Policies

TERMS OF SERVICE

Last Updated: January 2026

Introduction

Welcome to HIIPE.io. These Terms of Service ("Terms") are a legal agreement between you and HIIPE.io SAS ("HIIPE", "we", "us", or "our"), a French company registered under RCS Paris 100 237 593, with its registered office at 60 rue François Ier, 75008 Paris, France.

HIIPE is a fan data capture and direct messaging platform that helps creators build and engage with their fanbase. By accessing or using our platform, you agree to be bound by these Terms.

IMPORTANT: Please read these Terms carefully. By clicking "I Agree", creating an account, or using HIIPE, you confirm that you have read, understood, and agree to these Terms. If you do not agree, do not use HIIPE.

Definitions

"Creator" means any individual or entity that creates an account on HIIPE to capture fan data and send direct messages. "Fan" means any individual who submits their information through a Creator's capture link. "Capture Link" means a unique URL created by a Creator to collect Fan information. "Direct Messaging" means SMS, email, and/or WhatsApp communications sent through HIIPE. "Credits" means the pay-per-use units required to send Direct Messages. "Content" means any text, images, links, or other materials uploaded to or sent through HIIPE. "Platform" means the HIIPE website, applications, and all related services.

Eligibility

You must be at least 18 years old to use HIIPE. By using our Platform, you represent and warrant that you are 18 or older and have the legal capacity to enter into these Terms. HIIPE is not intended for use by anyone under 18.

Account Registration

4.1 Creator Accounts To use HIIPE as a Creator, you must create an account. You agree to provide accurate, current, and complete information during registration, keep your account information updated, maintain the security of your password and account, and accept responsibility for all activities under your account.

You may register using email/password or through Google Single Sign-On (SSO). If using Google SSO, you authorize us to access basic profile information from your Google account.

4.2 Fans Fans do not create accounts. When you submit your information through a Creator's Capture Link, you agree to receive Direct Messages from that Creator and acknowledge HIIPE's processing of your data as described in our Privacy Policy.

Our Services

HIIPE provides Creators with tools to create and share Capture Links to collect Fan information, manage their fanbase through a dashboard, send Direct Messages (SMS, email, WhatsApp) to their Fans, track engagement and analytics, and (Future) sell merchandise and tickets through integrated partners.

Subscriptions, Credits, and Payments

6.1 Subscription Plans HIIPE offers subscription plans with varying features and limits. Current pricing is available at hiipe.io/pricing. By subscribing, you authorize us to charge your payment method on a recurring basis until you cancel.

6.2 Direct Messaging Credits Sending Direct Messages requires Credits. Credits are purchased separately from subscriptions and are deducted based on the channel used (SMS, email, WhatsApp) and message length. Credit pricing is available on our pricing page. Credits are non-transferable between accounts.

6.3 Future Commissions HIIPE may charge commissions on ticket sales and merchandise sold through our Platform. Commission rates will be displayed before you list items for sale. By using these features, you agree to the applicable commission structure.

6.4 No Refunds All subscription fees and Credit purchases are non-refundable. You may cancel your subscription at any time, but you will not receive a refund for any unused portion of your subscription period or unused Credits.

6.5 Price Changes We may change our pricing at any time. For existing subscribers, price changes will take effect at the start of the next billing cycle following 30 days' notice. Continued use after the price change constitutes acceptance.

Creator Responsibilities

7.1 Lawful Use Complying with all applicable laws, including data protection regulations (GDPR, CCPA, etc.), obtaining valid consent from Fans before collecting their data, and complying with anti-spam laws when sending Direct Messages.

7.2 Content Responsibility You are solely responsible for all Content you create, upload, or send through HIIPE. You must comply with our Acceptable Use Policy. You must not send spam, misleading, or harmful messages to Fans.

7.3 Data Controller Obligations Under GDPR, you (the Creator) are the Data Controller for Fan data you collect. HIIPE acts as your Data Processor. This means you determine why and how Fan data is used, and you bear primary responsibility for compliance. See our Data Processing Agreement for details.

Terms for Fans

8.1 What You Agree To When you submit your information through a Creator's Capture Link, you consent to that Creator contacting you via SMS, email, and/or WhatsApp, acknowledge that HIIPE processes your data on behalf of the Creator, and confirm that you are 18 years or older.

