Frosted, Inc. d/b/a Whop and its affiliates (“Whop,” “we,” “our,” and/or “us”) value the privacy of individuals who use our applications, including any mobile applications, websites (including whop.com), or services that link to this Privacy Policy (collectively, our “Services”). This privacy policy (the “Privacy Policy”) explains how we collect, use, and share information from users of our Services (“Users”). As used in this Privacy Policy, “Personal Information” means any information relating to an identified or identifiable individual. By using our Services, you agree to the collection, use, disclosure, and procedures this Privacy Policy describes. Beyond the Privacy Policy, your use of our Service is also subject to our Terms of Service and our California Resident Privacy Notice.
Information We Collect
We may collect a variety of information from or about you or your devices from various sources, as described below.
If you do not provide your information when requested, you may not be able to use our Services if that information is necessary to provide you with our Services or if we are legally required to collect it.
A. Information You Provide to Us
Registration and Profile Information. When you sign up for an account, register to use our Services, or sign up for notifications or updates, we ask you for your Personal Information, including your email address.
Communications. If you contact us directly, we may receive additional Personal Information about you. For example, when you contact us for customer support, we may receive your name, email address, Discord username, phone number, the contents of the messages or attachments that you may send to us, and other information you choose to provide. If you subscribe to our newsletter, then we will collect your email address. When we send you emails, we may track whether you open them to learn how to deliver a better customer experience and improve our Services.
Payment Information. When you make a payment to Whop, your credit card information, debit card information, billing information, and any other financial information necessary to complete your payment (“Payment Information”) is processed by our third-party payment processor (Stripe or Checkout.com), and we do not collect, store, or process your Payment Information. For more information, please see the Payment Processing section below.
B. Information We Collect When You Use Our Services
Location Information. When you use our Services, we may infer your general location information (for example, your IP address may indicate your general geographic region).
Device Information. We receive information about the device and software you use to access our Services, including IP address, web browser type, operating system version, and device identifiers (including unique device identifiers and MAC addresses).
Usage Information. To help us understand how you use our Services and to help us improve them, we automatically receive information about your interactions with our Services, such as the pages or other content you view, the searches you conduct, telemetry data, and the dates and times of your visits.
Analytics Partners. We use analytics services such as Google Analytics, Hotjar, and Amplitude to collect and process certain analytics data. These services may also collect information about your use of other websites, apps, and online resources. You can learn about Google’s practices by going to https://www.google.com/policies/privacy/partners/ and opt out of them by downloading the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout.
Information from Cookies and Similar Technologies. We and our third-party partners may collect Personal Information using cookies, which are small files of letters and numbers that we store on your browser or the hard drive of your computer. They contain information that is transferred to your computer’s hard drive. We and our third-party partners may also use pixel tags and web beacons on our Services. These are tiny graphic images placed on web pages or in our emails that allow us to determine whether you have performed a specific action. We use cookies, beacons, invisible tags, and similar technologies (collectively “Cookies”) to collect information about your browsing activities and to distinguish you from other users of our Services. This aids your experience when you use our Services and allows us to improve the functionality of our Services. Cookies can be used for performance management (i.e., collecting information on how our Services are being used for analytics purposes). They can also be used for functionality management, enabling us to make your visit more efficient by, for example, remembering language preferences, passwords, and log-in details. Below is an overview of the types of Cookies we and third parties may use to collect Personal Information.
Name | More Information | Retention |
Whop Authenticator | Internal company authenticator | 2 years |
Name | More Information | Retention |
Stripe Session ID Hotjar Session Intercom Session Intercom ID Stripe mid | To provide fraud prevention Provide functions across pages Customer service chat Tracking ID of user with service To provide fraud prevention | 30 minutes Session duration 1 week 9 months 1 year |
Name | More Information | Retention |
Google Analytics ID Amplitude | To store and count page views To store and count user behavior | 1 day At lease one session |
Please review your web browser’s “Help” file to learn the proper way to modify your cookie settings. Please note that if you delete or choose not to accept cookies from our Services, you may not be able to utilize the features of our Services to their fullest potential. You can find more information about your rights and choices, and how to block the use of certain Cookies in the section Your Rights and Choices below.
C. Payment Processing
When you make purchases through our Services, your payment is processed by a third-party payment processor such as Stripe or Checkout.com (“Payment Processor”). This Payment Processor may collect Payment Information and other Personal Information from you, including your name, email address, and billing address. The use of your Personal Information by the Payment Processor is governed by its terms and conditions and privacy policy, and Personal Information we receive about you from our Payment Processor is governed by this Privacy Policy.
D. Information We Receive from Third Parties.
Information From Third-Party Services. If you choose to link our Services to a third-party account, such as Discord or Twitter we may receive Personal Information about you including your profile information and your photo, and your use of the third-party account. If you wish to limit the information available to us, you should visit the privacy settings of your third-party accounts to learn about your options.
Other Third Parties. We may receive additional information about you, such as demographic data, from third parties such as data or marketing partners and combine it with other information we have about you.
How We Use the Information We Collect
We use the Personal Information we collect:
Legal Bases For Processing European Information
If you are located in the European Economic Area or the United Kingdom (collectively, “Europe”), we only process your Personal Information when we have a valid legal basis to do so including as set forth below.
