Privacy Policy

Last updated: July 25, 2026

Overview

This Privacy Policy describes how Eberything Limited ("we", "us"), a company incorporated in Hong Kong and operating the Gup product, collects, uses, and shares information when you use our website, dashboard, and chat widget. Where we process end-customer data on your behalf (for example through Shopify Actions), we act as a processor and you remain the controller — see also our Data Processing Addendum.

Information we collect

We collect account information you provide (such as email address), usage data from the dashboard, and content you connect for training your agent (such as documentation and support conversations). When you enable Actions, we may also process end-customer data needed to fulfill a verified request (see Integrations below).

Where we store and process data

Primary conversation, account, and knowledge data is stored in our database provider (Supabase) in Singapore (Southeast Asia / AWS ap-southeast-1). AI chat completions and embeddings are processed on Google Vertex AI in asia-southeast1 (Singapore). Our dashboard application is hosted on Vercel; request processing and edge delivery may occur in multiple regions. Other sub-processors (for example email delivery) may process limited data outside Singapore as needed to provide the service — see our DPA.

AI providers and model training

Chat completions and embeddings run on Google Vertex AI. Under Google Cloud’s Service Specific Terms (Training Restriction), Google does not use your prompts or model outputs on Vertex AI to train or fine-tune its AI/ML models without prior permission. Gup does not use customer or end-user conversation content to train foundation models. Separately, if you use Learnings, your team may review handoffs and publish Q&A into your own agent’s knowledge — that stays under your control and is not used to train Google’s models.

Integrations and end-customer data (including Shopify)

If you connect Shopify (or similar systems), Gup may access the data you authorize via OAuth for the capabilities you select — typically order and fulfillment details (after the visitor proves ownership with order number + checkout email), and/or product catalog data (titles, variants, prices, and coarse availability) for recommendations. We do not sell this data, use it for advertising, or use it outside providing the service to you. Access tokens are stored encrypted; Action runs may be logged in redacted form for security and audit. You are responsible for providing any notices and obtaining any consents required for your shoppers under applicable law.

How we use information

We use collected information to operate and improve Gup, to provide support, to run verified Actions you enable, and to communicate with you about your account.

Data retention

We retain account and conversation data for as long as your account is active, or as needed to provide the service. Short-lived verification claims on conversations expire (typically within an hour). You may disconnect an integration at any time, which stops new lookups; contact us to request deletion of stored connection credentials.

Contact

Questions about this policy can be sent to [email protected].