8.2 Your Rights You have the right to unsubscribe from a Creator's messages at any time by replying STOP to any SMS or clicking unsubscribe in emails, request deletion of your data by contacting privacy@hiipe.io, and access your data and exercise other rights under GDPR as detailed in our Privacy Policy.

8.3 Data Protection Your data is never sold to third parties. It is used solely by the Creator whose link you used, processed through HIIPE's platform. Creators cannot share or sell your data to others.

Intellectual Property

9.1 HIIPE's IP HIIPE and its licensors own all rights to the Platform, including software, design, logos, and documentation. These Terms do not grant you any ownership rights to HIIPE's intellectual property.

9.2 Your Content You retain ownership of Content you upload to HIIPE. By uploading Content, you grant HIIPE a worldwide, non-exclusive, royalty-free license to use, host, store, and display your Content solely for the purpose of providing the Platform to you.

9.3 Fan Data Ownership Fan data collected through your Capture Links belongs to you, the Creator. HIIPE does not claim ownership of your Fan data. However, HIIPE may use anonymized, aggregated data for analytics and platform improvement.

Acceptable Use

You must comply with our Acceptable Use Policy, which prohibits spam or unsolicited bulk messaging, adult or sexually explicit content, hate speech, harassment, or threats, illegal activities or content, content that exploits or harms minors, intellectual property infringement, and malware, phishing, or fraudulent content.

Limitation of Liability

11.1 Liability Cap Our total liability to you for any claims arising from or related to these Terms or your use of HIIPE shall not exceed one hundred euros (€100).

11.2 Exclusion of Damages We are not liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to lost profits, lost revenue, lost data, business interruption, or reputational harm, regardless of whether we were advised of the possibility of such damages.

11.3 Exceptions Nothing in these Terms limits our liability for (a) death or personal injury caused by our negligence; (b) fraud or fraudulent misrepresentation; or (c) any other liability that cannot be excluded or limited under applicable French or EU law.

11.4 Disclaimer of Warranties The Platform is provided "as is" and "as available" without warranties of any kind, whether express or implied. We do not warrant that the Platform will be uninterrupted, error-free, or secure.

Indemnification

You agree to indemnify and hold HIIPE, its officers, directors, employees, and agents harmless from any claims, damages, losses, or expenses (including legal fees) arising from your use of the Platform, your Content or messages sent to Fans, your violation of these Terms or applicable law, and any claim by a Fan or third party related to your activities.

Termination

13.1 By You You may close your account at any time through your account settings or by contacting support@hiipe.io. Subscription fees already paid are non-refundable.

13.2 By HIIPE We may suspend or terminate your account immediately, without notice, if you violate these Terms or the Acceptable Use Policy. We may also terminate accounts for prolonged inactivity or at our discretion with 30 days' notice.

13.3 Effect of Termination Upon termination, your right to use the Platform ends immediately, your Fan data will be deleted with anonymized statistics retained for analytics, and unused Credits are forfeited.

Governing Law and Disputes

14.1 Governing Law These Terms are governed by and construed in accordance with the laws of France, without regard to conflict of law principles.

14.2 Jurisdiction Any disputes arising from these Terms shall be subject to the exclusive jurisdiction of the courts of Paris, France.

14.3 Consumer Rights If you are a consumer in the European Union, nothing in these Terms affects your rights under mandatory consumer protection laws in your country of residence.

Changes to These Terms

We may update these Terms from time to time. If we make material changes, we will notify you via email or through the Platform at least 30 days before the changes take effect. Your continued use after the changes take effect constitutes acceptance. If you do not agree to the updated Terms, you must stop using HIIPE and close your account.

General Provisions

16.1 Entire Agreement These Terms, together with the Privacy Policy, Cookie Policy, Acceptable Use Policy, and Data Processing Agreement, constitute the entire agreement between you and HIIPE.

16.2 Severability If any provision of these Terms is found invalid or unenforceable, the remaining provisions will continue in full force and effect.

16.3 No Waiver Our failure to enforce any right or provision of these Terms does not constitute a waiver of that right or provision.

16.4 Assignment You may not assign these Terms without our written consent. We may assign these Terms to an affiliate or successor in connection with a merger, acquisition, or sale of assets.

