Store Privacy Policy
Effective Date: September 11, 2026
Last Updated: September 20, 2026
1. Introduction
AddYea Technologies Inc. (“AddYea,” “we,” “us,” or “our”) respects the privacy of individuals who use or interact with our services.
This Store Privacy Policy describes how AddYea collects, uses, discloses, stores, protects, and otherwise handles personal information in connection with the AddYea store or merchant application, merchant onboarding, POS and inventory integrations, order fulfilment, settlements, account, and support services (the “Store Services”).
This Privacy Policy applies to stores and, where relevant, individuals who interact with AddYea in connection with the store services.
AddYea currently operates from Ontario, Canada and handles personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) where applicable.
Questions, requests, or complaints relating to privacy may be directed to:
Privacy Officer
AddYea Technologies Inc.
Ontario, Canada
Email: admin@addyea.com
This Store / Merchant Privacy Policy should be read together with the AddYea Shop / Store Terms & Conditions where those Terms apply.
2. Accountability
AddYea is responsible for personal information under its control.
AddYea has designated a Privacy Officer responsible for privacy compliance and maintains policies, procedures, technical safeguards, and access controls intended to protect personal information.
Privacy inquiries, access or correction requests, account-deletion or closure requests, consent-related requests, and privacy complaints may be submitted to admin@addyea.com.
3. Store and Merchant Information We Collect
Business and Representative Information
• legal business name;
• operating or store name;
• business address;
• store location;
• owner or authorized representative name;
• names, roles, contact details, and account information of authorized Store staff or Store-app users where applicable;
• phone number;
• email address;
• store hours;
• business-registration information;
• incorporation or registration documentation where applicable;
• CRA Business Number where applicable;
• GST/HST registration information where applicable;
• licence, permit, insurance, food-safety, public-health, and other compliance information where reasonably required;
• tax residency or jurisdiction information where legally required; and
• other information reasonably necessary to verify or manage the merchant relationship.
Website Store Partner Interest Forms
When an individual submits a Store Partner interest form through the AddYea website, AddYea may collect the store name, contact name, store address, phone number, and email address. AddYea uses this information only to respond to the inquiry, assess potential merchant onboarding, and communicate about a potential Store relationship. Submitting an interest form does not create a Store relationship, partnership, or agreement with AddYea.
Financial and Settlement Information
• banking and payout information;
• payee information;
• sales amounts;
• store payout amounts;
• payout history;
• commissions;
• applicable fees;
• refunds;
• chargebacks;
• settlement holds, negative balances, and settlement-correction information;
• adjustments;
• transaction history; and
• tax-related transaction information.
Product, POS, and Operational Information
• product catalogues;
• product names and descriptions;
• product images;
• prices;
• inventory information;
• product quantities and availability;
• POS information;
• POS authorization or integration information;
• order information;
• sales information;
• picking and fulfilment information;
• unavailable-product information;
• substitution information where applicable;
• cancellation information;
• refund information;
• store performance information;
• operational settings;
• pickup and delivery settings; and
• technical integration records;
• AddYea-owned equipment or asset records, including device identifiers, assignment, condition, inspection, loss, damage, repair, or return information where applicable;
• food-traceability, supplier/source, recall, safety, inspection, audit, or verification records where reasonably required;
• Store-user access, authorization, login, security, and access-removal records; and
• other operational or compliance records reasonably necessary to administer the Store relationship.
AddYea may use secure authorization tokens or similar mechanisms to connect with POS or other systems where supported. AddYea does not require stores to disclose third-party account passwords unless expressly necessary and appropriately secured.
4. Automatically Collected and Technical Information
When individuals use AddYea websites or applications, AddYea or its service providers may automatically collect information such as:
• IP address;
• device type;
• operating system;
• browser type;
• app version;
• device identifiers where applicable;
• session information;
• login timestamps;
• activity timestamps;
• app or website interactions;
• pages or screens viewed;
• crash reports;
• error logs;
• diagnostic information;
• security logs;
• notification tokens;
• approximate location information where applicable;
• referral or source information;
• cookies; and
• similar technical information.
This information may be used to operate, maintain, analyze, secure, troubleshoot, and improve the Services.
5. Camera, Photograph, and File Permissions
Certain AddYea features may require access to a device camera, photographs, or uploaded files.
Examples may include:
• store or product images;
• business registration, insurance, or verification documents;
• barcode scanning;
• order, packing, equipment, or incident photographs where applicable; and
• other operational features requiring images or documents.
AddYea will request applicable device permission where required. Access is used only in connection with features for which such permission has been provided.
