information will be collected and processed only for specific, lawful, and disclosed purposes.
The Platform Operator will collect, use, disclose, and retain personal information only as reasonably necessary for the purposes described in this Privacy Policy, except as otherwise permitted or required by applicable law. The Platform Operator will take reasonable steps to maintain the accuracy, completeness, and relevance of personal information and will implement appropriate administrative, technical, and physical safeguards to protect it. The Platform Operator will also provide clear and accessible information about its privacy practices. Subject to applicable law, users may have the right to access, correct, or delete their personal information and exercise other rights described in this Privacy Policy. The Platform Operator will provide appropriate methods for submitting privacy requests and will respond to privacy-related questions, complaints, and feedback in accordance with applicable law.
2. Scope of This Privacy Policy
This Privacy Policy applies to personal information collected, received, or processed in connection with your access to or use of the App, websites operated by the Platform Operator, related features and services, communications, transactions, promotions, events, customer support, and information received from service providers, business partners, affiliates, other Users, or other third parties. The App, related websites, and all associated features and services are collectively referred to as the “Service.” For purposes of this Privacy Policy, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an identifiable individual or household, as defined by applicable law, regardless of whether the information is maintained electronically, in writing, or in another recorded form. Aggregated, anonymized, or deidentified information that cannot reasonably be used to identify or be linked to a particular individual is generally not considered personal information, except as otherwise provided by applicable law.
3. Purposes for Processing Personal Information
The Platform Operator processes personal information only for the specific purposes described below and will not process personal information beyond the scope reasonably necessary for those purposes.
| Purpose | Description |
|---|---|
| Account Registration and Management | Identifying and authenticating users, creating user accounts, verifying membership eligibility, and administering accounts |
| Providing the Service and Performing Contracts | Processing product orders, payments, shipping and delivery, and delivery of digital content |
| Customer Support | Responding to inquiries, handling complaints and disputes, and delivering important notices and announcements |
| Marketing and Advertising—Subject to Separate Express Consent | Sending promotional offers and event notifications and providing personalized recommendations |
| Security and Fraud Prevention | Detecting unusual account activity, preventing transaction fraud, managing risk, and protecting the security and integrity of the Service |
| Legal and Regulatory Compliance | Maintaining legally required records and conducting compliance reviews and audits |
4. Categories and Sources of Personal Information
Personal information necessary to provide the core features of the Service may be collected, including information required to create an account, place an order, or access essential functions. Optional information may also be collected when you choose to provide or authorize it for additional features. Declining to provide such information will generally not affect your ability to use the Service’s core features. In addition, certain information may be collected automatically when you access or use the Service, including IP addresses, cookies, device and access logs, usage data, transaction records, and payment-related information.
Personal Information We May Collect
| Category | Examples of Personal Information |
|---|---|
| Identity Information | Name, date of birth, and gender |
| Account Information | Account or member ID and encrypted login password |
| Contact Information | Mobile phone number and email address |
| Shipping Information | Recipient’s name, mobile phone number, and shipping address |
| Payment Information | Payment account or card information required by the selected payment method. Payment transactions are processed by third-party payment processors, and Hit Plus does not retain complete payment card numbers or similar sensitive payment credentials. |
| Device, Technical, and Log Information | Mobile device model, operating system, device settings, unique device identifiers, including IMEI, IMSI, IDFV, IDFA, Android Advertising ID, MAC address, SIM card information, device manufacturer, mobile carrier, language settings, browser type, IP address, access dates and times, and related usage and diagnostic information |
How We Collect Personal Information
1. Information You Provide and Third-Party Sign-In
Personal information may be collected directly from you when you create an account through the official website or App, place an order, contact customer support, or participate in promotions or marketing activities. Account registration may require information such as your mobile phone number, email address, username, and password. You may browse the Service and view available sets without an account, but registration may be required to place orders, make payments, or request delivery. If you sign in using a verification code sent by text message, you authorize the use of SMS functionality as necessary to complete authentication. If you sign in through a third-party account, such as Google or Facebook, information authorized for disclosure by that provider may be received, including your display name, profile image, region, gender, and email address, depending on your settings and the provider’s policies. With your authorization, this information may be linked to your account.
