FishyHub Pte. Ltd. (UEN 202107485C), a Singapore company (“FishyHub,” “we,” “us” or “our”), operates the US FishyHub marketplace. This notice explains how we handle personal information when you visit our US website, use our US marketplace features in an app, create an account, place an order, contact us or participate in our community.

Independent merchants sell products through FishyHub and act as merchants of record for their sales. FishyHub also handles information to operate the marketplace, support orders and process refunds. A merchant's payment role does not make that merchant responsible for every aspect of FishyHub's data handling.

This notice explains our practices; it does not replace separate consent or choices required by law. Contact us at hello@fishyhub.com, with “Privacy request” in the subject line, using that email address.

The information involved depends on the features you use. We obtain information directly from you, through your use of the Platform, and from merchants and providers involved in your orders and support requests.

Payment processing. Payments are handled through Stripe. FishyHub does not store full payment-card numbers or card security codes. We retain only the payment and transaction records identified above to administer purchases and refunds. The payment provider may also handle information for its own compliance, security and payment purposes under its notice: Stripe Privacy Policy.

Sensitive information. Account credentials and certain other information may receive special protection under applicable law. We do not ask customers for precise device location, government identification or financial account numbers. Account credentials are used only to sign you in and are never used to infer anything about you. Anything you type into support messages, community posts or AI chat is collected as submitted, so please assume that anything sensitive you choose to include is retained with it. Please do not send passwords, full card details or unrelated sensitive information in support messages or community posts.

We use the relevant information described above to:

• Create and manage accounts, authenticate users and operate requested features.
• Coordinate purchases and deliveries with merchants, administer payments, issue refunds directly where authorized, and resolve claims.
• Answer questions and send necessary account, security and order communications.
• Maintain, secure, troubleshoot and improve the Platform, including investigating misuse and fraud.
• Provide community features and personalization described in this notice.
• Send promotions and measure marketing as disclosed in Section 5, subject to your choices and applicable requirements.
• Keep necessary business records, meet legal obligations and establish or defend legal claims.

We will provide additional notice and obtain consent when required before materially different uses.

AI chat and photo search. FishyHub offers AI chat and photo-search features. When you use these features, we process your submitted messages, photographs and related feature data to answer questions or identify relevant products. We send inputs directly to DeepSeek through its API to support these features. DeepSeek receives the photograph itself, as you uploaded it, rather than a description extracted from it. For AI chat it receives your messages and the surrounding conversation together with the product context needed to answer. Assume it also receives whatever its API records about the request.

DeepSeek may also use the information sent to it to train or improve its AI models, and may retain it and allow human review. We have not secured an assurance to the contrary, and we do not offer a setting that turns this off, so please treat anything you submit to these features as information that may be used that way.

Please avoid entering passwords, payment-card details or unrelated sensitive information in AI chat, and avoid including people, address labels or other unnecessary personal details in uploaded fish photographs. Camera permission does not itself explain the subsequent processing of an upload. You can choose not to use these features. Contact FishyHub for requests about information submitted through them.

DeepSeek's own privacy settings and opt-outs are not available to you through FishyHub: they apply to its own apps, not to applications built on its API. Send any request about information submitted through our AI features to us instead.

Merchants and delivery providers. Merchants receive customer information associated with their orders. We disclose information reasonably necessary for the relevant order, such as recipient contact details, address, ordered products and relevant claim evidence. A merchant may separately retain records to fulfill its own transaction, legal and accounting duties. Its independent uses are governed by its own applicable notice and obligations. Merchants are permitted to use customer information received through FishyHub only to fulfil the relevant order and provide related support, delivery, returns, refunds or claims handling, subject to any legally required recordkeeping. They must not use it for unrelated marketing, add customers to their own promotional lists or sell it. This restriction is a term of our merchant agreement. Contact the merchant about order-related processing; FishyHub remains responsible for its own handling and for responding to requests concerning information it controls.

Providers supporting FishyHub. Relevant providers assist with hosting, authentication, payment/refund processing, communications, customer support, security and the other features described here. We require appropriate contractual protections where providers process information on our behalf. We do not describe every recipient as a processor acting solely on our instructions: some recipients may have independent responsibilities.

Analytics and advertising recipients. See Section 5 for the actual practices and available choices. These disclosures are distinct from disclosures necessary to fulfill an order.

Public community content. Reviews, public profiles, giveaway listings and other content you choose to publish may be viewed, copied or indexed by others. Do not place your delivery address or private contact details in public posts. Removing content from FishyHub may not remove copies independently made by others.