6. How AddYea Uses Store and Merchant Information
AddYea may use Store and merchant representative information for purposes including:
• creating and maintaining Store accounts;
• verifying business, representative, banking, tax, licensing, insurance, and account information;
• authenticating logins and providing OTP/security verification;
• operating POS, inventory, product, and order integrations;
• processing and managing customer orders;
• coordinating picking, unavailable items, pickup, and delivery;
• administering Store payouts;
• calculating sales, commissions, fees, refunds, chargebacks, and adjustments;
• providing Store support;
• communicating about orders, Store availability, integrations, payouts, account matters, or compliance issues;
• investigating customer complaints, disputes, fraud, recalls, safety issues, or settlement questions;
• maintaining platform and account security;
• complying with accounting, taxation, regulatory, and legal obligations;
• maintaining business records;
• administering AddYea-owned equipment and consumable-supply records;
• verifying Store compliance, traceability, licensing, insurance, product-safety, account-access, and contractual requirements;
• improving inventory, product availability, order preparation, integrations, and operational performance;
• performing analytics and forecasting demand;
• protecting the rights, property, safety, and security of AddYea and users; and
• complying with applicable legal requirements.
AddYea will not use personal information for a materially different purpose without appropriate notice and consent where required by law.
7. Analytics and Business Insights
AddYea may use analytics to understand, operate, develop, and improve the Store Services, including product demand, category demand, purchasing trends, inventory availability, out-of-stock patterns, sales trends, order preparation, refunds, cancellations, store performance, delivery performance, operational efficiency, and technical performance.
Where appropriate, AddYea may provide participating stores with aggregated or de-identified analytics and business insights, such as product-demand trends, sales patterns, inventory trends, or operational performance. AddYea does not intend such aggregated or de-identified information to identify individual customers.
AddYea does not use personal information for third-party targeted advertising under this Privacy Policy.
8. Customer Information Shared With Stores
Participating stores receive only information reasonably necessary to prepare and fulfil customer orders.
This may include the customer name, ordered products, quantities, unavailable-item or approved substitution preferences where applicable, order notes where relevant, and other order information reasonably necessary to prepare the order.
Participating stores do not receive the customer’s delivery address or customer telephone number from AddYea for ordinary order preparation unless AddYea specifically authorizes disclosure for a legitimate operational purpose. Stores do not receive general access to customer profiles.
Store personnel must use customer information only for authorized AddYea order fulfilment and related support purposes and must not use it for unrelated marketing, solicitation, or personal purposes.
9. Driver Information Shared With Stores
Participating stores do not have general access to driver profiles or driver personal information.
When a driver is assigned to collect an order, AddYea may provide a store with limited driver information reasonably necessary to identify the assigned driver and complete the order handoff.
Stores do not receive access to sensitive driver information such as banking information, tax information, SIN, driver’s licence documentation, insurance documents, residential address, or unrelated personal information.
10. SMS Communications
AddYea may verify an account or contact information using an email OTP, an SMS OTP when available, or another reasonable security method.
SMS/text messaging, when available, is used only for one-time passwords, security verification codes, and related account-verification purposes. It is not used for advertising, promotions, marketing campaigns, promotional offers, or unrelated commercial messaging.
Where an SMS consent mechanism is presented, AddYea will obtain consent in accordance with applicable requirements. Phone numbers may be provided to an SMS service provider only as necessary to deliver requested or authorized OTP/security-verification messages and administer the SMS service.
Message and data rates may apply depending on the individual’s wireless service provider. Where applicable, users may follow available STOP or HELP instructions associated with the SMS service. SMS consent is not treated as consent to receive promotional or marketing messages.
11. Email Communications
AddYea may use email for transactional, authentication, security, legal, support, and service-related purposes, including:
• account registration and login;
• email OTP or verification codes;
• account recovery and security notices;
• store account communications;
• important service announcements;
• Privacy Policy updates;
• Terms or agreement updates; and
• legally required notices.
Where relevant to the service, email may also be used for order, fulfilment, payout, settlement, integration, support, or other operational communications.
AddYea does not send promotional or marketing emails under this Privacy Policy.
Telephone and WhatsApp Support
Where AddYea offers telephone or WhatsApp support, AddYea may use the Store representative phone number and process the content of support or operational communications as reasonably necessary to provide assistance, coordinate the Services, document decisions, resolve disputes, address safety concerns, or maintain business records.
Telephone and WhatsApp communications are separate from SMS. AddYea does not use these support channels for promotional or marketing messaging under this Privacy Policy unless a separate lawful consent process is introduced.
AddYea does not ordinarily record telephone calls. If call recording is introduced in the future, AddYea will provide appropriate notice and obtain consent where required by applicable law.
Where a third-party messaging service such as WhatsApp is used, that service may process information under its own terms and privacy practices.
12. Push and In-App Notifications
AddYea may send transactional, operational, security, and service-related push notifications or in-app notifications to stores.
These may include notifications relating to account activity, security, order preparation, pickup or delivery status, payouts, integrations, settlement or operational matters, and other service-related information applicable to the account.