2. Information Collected Automatically and for Security Purposes
Device, technical, usage, and log information may be collected automatically when you access or use the Service. This information may be used to detect unusual activity, assess transaction and fraud risks, protect the security and integrity of the Service, diagnose technical issues, and improve performance across devices and operating systems. Where permitted by applicable law, limited device information may also be accessed to determine whether supported third-party login applications are available, and device identifiers, such as an IMEI or MAC address, may be collected for order processing, delivery, account security, transaction protection, and fraud prevention. Information that does not identify you on its own will be treated as personal information when combined with other information that identifies or can reasonably be linked to you. Such information may also be aggregated, anonymized, or deidentified where appropriate.
3. Feature Activity and Order Information
Your use of features such as Inventory, temporary storage, restock or availability alerts, and content sharing may be recorded. Notifications require your permission and may be managed through your device settings. When you place an order, an order record may be created that includes item or Prize details, order and transaction numbers, order and payment dates, shipping and tracking information, and the total amount paid. If you provide another person’s personal information for an order, you represent that you have obtained that person’s authorization.
4. Payments, Fulfillment, and Delivery
When you make a payment, payment-status and transaction information may be exchanged with payment processors, such as PayPal, to verify payments, maintain records, process refunds, provide customer support, and resolve disputes. Payment card or bank account details may be collected directly by the applicable payment processor, and complete payment card numbers are not retained unless expressly disclosed. To process and deliver an order, the minimum information reasonably necessary may be shared with carriers, purchasing agents, customs brokers, overseas e-commerce platforms, and other fulfillment providers. This information may include the recipient’s name, contact details, shipping address, item or prize information, package details, and delivery instructions. Tracking and delivery-status information may also be received from these providers. Where required for customs clearance, the recipient’s Personal Customs Clearance Code (“PCCC”) may be collected and disclosed solely to complete customs processing and delivery.
5. Customer Support, User Content, and Device Permissions
When you contact customer support or submit a refund, after-sales, complaint, or dispute request, information reasonably necessary to verify your identity, investigate the matter, and respond may be collected and retained. This may include communications, account details, order and transaction records, shipping information, photographs, screenshots, receipts, and other supporting materials. If you upload content, post comments, use camera-based features, or submit supporting materials, access to your camera, photo library, device storage, or microphone may be requested only where necessary for a feature you choose to use. These permissions may be managed or revoked through your device settings. Published content may also be deleted through available account or content-management features, subject to retention required by law or reasonably necessary for fraud prevention, dispute resolution, or enforcement of applicable agreements.
To the extent permitted or required by applicable law, personal information may be collected, used, retained, or disclosed without additional consent where reasonably necessary to comply with legal obligations or lawful government requests; protect public safety, health, life, property, or other substantial legal rights; detect, prevent, investigate, or prosecute fraud, security incidents, or unlawful activity; process information you have intentionally made public or that has been lawfully obtained from public or government sources; maintain the security and operation of the Service; take steps at your request before entering into a contract or perform a contract with you; conduct deidentified or aggregated research permitted by law; or fulfill another lawful purpose. The availability and scope of these exceptions may vary under applicable U.S. federal and state laws.
5. Cookies and Similar Technologies
To support the operation of the website and App and provide a more personalized experience, cookies and similar technologies may be used to store or access identifiers, preferences, website data, and other information on your device. These technologies may help remember your settings, maintain your shopping cart and Inventory, keep you signed in, analyze how you use the Service, improve performance and functionality, and provide other features described in this Privacy Policy. You may manage, block, or delete cookies through your browser or device settings, but doing so may limit features such as automatic sign-in, saved preferences, shopping cart functions, and other personalized services. Where cookies, advertising identifiers, pixels, SDKs, or similar technologies are used for targeted or cross-context behavioral advertising, or for activities considered a sale or sharing of personal information under applicable U.S. state privacy laws, any required notices and opt-out options will be provided.