How We Share the Information We Collect
We do not share or otherwise disclose the Personal Information we collect from you except as described below or otherwise disclosed to you at the time of the collection.
Partners and Affiliates. We may share any information with our partners, corporate affiliates, parents, or subsidiaries for any purpose described in this Privacy Policy.
Vendors and Service Providers. We may share any information we receive with vendors and service providers retained in connection with the provision of our Services.
Marketing. We do not rent, sell, or share information about you with nonaffiliated companies for their direct marketing purposes unless we have your permission.
Analytics Partners. We use analytics services such as Google Analytics, Hotjar, Holistics, and Amplitude to collect and process certain analytics data. These services may also collect information about your use of other websites, apps, and online resources. You can learn about Google’s practices by going to https://www.google.com/policies/privacy/partners/ and opt out of them by downloading the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout.
As Required by Law and Similar Disclosures. We may access, preserve, and disclose your Personal Information if we believe doing so is required or appropriate to: (i) comply with law enforcement requests and legal process, such as a court order or subpoena; (ii) respond to your requests; or (iii) protect your, our, or others’ rights, property, or safety. For the avoidance of doubt, the disclosure of your information may occur if you post any objectionable content on or through our Services.
Merger, Sale, or Other Asset Transfers. We may disclose and transfer your Personal Information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our business or assets.
Consent. We may also disclose Personal Information from or about you or your devices with your permission.
Your Choices
Marketing Communications. You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt out of receiving promotional messages from us, you will continue to receive administrative messages from us.
Do Not Track. There is no accepted standard on how to respond to Do Not Track signals, and we do not respond to such signals.
If you choose not to provide us with the Personal Information we collect, some features of our Services may not work as intended.
Your European Privacy Rights. If you are located in Europe, you have additional rights as described below.
You may exercise these rights by contacting us using the contact details at the end of this Privacy Policy. Before fulfilling your request, we may ask you to provide reasonable information to verify your identity. Please note that there are exceptions and limitations to each of these rights, and that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain Personal Information for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.
How to Manage Cookies. You can block Cookies by setting your internet browser to block some or all Cookies. However, if you use your browser settings to block all Cookies (including essential Cookies) you may not be able to access all or parts of our Services. By using our Services, you consent to our use of Cookies and our processing of Personal Information collected through such Cookies, in accordance with this Privacy Policy. You can withdraw your consent at any time by deleting placed Cookies and disabling Cookies in your browser, or as explained below. You can change your browser settings to block or notify you when you receive a Cookie, delete Cookies or browse our Services using your browser’s anonymous usage setting. Please refer to your browser instructions or help screen to learn more about how to adjust or modify your browser settings. If you do not agree to our use of Cookies or similar technologies which store information on your device, you should change your browser settings accordingly. You should understand that some features of our Services may not function properly if you do not accept Cookies or these technologies. Where required by applicable law, you will be asked to consent to certain Cookies and similar technologies before we use or install them on your computer or other device.
Third Parties
Our Services may contain links to other websites, products, or services that we do not own or operate (“Third-Party Services”). We are not responsible for the privacy practices of these Third-Party Services. Please be aware that this Privacy Policy does not apply to your activities on these Third-Party Services or any information you disclose to these Third-Party Services. If you have any questions about how these other sites use your Personal Information, you should contact them directly. We encourage you to read their privacy policies before providing any information to them.
Retention
We take measures to delete your Personal Information or keep it in a form that does not permit identifying you when such information is no longer necessary for the purposes for which we process it unless we are required by law to keep this information for a longer period. When we process Personal Information for our own purposes, we determine the retention period taking into account various criteria, such as the type of services provided to you, the nature and length of our relationship with you, possible re-enrollment with our Services, the impact on our Services we provide to you if we delete some Personal Information from or about you, and mandatory retention periods provided by law and the statute of limitations.
Security
We make reasonable efforts to protect your Personal Information by using physical and electronic safeguards designed to improve the security of the Personal Information we maintain. However, as no electronic transmission or storage of Personal Information can be entirely secure, we can make no guarantees as to the security or privacy of your Personal Information.
International Visitors
Our Services are hosted in the United States (“U.S.”) and intended for visitors located within the U.S. If you choose to use our Services from Europe or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your Personal Information outside of those regions to the U.S. for storage and processing. We may transfer your Personal Information from Europe to the U.S. and other third countries based on European Commission-approved Standard Contractual Clauses, as needed to perform our services that you have requested from us, or with your consent. Also, we may transfer your Personal Information from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating our Services. By providing any information, including Personal Information, on or to our Services, you consent to such transfer, storage, and processing.
Children’s Privacy
We do not knowingly collect, maintain, or use Personal Information from children under 16 years of age (“Minors”), and no parts of our Services are directed to Minors. If you learn that a Minor has provided us with Personal Information in violation of this Privacy Policy, then you may alert us at hello@whop.com.
Changes to this Privacy Policy
We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we use or share Personal Information previously collected from you through our Services, we will notify you through our Services, by email, or other communication.
Contact Information
If you have any questions, comments, or concerns about our processing activities, please email us at hello@whop.com or write to us at:
Frosted Inc. d/b/a Whop
109 S. 5th St.
Brooklyn, NY
11249