Legal and business events. We may disclose necessary information to comply with law or valid legal process, protect rights and security, investigate fraud, or support a merger, financing, acquisition or asset transfer with appropriate protections. We may also disclose information at your direction or with your consent.

We use Google Analytics 4 (GA4) for analytics and Google Ads for advertising, loaded through Google Tag Manager. You should assume the full range of advertising features is active, including conversion measurement, remarketing, enhanced conversions, Customer Match, Google Signals and advertising personalisation. Because these tags are managed through a tag container, additional advertising or analytics tags can be added without a change to this site.

Information sent to Google and similar recipients may include cookie, device and browser identifiers, IP address, pages and products viewed, search terms, cart and purchase events, and contact information such as a hashed email address used to match conversions and build audiences. Identifiers associated with a browser or device are not necessarily anonymous.

We disclose the categories above to advertising and analytics providers, principally Google, for advertising measurement, remarketing and audience targeting. Under US state privacy laws we treat these activities as a sale of personal information, sharing for cross-context behavioural advertising, and processing for targeted advertising. We describe them that way because that is the treatment which applies unless every relevant setting and contract shows otherwise, and we would rather over-disclose than tell you we do not sell your information when we have not proven it.

To opt out, email hello@fishyhub.com with “Do not sell or share” in the subject line, from the email address on your account where possible. We will apply the opt-out to that account and tell you when it has taken effect. We will not ask you to verify your identity in order to opt out, and you do not need an account to make the request.

Browser privacy signals. This site does not currently detect Global Privacy Control automatically, and does not respond to the older Do Not Track setting. Until it does, the email channel above is the way to opt out. The two settings are not the same thing, and a browser setting alone would not in any case stop disclosures that happen server-side or audience lists already shared.

You can manage or block cookies through your browser, but blocking all cookies may affect sign-in and checkout, and browser settings do not reach server-side disclosures or account-level advertising choices. There is currently no cookie banner or in-site privacy settings page; opt-out choices are handled by email as described above.

Accounts and purchases are for adults, so we do not knowingly sell or share the personal information of consumers under 16.

You can unsubscribe from promotional emails using their unsubscribe link or contact hello@fishyhub.com. We may still send necessary transaction, security and service messages. Marketing text messages, if offered, will have separate disclosures, consent and opt-out instructions as required; agreeing to the Terms or reading this notice is not itself marketing-text consent.

You may change app permissions through device settings. To request removal of your FishyHub account, email hello@fishyhub.com, preferably from the email address associated with your account, with “Account deletion” in the subject line. You may also contact this address to request correction or deletion of personal information. We may take appropriate steps to verify a request before deleting account information. Do not send your password.

Account removal and deletion of all associated records are not necessarily the same: some records may need to be retained for lawful purposes described below. We will handle the request under applicable law and explain relevant exceptions. Deletion is handled by hand rather than by an automated process, so please assume removing your account does not erase every copy at once. Order, payment and refund records are kept for legal and accounting purposes. Community content you published may remain visible. Support and claim evidence stays with the ticket it belongs to. Anything already sent to a provider - the payment provider, the analytics and advertising recipients, the AI provider - is subject to that provider's own retention, not ours. Backups are overwritten on their own cycle rather than edited.

We retain personal information for the purposes disclosed in this notice, considering the service requested, legal recordkeeping requirements, fraud prevention, open disputes and applicable limitation periods.

We have not set fixed retention periods for any of these categories, and we do not delete them on a schedule. In practice that means account records, orders, payment and refund records, support and claim evidence, activity and security logs, published content, and AI inputs and outputs are kept for as long as the account exists and afterwards for as long as they remain relevant to a legal, accounting, fraud or dispute purpose. If you want information removed sooner, ask us as described above.

We protect information using access controls, encrypted connections and the security features of the hosting and payment providers we use. We have not undergone an independent security audit or certification, and no system is completely secure. This statement does not waive obligations or rights concerning security incidents.

FishyHub is based in Singapore. Your information may be accessed or processed in Singapore, the United States and the other countries where our hosting, analytics, advertising, payment and AI providers operate, depending on our operations and providers. Anything you submit to the AI chat or photo search is sent to DeepSeek's API and should be assumed to be processed and stored in China. Privacy protections may differ between countries. We apply protections required by applicable law to international processing; using the service does not waive your applicable US privacy rights.