6. Disclosure, Service Provider Processing, and Transfer of Personal Information
6.1 Service Providers and Business Operations
Personal information may be disclosed to service providers and business partners where reasonably necessary to operate, secure, analyze, and improve the Service. These recipients may include customer support providers, shipping carriers, fulfillment and warehousing providers, payment processors, financial institutions, cloud and technology providers, external e-commerce platforms, purchasing agents, SMS providers, analytics providers, professional advisers, and fraud-prevention and risk-management providers.
6.2 Transaction, Shipping, and Cross-Border Fulfillment
For payment processing, order fulfillment, proxy purchasing, cross-border transactions, customs clearance, and delivery, the minimum account, order, payment, shipping, customs, and contact information necessary to complete the transaction may be disclosed. Recipients may process this information only for the stated purpose and must protect it in accordance with applicable contractual and legal requirements.
6.3 Analytics, SDKs, and Deidentified Information
Third-party software development kits and analytics technologies may be used to support service operation, performance measurement, fraud prevention, and product improvement. Aggregated, anonymized, or deidentified information may also be disclosed for analytics, service improvement, and promotional measurement. Where required by law, appropriate disclosures will be provided regarding the relevant providers, purposes, and categories of information.
6.4 Legal Disclosures and Business Transfers
Personal information may be disclosed with your consent or at your direction; to comply with a valid subpoena, court order, warrant, investigative demand, or other lawful request; or to protect the rights, property, and safety of the Platform Operator, its Users, or others. Personal information may also be transferred in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction. Any successor or recipient must process the information in accordance with this Privacy Policy and applicable law. Any materially different use will be subject to any additional notice or consent required by law.
6.5 Public Disclosure, Sale, and Sharing
Personal information will be publicly disclosed only at your direction, when you choose to publish it through a public feature of the Service, or where disclosure is required by law or legal process. Personal information is not sold or rented solely for monetary consideration unless expressly disclosed and permitted by law. However, certain disclosures may be considered a “sale,” “sharing,” or use for “targeted advertising” under applicable U.S. state privacy laws, even where no monetary payment is exchanged.
7. Retention and Disposal of Personal Information
Personal information will be retained only for as long as reasonably necessary to provide and administer the Service, complete transactions and deliveries, comply with legal, tax, accounting, and regulatory obligations, prevent fraud, maintain security, resolve disputes, and establish, exercise, or defend legal claims. When the information is no longer needed, it will be deleted, anonymized, or deidentified, unless continued retention is permitted or required by applicable law.
| Record Category | Retention Period | Basis |
|---|---|---|
| Account and Membership Information | Until account deletion is completed, subject to legally required or permitted post-deletion retention | Operational necessity and account administration |
| Contract and Order Cancellation Records | 5 years | Tax, accounting, and consumer-transaction recordkeeping |
| Payment and Product Supply Records | 5 years | Tax, accounting, and payment recordkeeping |
| Consumer Complaint and Dispute Records | 3 years | Dispute resolution and consumer-protection recordkeeping |
| Access Logs | 3 months | Security, fraud prevention, and service operations |
After an account is deleted, associated personal information, such as the phone number and email address, will be deleted, anonymized, or deidentified, except where retention is required or permitted for legal compliance, fraud prevention, dispute resolution, security, accounting, or other legitimate purposes.
If the Service is discontinued, advance notice will be provided where reasonably practicable through an in-App notice, push notification, email, website announcement, or another appropriate method. Personal information will then be deleted, anonymized, or deidentified within a reasonable period, subject to applicable retention requirements.
Personal information will be disposed of using methods reasonably designed to prevent unauthorized access, reconstruction, or recovery. Electronic records may be securely deleted, overwritten, cryptographically erased, or otherwise destroyed using appropriate technical measures. Paper records may be shredded, pulped, or destroyed through a secure document-destruction service.
