Privacy Policy | Dropply

1. Introduction

Welcome to Dropply ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and use our services, and tell you about your privacy rights and how the law protects you.

2. Information We Collect

2.1 Information You Provide

We collect the following information that you provide directly to us:

Account Information: Email address, name, and authentication credentials when you create an account
Payment Information: Billing details processed securely through our payment processor (Stripe)
User Content: Photos and images you upload to our service for transformation
Communications: Messages you send to us, including support requests and feedback

2.2 Information Automatically Collected

Usage Data: Information about how you use our website and services
Device Information: Browser type, operating system, IP address, and device identifiers
Cookies and Tracking: We use cookies and similar technologies to track activity and improve our services

3. How We Use Your Information

We use your information for the following purposes:

To provide, maintain, and improve our AI photo transformation services
To process your transactions and manage your subscription
To send you technical notices, updates, security alerts, and support messages
To respond to your comments, questions, and customer service requests
To monitor and analyze trends, usage, and activities in connection with our services
To detect, prevent, and address technical issues and fraudulent activity
To comply with legal obligations and enforce our terms of service

4. How We Share Your Information

We may share your information in the following circumstances:

Service Providers: With third-party vendors who perform services on our behalf (e.g., Stripe for payment processing, Supabase for data storage)
Legal Requirements: When required by law or to respond to legal process
Business Transfers: In connection with a merger, sale, or acquisition of all or part of our business
With Your Consent: When you have given us explicit permission to share your information

We do not sell your personal information to third parties.

5. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. When you delete your account, we will delete or anonymize your personal data, unless we are required to retain it for legal or regulatory purposes. Uploaded images are retained for the duration of your active subscription and may be deleted in accordance with our data retention schedule.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

Access: Request access to the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data
Portability: Request a copy of your data in a structured, machine-readable format
Objection: Object to our processing of your personal data
Withdraw Consent: Withdraw consent where we rely on consent to process your data

To exercise these rights, please contact us at the email address provided below.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

9. Third-Party Services

Our service uses the following third-party services:

Google OAuth: For authentication purposes (subject to Google's Privacy Policy)
Stripe: For payment processing (subject to Stripe's Privacy Policy)
Supabase: For data storage and authentication (subject to Supabase's Privacy Policy)

We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.

10. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

11. Children's Privacy

Our service is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

12. Changes to This Privacy Policy

We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. You are advised to review this privacy policy periodically for any changes. Changes are effective when posted on this page.

13. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at:

Email: support@dropply.com
Location: Norway

For data protection inquiries or to exercise your rights, you can also reach us at the same email address.

14. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

Contract Performance: To provide our services under our terms of service
Legitimate Interests: To improve our services and communicate with you
Legal Obligation: To comply with applicable laws and regulations
Consent: Where you have provided explicit consent

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable law.

15. CCPA Rights (California Users)

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA):

The right to know what personal information we collect, use, disclose, and sell
The right to request deletion of your personal information
The right to opt-out of the sale of your personal information (we do not sell personal information)
The right to non-discrimination for exercising your CCPA rights