Contact Us

If you have questions about these Terms, contact us at: HIIPE.io SAS 60 rue François Ier, 75008 Paris, France Email: legal@hiipe.io RCS Paris: 100 237 593

═══════════════════════════════════════════════════════════

PRIVACY POLICY

Last Updated: January 2026

Introduction

This Privacy Policy explains how HIIPE.io SAS ("HIIPE", "we", "us", or "our") collects, uses, shares, and protects personal data when you use our platform. HIIPE is a French company registered under RCS Paris 100 237 593, with its registered office at 60 rue François Ier, 75008 Paris, France.

This Policy applies to all users of our platform, including Creators (individuals or entities who create accounts to capture fan data) and Fans (individuals who submit their information through Capture Links).

By using HIIPE, you acknowledge that you have read and understood this Privacy Policy.

Data Controller Information

2.1 For Creator Data HIIPE is the Data Controller for personal data collected from Creators during account registration and platform usage.

2.2 For Fan Data Creators are the Data Controllers for Fan data collected through their Capture Links. HIIPE acts as a Data Processor, processing Fan data on behalf of Creators in accordance with our Data Processing Agreement.

Contact for data protection inquiries: privacy@hiipe.io

Data We Collect

3.1 Creator Data When you create a Creator account, we collect account information (name, email address, phone number, password hashed, profile image), payment information (billing address and payment method details processed by our payment provider), usage data (login history, feature usage, Capture Link analytics, messaging history), and technical data (IP address, browser type, device information, cookies).

3.2 Fan Data When Fans submit information through a Creator's Capture Link, the following data may be collected: contact information (first name, last name, phone number required, email address optional), location data (country derived from phone number, city derived from IP address or manually provided), engagement data (which Capture Links were used, opt-in date, fan tier status), and technical data (IP address at time of submission).

How We Use Your Data

4.1 Creator Data We use Creator data to provide and maintain your account and access to the platform, process payments and manage subscriptions, send service-related communications (account alerts, security notices, feature updates), send marketing communications (with your consent), improve and develop our platform, and comply with legal obligations.

4.2 Fan Data Fan data is processed on behalf of Creators to enable Creators to send Direct Messages (SMS, email, WhatsApp) to their Fans, provide Creators with fanbase analytics and engagement metrics, manage unsubscribe requests and consent records, and prevent fraud and ensure platform security.

Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process personal data based on the following legal grounds: Contract (processing necessary to perform our contract with you), Consent (processing based on your explicit consent), Legitimate interests (processing necessary for our legitimate business interests), and Legal obligation (processing required to comply with applicable laws).

Data Sharing

6.1 We Do Not Sell Your Data HIIPE does not sell personal data to third parties. Fan data is never sold, rented, or shared with third parties for their marketing purposes.

6.2 Service Providers (Sub-processors) We share data with trusted service providers who help us operate our platform: SMS messaging (Conecteo), Email messaging (Mailjet or SendGrid), Hosting (Amazon Web Services and/or Vercel), Payment processing (Stripe), Geolocation (MaxMind), and Analytics (Google Analytics).

All service providers are bound by data processing agreements and are required to protect your data in accordance with applicable law.

6.3 Creators Cannot Share Fan Data Creators agree in our Terms of Service that they will not sell, rent, or share Fan data with third parties. Fan data may only be used by the Creator through HIIPE's platform for direct communication purposes.

6.4 Legal Requirements We may disclose personal data if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

International Data Transfers

HIIPE is based in France (EU). However, some of our service providers are located in the United States. When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place: Standard Contractual Clauses (SCCs) with US-based providers, EU-US Data Privacy Framework where applicable, and Data Processing Agreements with all providers.

Data Retention

8.1 Creator Data We retain Creator account data for as long as your account is active. After account closure, we retain certain data for up to 10 years as required by French accounting and tax regulations.

8.2 Fan Data Fan data is retained for as long as the Creator's account is active. When a Creator closes their account, Fan personal data is deleted. Anonymized, aggregated statistics may be retained for analytics purposes.

8.3 Message History Records of Direct Messages sent through the platform are retained for 3 years for compliance and dispute resolution purposes.

Your Rights

Under GDPR and applicable data protection laws, you have the following rights: Right of access (request a copy of your personal data), Right to rectification (request correction of inaccurate data), Right to erasure (request deletion of your personal data), Right to restrict processing (request limitation of how we use your data), Right to data portability (receive your data in a structured, machine-readable format), Right to object (object to processing based on legitimate interests or for direct marketing), and Right to withdraw consent (withdraw consent at any time where processing is based on consent).