Personal information may be stored or processed in the United States and in other jurisdictions where the Platform Operator or its service providers operate. These jurisdictions may have data protection laws that differ from those in your place of residence. Where required by law, appropriate contractual, technical, and organizational safeguards will be implemented for cross-border transfers and processing.
8. Security Safeguards and Incident Response
8.1 Information Security Measures
Reasonable administrative, technical, and physical safeguards are maintained to protect personal information against unauthorized access, acquisition, use, disclosure, alteration, destruction, or loss. Depending on the nature of the information and systems involved, these safeguards may include written security policies, encryption in transit and at rest, access controls, authentication measures, multi-factor authentication, network security, logging and monitoring, security testing, data masking or deidentification, backups, recovery procedures, and incident-response measures. However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.
8.2 Internal Privacy and Compliance Management
Internal privacy and security measures are maintained and may include information-classification and handling standards, confidentiality obligations, role-based access controls, access monitoring and audits, periodic access reviews, personnel training, and appropriate disciplinary or legal action for violations. Access to personal information is limited to personnel and service providers who reasonably require it to perform authorized duties.
8.3 Security Incident Response
You are responsible for using a strong, unique password and taking reasonable steps to protect your account and personal information, as internet-based communications may not always be secure. Procedures are maintained to identify, investigate, contain, remediate, and document suspected security incidents. If a breach, loss, destruction, or unauthorized access to or disclosure of personal information is discovered, appropriate response measures will be taken, and affected individuals and relevant authorities will be notified where required by applicable law. Notice may be provided by email, text message, telephone, push notification, postal mail, website notice, or another legally permitted method and may describe the incident, the information involved, the response taken, recommended protective steps, and available contact information. Where direct notice is impracticable, substitute notice may be provided as permitted by law.
9. Your Privacy Rights and How to Exercise Them
9.1 Access, Correction, and Deletion
Subject to applicable law and available exceptions, you may access, review, update, or manage certain personal information through the App or website. This may include account information, search and browsing history, order history, purchase or unboxing records, transaction, refund and return records, and saved shipping addresses.
You may also request deletion of personal information where processing violates applicable law, required consent was not obtained, applicable agreements or published policies were materially violated, your account has been deleted, the relevant Service is no longer used or provided, or you otherwise have a legal right to request deletion. Certain information may be retained where reasonably necessary or permitted for legal compliance, security, fraud prevention, transaction records, dispute resolution, or the establishment, exercise, or defense of legal claims.
9.2 Additional Privacy Rights and Public Content
Depending on your place of residence and applicable law, you may have the right to request a copy of your personal information; obtain information about the categories, sources, purposes, and recipients of personal information; opt out of certain sales, sharing, targeted advertising, or profiling activities; limit certain uses or disclosures of sensitive personal information; withdraw consent where processing is based on consent; and appeal the denial of a privacy request. Information you voluntarily publish through comments, reviews, sharing features, or other public areas of the Service may remain publicly available until deleted or removed. Copies may remain if they have been cached, archived, downloaded, screenshotted, copied, or otherwise retained by other users or third parties beyond the Platform Operator’s control.
9.3 Submitting Requests and Withdrawing Consent
You may exercise your privacy rights through the official customer support center or another request method identified in this Privacy Policy. Information reasonably necessary to verify your identity and confirm that the request relates to you may be required. Where permitted by law, an authorized agent may submit a request on your behalf, subject to appropriate verification.
Requests will be handled within the time required by applicable law. No fee will generally be charged for reasonable requests, although a reasonable fee may be imposed, or a request may be denied, where permitted by law, if it is manifestly unfounded, excessive, repetitive, technically impracticable, or likely to affect another person’s rights. You will not be unlawfully discriminated against for exercising your privacy rights.
