Privacy policy

1. Scope

This Privacy Policy explains what personal information Droppy collects, how that information is used, and the choices you have when using the website, purchasing a license, and using account features.

2. Information we collect

• Account details: email address and authentication session data when you log in via magic link.
• Purchase and licensing details: payment status, Stripe checkout identifiers, license key records, and issue timestamps.
• Technical and security information: IP address, device/browser metadata, request logs, and anti-fraud signals used to protect services.
• Support communications: messages and information you send to Droppy through email or community channels.
• Creator offer submissions: the email address and public X, Instagram, or TikTok post URL you submit for a social lifetime license, the review decision, and the resulting license record.

3. How we use information

• Process payments, generate and validate license keys, and provide account-based key recovery.
• Deliver product updates, service notifications, and critical account or security notices.
• Operate, maintain, and improve Droppy products and infrastructure.
• Prevent abuse, detect unauthorized use, and enforce legal terms and license conditions.
• Comply with legal obligations and resolve disputes.
• Route creator offer submissions to a private staff review queue, communicate the decision, issue approved licenses, and prevent duplicate or abusive claims.

4. Payment and commerce providers

Droppy does not store full payment card numbers. Payments are processed by Stripe. Payment data is handled according to Stripe's policies and security standards.

5. Service providers and sharing

Droppy shares personal information only with trusted processors as needed to run the service. Typical processors include hosting/CDN providers, authentication and database providers, payment processors, email delivery providers, and Discord for the private creator-offer staff review queue.

• Service providers may process data only for Droppy service operations and security.
• Droppy may disclose data when legally required, to protect rights/safety, or in connection with a merger, acquisition, or asset sale.

6. Data retention

Droppy retains information only as long as necessary for licensing, security, accounting, and legal compliance. Retention periods vary by data type and legal requirements. Creator offer claim records are retained to administer the license, document the review decision, enforce the one-license-per-person rule, and verify the requirement that an approved post remain public for at least 3 months after approval. The anti-abuse IP signal stored with a claim is a keyed hash rather than the original IP address.

7. Security

Droppy uses reasonable administrative, technical, and organizational safeguards. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed.

8. Your choices and rights

• You can request access, correction, or deletion of personal data, subject to legal and contractual limits.
• You can request account/license support by contacting hi@getdroppy.app.
• Transactional emails about purchases, account access, and security cannot be fully opted out while services are active.

9. International processing

Droppy services may be operated from multiple regions. By using Droppy, you understand that information may be processed in countries different from your own.

10. Children

Droppy is not intended for children under 13 (or the minimum legal age in your jurisdiction). If personal data from a child is identified, Droppy will take steps to remove it.

11. Changes to this policy

Droppy may update this Privacy Policy to reflect product, legal, or operational changes. Material updates are effective when posted with an updated effective date.

12. Contact

Privacy requests and questions: hi@getdroppy.app.