To exercise these rights, contact us at privacy@hiipe.io. We will respond within 30 days.

9.1 For Fans Fans may exercise their rights by replying STOP to any SMS to unsubscribe from that Creator, clicking unsubscribe in any email to opt out, or contacting privacy@hiipe.io to request data access, correction, or deletion.

Data Security

We implement appropriate technical and organizational measures to protect personal data, including encryption of data in transit (TLS/SSL) and at rest, secure password hashing, access controls and authentication mechanisms, regular security assessments, and incident response procedures.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.

Cookies

We use cookies and similar technologies to operate our platform, analyze usage, and improve your experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

Children's Privacy

HIIPE is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the platform at least 30 days before the changes take effect. The "Last Updated" date at the top of this Policy indicates when it was last revised.

Supervisory Authority

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. In France, the supervisory authority is: Commission Nationale de l'Informatique et des Libertés (CNIL) 3 Place de Fontenoy, TSA 80715 75334 Paris Cedex 07, France Website: www.cnil.fr

Contact Us

For questions about this Privacy Policy or to exercise your data protection rights, contact us at: HIIPE.io SAS 60 rue François Ier, 75008 Paris, France Email: privacy@hiipe.io RCS Paris: 100 237 593

═══════════════════════════════════════════════════════════

COOKIE POLICY

Last Updated: January 2026

Introduction

This Cookie Policy explains how HIIPE.io SAS ("HIIPE", "we", "us", or "our") uses cookies and similar tracking technologies on our website and platform at hiipe.io.

By using our platform, you consent to the use of cookies in accordance with this policy. You can manage your cookie preferences as described below.

What Are Cookies

Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners.

Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (remain on your device for a set period or until you delete them).

Cookies We Use

3.1 Essential Cookies These cookies are necessary for the platform to function and cannot be disabled. They include authentication cookies (keep you logged in during your session), security cookies (protect against fraud and unauthorized access), and preference cookies (remember your settings and preferences).

3.2 Analytics Cookies These cookies help us understand how visitors use our platform, allowing us to improve performance and user experience. We use Google Analytics, which collects anonymized data about page views, session duration, and user interactions. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Cookie Details

hiipe_session (Essential): Maintains user login session - Duration: Session hiipe_csrf (Essential): Security token to prevent cross-site request forgery - Duration: Session hiipe_prefs (Essential): Stores user preferences - Duration: 1 year _ga (Analytics): Google Analytics distinguishes users - Duration: 2 years ga* (Analytics): Google Analytics maintains session state - Duration: 2 years

Managing Cookies

5.1 Cookie Consent Banner When you first visit our platform, you will see a cookie consent banner allowing you to accept or decline non-essential cookies. You can change your preferences at any time through the cookie settings link in our website footer.

5.2 Browser Settings Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or delete existing cookies. Please note that disabling essential cookies may affect the functionality of our platform.

Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use or for other operational, legal, or regulatory reasons. Please check this page periodically for updates.

Contact Us

If you have questions about our use of cookies, please contact us at: HIIPE.io SAS 60 rue François Ier, 75008 Paris, France Email: privacy@hiipe.io

═══════════════════════════════════════════════════════════

ACCEPTABLE USE POLICY

Last Updated: January 2026

Introduction

This Acceptable Use Policy ("AUP") governs your use of HIIPE.io and is incorporated into our Terms of Service. By using HIIPE, you agree to comply with this policy.

This policy applies to all content you create, upload, or send through HIIPE, including profile information, Capture Link content, and Direct Messages (SMS, email, WhatsApp).

Prohibited Content

You may not use HIIPE to create, store, share, or send the following types of content:

2.1 Illegal Content Content that violates any applicable law or regulation, promotion of illegal activities or substances, and content that facilitates fraud, identity theft, or financial crimes.

2.2 Harmful or Violent Content Content that promotes violence or threatens harm to any individual or group, hate speech targeting individuals or groups based on race, ethnicity, religion, gender, sexual orientation, disability, or other protected characteristics, harassment, bullying, or intimidation, and content glorifying self-harm or suicide.

2.3 Adult and Explicit Content Pornography or sexually explicit material and adult content not suitable for general audiences.