Where processing is based on consent, you may withdraw that consent by deleting previously provided information, disabling the relevant feature, changing your account or privacy settings, revoking device permissions, unsubscribing from marketing communications, or contacting customer support. Withdrawal does not affect processing completed before consent was withdrawn, and certain features may become unavailable where the relevant information or permission is necessary to provide them.
10. Children’s Privacy
The Service is not directed to children under 18, and personal information is not knowingly collected online from children under 18 without verifiable consent from a parent or legal guardian. If such information is collected without the authorization required by applicable law, reasonable steps will be taken to delete it. Where a child’s personal information is collected with verifiable parental consent, it will be used or disclosed only as permitted by law, authorized by the parent or guardian, or reasonably necessary to protect the child’s safety or legal rights. A parent or legal guardian who believes that a child has provided personal information may contact customer support to request access, correction, or deletion. Users who are at least 18 but have not reached the age of majority in their jurisdiction should review this Privacy Policy with a parent or legal guardian and comply with the age and consent requirements in the Terms of Service.
11. Notice Regarding Sensitive Personal Information
Certain types of personal information may be considered sensitive under applicable law, including information concerning race or ethnicity, religious beliefs, health or medical conditions, government-issued identification documents, biometric information, financial information, precise geolocation, and information relating to children.
Content uploaded, published, or otherwise shared through the Service may directly or indirectly reveal sensitive personal information. You should carefully consider the nature of the information before posting or sharing any content.
The categories of information considered sensitive vary under applicable U.S. federal and state laws. Any collection, use, or disclosure of sensitive personal information will be addressed in accordance with the information actually processed, the jurisdictions in which the Service operates, and applicable legal requirements.
12. Account Deletion
You may request deletion of your account through the “Delete Account” feature in the App or by contacting customer support. Identity verification, such as confirmation of the phone number or email address linked to the account, may be required before the request is processed. After deletion, associated personal information and Service data will be deleted, anonymized, or deidentified in accordance with this Privacy Policy and applicable law. Certain transaction, tax, accounting, fraud-prevention, dispute-resolution, security, or regulatory records may be retained for the minimum period required or permitted by law. Account deletion does not release you from any obligations or liabilities arising from your use of the Service before deletion.
Account deletion also does not automatically waive any rights or remedies that you may have under applicable consumer protection, payment, warranty, refund, or other laws.
13. Third-Party Links
The Service may contain links to websites, applications, or services operated by unaffiliated third parties. These third-party services operate independently and may have their own privacy policies, terms, security practices, and data-processing procedures. The Platform Operator is not responsible for the privacy, security, content, or data practices of such third parties. You should review the applicable privacy policy and terms before providing personal information or using any third-party service. Nothing in this section limits any responsibility that cannot lawfully be excluded under applicable law.
14. Privacy Contact Information
| Item | Information |
|---|---|
| Responsible Department | Customer Support Team |
| Contact Email | Official@hitplus.io |
| Customer Support | “Customer Support Center” or “1:1 Inquiry” within the Hit Plus App |
If you have questions about this Privacy Policy, need assistance with the Service, or wish to submit a privacy-related request, please contact the Customer Support Team at Official@hitplus.io or through the “Customer Support Center” or “1:1 Inquiry” feature in the App. Requests will be reviewed and addressed in accordance with applicable law and internal procedures.
15. Company Information
| Item | Information |
|---|---|
| Legal Business Name | POPisM INC |
| Business Address | 16192 Coastal Highway, Lewes, DE 19958, United States |
| Business Registration Number | 42-5018805 |
| Official Email Address | Official@hitplus.io |
| Correspondence Hours | U.S. business days, Eastern Time (ET, UTC−05:00) |
16. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes in applicable law, regulatory requirements, the Service, technology, business operations, or personal information practices. Where required by law, advance notice of material changes will be provided through the Service, an in-App notice, an announcement page, email, or another appropriate method. Each updated version will state its effective date. Continued use of the Service after the revised Privacy Policy takes effect constitutes acknowledgment of the updated policy. Where applicable law requires consent, the required consent will be obtained before materially changing how previously collected personal information is processed.