Push notifications are separate from SMS communications. Users may generally control push-notification permissions through their device settings. Disabling notifications may result in missed or delayed operational updates.
AddYea does not treat permission for push notifications as consent to receive promotional SMS.
13. Service Providers and Other Third Parties
AddYea may use third-party companies and service providers to assist in operating the Services. Such providers may perform functions including:
• cloud hosting;
• database management;
• authentication;
• app infrastructure;
• analytics;
• diagnostics;
• security;
• fraud prevention;
• payment processing;
• banking or payment transmission;
• OTP and security-verification delivery;
• email delivery;
• push notifications;
• POS integrations;
• inventory integrations;
• mapping and location services;
• accounting;
• tax reporting;
• legal services;
• insurance-related services; and
• other technical or operational functions.
AddYea seeks to limit the information provided to service providers to information reasonably necessary for them to perform their functions. Service providers are expected to process information only for authorized purposes and subject to appropriate contractual, technical, organizational, or other safeguards.
For website Store Partner interest forms, AddYea may use Wix to host the website and process form submissions, Google Workspace and Google Sheets to receive, store, and manage submissions and follow-up records, and an email service provider to send a confirmation email or follow-up communication. AddYea provides these service providers only the information reasonably necessary for these purposes and expects them to apply appropriate safeguards.
14. Professional Advisers and Authorities
AddYea may disclose information where reasonably necessary to accountants, auditors, lawyers, tax advisers, insurers, financial institutions, governmental authorities, regulators, courts, or law-enforcement authorities.
Such disclosure may occur where reasonably necessary to comply with applicable law, satisfy tax or regulatory reporting obligations, respond to lawful legal process, protect legal rights, investigate fraud, address safety concerns, enforce agreements, or establish, exercise, or defend legal claims.
15. Sale of Personal Information
AddYea does not sell or rent personal information to third parties for their independent marketing purposes.
Aggregated or effectively de-identified information may be used or shared for legitimate business, analytical, operational, or statistical purposes where such information is not intended to identify an individual.
16. Corporate Transactions
Personal information may be disclosed or transferred as part of a proposed or completed investment, financing, merger, acquisition, restructuring, reorganization, sale of assets, sale of business, or similar corporate transaction.
Where appropriate, AddYea will take reasonable steps to require that personal information remain subject to appropriate confidentiality and privacy safeguards.
17. Cross-Border Processing
AddYea and its service providers may store or process personal information in Canada or in other jurisdictions.
Where personal information is transferred outside Canada, it may be subject to the laws of the jurisdiction in which it is processed and may be accessible to courts, law-enforcement agencies, regulatory authorities, or governmental authorities in accordance with applicable law.
AddYea remains responsible for personal information under its control and seeks to use reasonable contractual, organizational, and technical safeguards when information is processed by third-party service providers.
18. Access Controls and Confidentiality
Access to personal information is restricted based on legitimate operational requirements. Sensitive information is restricted to authorized AddYea personnel on a need-to-know basis.
Sensitive information such as banking information, tax information, identity documentation, driver’s licence documentation, insurance documentation, and other highly sensitive records is intended to be accessible only to appropriately authorized administrative, finance, compliance, or other personnel where required for their responsibilities.
19. Security Safeguards
AddYea uses reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity of personal information.
These safeguards may include:
• access controls;
• authentication controls;
• password protection;
• OTP verification;
• role-based access restrictions;
• secure communications;
• encryption in transit;
• encryption at rest where supported and appropriate;
• secure cloud infrastructure;
• restricted access to sensitive documents;
• monitoring and security logging;
• backups;
• fraud-prevention measures;
• system updates;
• vulnerability remediation; and
• procedures for responding to security incidents.
No electronic system, network, or method of storage or transmission can be guaranteed to be completely secure. Accordingly, AddYea cannot guarantee absolute security.
20. Retention of Store and Merchant Information
AddYea retains Store and merchant representative information only for as long as reasonably necessary to operate the Store Services, administer settlements, comply with legal obligations, resolve disputes, prevent fraud, enforce agreements, address safety or regulatory issues, and satisfy tax, accounting, and regulatory requirements.
Store sales, commissions, payout records, tax information, refunds, chargebacks, adjustments, and related financial records may be retained for periods required by applicable tax, accounting, and regulatory requirements.
Business-registration, identity, representative, authorized-user, insurance, licensing, integration, equipment, traceability, compliance, inspection, and similar verification records may be retained while required for the merchant relationship and afterward where reasonably necessary for legal, dispute, regulatory, accounting, safety, contractual, or record-keeping purposes.
Support communications and complaint, recall, fraud, or dispute records may be retained while an issue is active and for a reasonable period afterward for operational, dispute-resolution, legal, safety, security, or record-keeping purposes.