2.4 Child Safety Any content that exploits, harms, or endangers minors and child sexual abuse material (CSAM) of any kind, which will be reported to relevant authorities.

2.5 Intellectual Property Violations Content that infringes on copyrights, trademarks, or other intellectual property rights and use of others' content without proper authorization or licensing.

2.6 Deceptive Content Misinformation or disinformation intended to deceive, impersonation of other individuals, brands, or organizations, and phishing or attempts to collect credentials or sensitive information through deception.

Prohibited Activities

You may not engage in the following activities on HIIPE:

3.1 Spam and Unsolicited Messaging Sending unsolicited bulk messages, messaging Fans without their proper consent, purchasing, renting, or using harvested contact lists, and sending messages that do not include a clear unsubscribe mechanism.

3.2 Technical Abuse Attempting to gain unauthorized access to HIIPE systems or other user accounts, introducing malware, viruses, or other harmful code, interfering with or disrupting the platform or its infrastructure, scraping, crawling, or automated data collection without authorization, and circumventing security measures or access controls.

3.3 Platform Misuse Creating multiple accounts to evade enforcement actions, reselling or sublicensing HIIPE services without authorization, and using the platform for purposes other than legitimate fan engagement.

Direct Messaging Guidelines

When sending Direct Messages through HIIPE, you must only message Fans who have opted in to receive communications from you, identify yourself clearly in your messages, honor unsubscribe requests promptly, comply with applicable anti-spam laws (including GDPR, CAN-SPAM, TCPA, CASL), maintain accurate sender information, and not use misleading subject lines or content.

Enforcement

HIIPE reserves the right to investigate and take appropriate action against violations of this policy. Actions may include issuing warnings, removing or disabling content, temporarily suspending account access, permanently terminating accounts, and reporting illegal activity to law enforcement.

We may take enforcement action at our sole discretion, without prior notice, and without liability to you.

Reporting Violations

If you become aware of content or activity that violates this policy, please report it to us at abuse@hiipe.io. Please include a description of the violation, the URL or identifier of the content (if applicable), and any supporting evidence.

Changes to This Policy

We may update this Acceptable Use Policy from time to time. Material changes will be communicated through the platform or via email. Continued use of HIIPE after changes take effect constitutes acceptance of the updated policy.

Contact Us

For questions about this policy, contact us at: HIIPE.io SAS 60 rue François Ier, 75008 Paris, France Email: legal@hiipe.io Abuse reports: abuse@hiipe.io

═══════════════════════════════════════════════════════════

DATA PROCESSING AGREEMENT

Last Updated: January 2026

Introduction

This Data Processing Agreement ("DPA") forms part of the Terms of Service between HIIPE.io SAS ("HIIPE", "Processor") and you ("Customer", "Controller") for the provision of the HIIPE platform services.

This DPA reflects the parties' agreement regarding the processing of Personal Data in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws.

By accepting the Terms of Service, you also accept this DPA.

Definitions

"Controller" means you, the Customer, who determines the purposes and means of processing Fan Data. "Processor" means HIIPE, which processes Personal Data on behalf of the Controller. "Personal Data" means any information relating to an identified or identifiable natural person. "Fan Data" means Personal Data of Fans collected through the Customer's Capture Links and processed through HIIPE. "Sub-processor" means any third party engaged by HIIPE to process Personal Data. "Data Subject" means an identified or identifiable natural person whose Personal Data is processed. "Security Incident" means any unauthorized access to, or acquisition, use, or disclosure of Personal Data.

Scope of Processing

3.1 Subject Matter HIIPE processes Fan Data on behalf of the Customer to provide the platform services, including fan data management, Direct Messaging (SMS, email, WhatsApp), and analytics.

3.2 Nature and Purpose The nature and purpose of processing includes collection and storage of Fan contact information, delivery of Direct Messages on Customer's behalf, processing of opt-in and opt-out requests, generation of analytics and engagement reports, and location detection for geographic targeting.

3.3 Categories of Data Subjects Fans who submit their information through Customer's Capture Links.

3.4 Types of Personal Data First name, last name, phone number, email address (optional), city and country, and IP address (at time of submission).

3.5 Duration Processing continues for the duration of the Customer's use of the HIIPE platform, plus any retention period required by law.