Depending on your state of residence, applicable law and whether FishyHub is subject to that law, you may have rights to access or obtain a copy of personal information, correct inaccuracies, request deletion, opt out of sale/sharing or targeted advertising, restrict specified sensitive-data uses, or challenge certain consequential profiling. Some laws also provide information about recipients or an appeal right. These rights are subject to applicable exceptions and are not identical in every state.

Send requests to hello@fishyhub.com, with “Privacy request” in the subject, and email is currently the only channel we offer for privacy requests. Include enough information to identify the relevant account or transaction and your request. Do not send your password or full payment-card details.

For requests requiring verification, we will take proportionate steps to protect your information and verify your identity or an agent's authority. We will not impose identity-verification requirements on opt-out requests where prohibited. You do not need to create an account merely to submit a privacy request.

We will respond within the deadline applicable to the request and explain any permitted extension or denial. If you have a right to appeal a denial, email hello@fishyhub.com with “Privacy appeal”; we will provide the applicable outcome and escalation information. You may also contact your state's privacy regulator or attorney general. We will not unlawfully discriminate against you for exercising privacy rights.

California. The categories below are what we have collected in the preceding 12 months, using the statutory category names. We collect all of them from you, from your use of the Platform, and from the merchants, carriers and providers involved in your orders.

Identifiers - name, username, email address, phone number, delivery and billing address, account identifier, IP address and cookie or device identifiers. Collected to run your account, fulfil orders, provide support and prevent fraud. Disclosed to merchants and delivery providers for your orders, to hosting, authentication, support and security providers, and to advertising and analytics recipients as described in Section 5. Sold and shared for cross-context behavioural advertising.

Customer records under Cal. Civ. Code section 1798.80 - name, address, telephone number and payment status. Collected to administer purchases and refunds. Disclosed to merchants, payment providers and carriers. Not sold or shared.

Commercial information - products viewed, saved and purchased, order history, refunds and claims. Collected to fulfil and administer orders and to recommend relevant products. Disclosed to merchants, payment and operational providers, and to advertising and analytics recipients. Sold and shared for cross-context behavioural advertising.

Internet and network activity - pages and products viewed, search terms, interactions, timestamps and error logs. Collected for security, troubleshooting, analytics and advertising. Disclosed to hosting, security and analytics providers and to advertising recipients. Sold and shared for cross-context behavioural advertising.

Geolocation data - your delivery address and the approximate region inferred from your IP address. Collected to determine delivery eligibility, show the right storefront and detect fraud. Disclosed to fulfilment and operational providers. Not sold or shared.

Audio, electronic, visual or similar information - photographs you upload to photo search and images you attach to claims or posts. Collected to identify products and resolve claims. Disclosed to the AI provider and, for claims, to the relevant merchant. Not sold or shared.

Inferences - saved interests, marketing preferences and product recommendations drawn from your browsing and purchases. Collected to personalise the Platform. Disclosed to operational and recommendation providers and to advertising recipients. Sold and shared for cross-context behavioural advertising.

Sensitive personal information. The only category we collect is your account credentials. We use them to sign you in and for security, which are uses the law permits without a right to limit them. We do not use them to infer characteristics, and we do not sell or share them. We do not collect precise geolocation, government identifiers, financial account numbers, health information, or information about race, religion, union membership, sexual orientation or the contents of your private communications.

Retention. We have not set fixed retention periods for any category. Each is kept for as long as the account exists and afterwards for as long as it remains relevant to a legal, accounting, fraud or dispute purpose, as described in Section 7.

Exercising your rights. Email hello@fishyhub.com to know, access, correct, delete, or opt out of sale and sharing, and to appeal a refusal. Email is currently the only channel we offer, including for an authorised agent. We will not discriminate against you for exercising these rights.

Our accounts and purchases are intended for adults aged 18 or older, and the Platform is not directed to children under 13. We do not knowingly collect personal information from children under 13 without the authorization required by law. If you believe a child has provided information inappropriately, contact hello@fishyhub.com so we can investigate and take the required action. Additional protections for teenagers may apply under state law.

Third-party links and external services may have separate privacy notices. This does not remove FishyHub's responsibility for disclosures it makes to them.

We will update the effective date when we change this notice. For material changes, we will provide notice and obtain consent where required before applying the changed practice. Posting a revised notice does not itself authorize every new use of information already collected.

FishyHub Pte. Ltd. — Privacy inquiries

UEN: 202107485C

Email: hello@fishyhub.com