Website Store Partner interest submissions that do not result in onboarding will be retained only for as long as reasonably necessary to respond to the inquiry, assess the potential relationship, maintain reasonable business records, or meet legal obligations. When the information is no longer reasonably required, AddYea will delete, destroy, or appropriately de-identify it.
21. Account Closure and Deletion Requests
Stores may request account closure or deletion by contacting admin@addyea.com.
An account-deletion or closure request does not necessarily result in immediate deletion of every record associated with the account.
AddYea may retain information where reasonably necessary or required for tax obligations, accounting, settlement and payment records, equipment records, regulatory reporting, fraud prevention, security, dispute resolution, insurance matters, recalls, enforcing agreements, legal claims, or other requirements imposed by applicable law.
Where information is no longer required, AddYea will take reasonable steps to delete, destroy, or de-identify it in accordance with applicable requirements.
22. Access and Correction Rights
Subject to applicable law, individuals may request confirmation of whether AddYea holds personal information about them, access to their personal information, information about how their information has been used or disclosed, correction of inaccurate or incomplete information, or updates to account information.
Requests may be submitted to admin@addyea.com. AddYea may need to verify the requester’s identity before providing access to or changing personal information. Certain information may not be provided where access is restricted or prohibited by applicable law.
23. Withdrawal of Consent
Where AddYea relies on consent for a particular collection, use, or disclosure of personal information, an individual may withdraw that consent subject to reasonable notice and any legal or contractual restrictions.
Withdrawal of consent may affect AddYea’s ability to provide certain Services or features. Consent may not always be withdrawn where AddYea must retain or process information to comply with applicable laws, maintain required records, complete a transaction, prevent fraud, resolve an active dispute, or exercise legal rights.
Requests may be directed to admin@addyea.com.
24. Cookies and Similar Technologies
AddYea websites or web-based account pages may use cookies and similar technologies for purposes such as essential website functionality, session management, authentication, maintaining security, remembering preferences, analytics, diagnosing technical problems, and measuring website performance.
Browser settings may permit users to restrict or disable certain cookies. Disabling essential cookies may affect website functionality. Under this Privacy Policy, AddYea does not use cookies for third-party targeted advertising.
25. Third-Party Links and Services
The AddYea Services may contain links to or integrations with third-party websites, platforms, POS systems, payment services, or other external services.
Third-party services operate under their own privacy policies and terms. Except where required by applicable law, AddYea is not responsible for the independent privacy practices of third-party services that are not under AddYea’s control.
26. Accuracy of Information
AddYea relies on stores to provide accurate and current information. Information relevant to the Services should be updated when it changes. Correction requests may be submitted to admin@addyea.com.
27. Age Requirements
Merchant-owner, authorized merchant-representative, and Store-app user accounts are intended for individuals who are at least 18 years of age. If AddYea becomes aware that personal information has been collected from an individual who does not meet applicable eligibility requirements, AddYea may take reasonable steps to restrict the account and delete or otherwise appropriately handle the information.
28. Privacy and Security Incidents
AddYea maintains procedures intended to identify, investigate, contain, document, and respond to suspected privacy or security incidents.
Where a breach of security safeguards occurs, AddYea will take steps appropriate to the circumstances. Where required by applicable law, AddYea will notify affected individuals and applicable privacy or regulatory authorities.
29. Privacy Complaints
Individuals who have questions or concerns regarding AddYea’s privacy practices are encouraged to contact admin@addyea.com.
AddYea will review privacy complaints and take reasonable steps to investigate and respond. Individuals may also have the right to raise unresolved privacy concerns with the Office of the Privacy Commissioner of Canada or another applicable privacy regulator.
30. Changes to this Privacy Policy
AddYea may update this Privacy Policy from time to time to reflect changes to the Services, new functionality, technological developments, operational changes, changes to service providers, changes to legal or regulatory requirements, or changes to AddYea’s information-handling practices.
The updated Privacy Policy will be made available through the applicable AddYea application, website, or another appropriate location and will identify the date of the most recent revision.
Where a change materially affects how AddYea collects, uses, or discloses personal information, AddYea will provide appropriate notice and, where required by applicable law, obtain additional consent before the new practice takes effect.
31. Future Features
This Privacy Policy applies to AddYea’s currently offered Services for this user group. Where AddYea introduces materially different services or features in the future that involve new types of personal information or materially different uses or disclosures of information, AddYea may update this Privacy Policy and provide any notice or obtain any consent required by applicable law before implementing those practices.
32. Contact AddYea
Questions, requests, account-deletion or closure requests, correction requests, consent-related requests, or complaints regarding this Privacy Policy or AddYea’s handling of personal information may be submitted to:
Privacy Officer
AddYea Technologies Inc.
Ontario, Canada
Email: admin@addyea.com