Processor Obligations

HIIPE shall process Personal Data only on documented instructions from the Controller unless required by applicable law, ensure that persons authorized to process Personal Data have committed to confidentiality, implement appropriate technical and organizational security measures, engage Sub-processors only with prior authorization and pursuant to a written contract, assist the Controller in responding to Data Subject requests, assist the Controller in ensuring compliance with security, breach notification, and impact assessment obligations, delete or return Personal Data upon termination of services at Controller's choice, and make available information necessary to demonstrate compliance and allow for audits.

Controller Obligations

The Customer shall ensure that its collection and use of Fan Data complies with applicable data protection laws, obtain valid consent from Fans before collecting their Personal Data, provide appropriate privacy notices to Data Subjects, ensure that its instructions to HIIPE comply with applicable law, and respond to Data Subject requests (with HIIPE's assistance where applicable).

Sub-processors

6.1 Authorization The Customer provides general authorization for HIIPE to engage Sub-processors to perform specific processing activities. HIIPE shall ensure that Sub-processors are bound by data protection obligations no less protective than those in this DPA.

6.2 Current Sub-processors Amazon Web Services (Cloud infrastructure and hosting) - United States Vercel (Application hosting) - United States Conecteo (SMS message delivery) - France / EU Mailjet / SendGrid (Email delivery) - EU / United States Stripe (Payment processing) - United States MaxMind (IP geolocation) - United States Google Analytics (Website analytics) - United States

6.3 Changes to Sub-processors HIIPE will notify the Customer of any intended changes to Sub-processors by updating the list on our website at hiipe.io/legal/sub-processors. The Customer may object to new Sub-processors by notifying HIIPE within 30 days.

Security Measures

HIIPE implements and maintains appropriate technical and organizational measures to protect Personal Data, including encryption of data in transit (TLS 1.2+) and at rest (AES-256), access controls and authentication mechanisms, regular security assessments and vulnerability testing, employee security training and confidentiality obligations, and incident response and business continuity procedures.

Security Incident Notification

HIIPE will notify the Customer without undue delay, and in any event within 48 hours, after becoming aware of a Security Incident affecting Customer's Personal Data. The notification will include a description of the nature of the incident, categories and approximate number of Data Subjects affected, likely consequences of the incident, and measures taken or proposed to address the incident.

Data Subject Requests

HIIPE will assist the Customer in responding to requests from Data Subjects exercising their rights under GDPR (access, rectification, erasure, restriction, portability, objection). If HIIPE receives a request directly from a Data Subject, HIIPE will promptly redirect the request to the relevant Customer unless legally prohibited from doing so.

Termination and Data Deletion

Upon termination of the Customer's account or upon Customer's request, HIIPE will delete all Personal Data within 30 days unless retention is required by applicable law, provide the Customer with an export of their Fan Data in a standard format upon request before deletion, and certify deletion in writing upon Customer's request.

HIIPE may retain anonymized, aggregated data that no longer constitutes Personal Data.

International Data Transfers

To the extent that Personal Data is transferred outside the European Economic Area (EEA) to countries not recognized as providing an adequate level of data protection, HIIPE ensures appropriate safeguards through Standard Contractual Clauses (SCCs) incorporated into agreements with US-based Sub-processors and supplementary measures including additional technical and organizational measures as required.

Audit Rights

HIIPE will make available to the Customer all information necessary to demonstrate compliance with Article 28 of the GDPR and allow for audits, including inspections, conducted by the Customer or an authorized auditor.

The Customer shall provide at least 30 days' prior written notice of any audit request. Audits shall be conducted during normal business hours, no more than once per year (unless required by a supervisory authority), and subject to reasonable confidentiality obligations.

General Provisions

13.1 Conflicts In the event of any conflict between this DPA and the Terms of Service, this DPA shall prevail with respect to data protection matters.

13.2 Liability The limitations of liability set forth in the Terms of Service apply to this DPA.

13.3 Governing Law This DPA is governed by French law. Any disputes shall be subject to the exclusive jurisdiction of the courts of Paris, France.

Contact

For questions about this DPA or data protection matters, contact: HIIPE.io SAS 60 rue François Ier, 75008 Paris, France Email: privacy@hiipe.io

═══════════════════════════════════════════════════════════

© 2026 HIIPE.io SAS. All rights reserved.