Droppa — Privacy Policy

Effective date: July 18, 2026

This Privacy Policy explains what personal information Draft LLC, a Maryland limited liability company operating the Droppa service ("Droppa," "we," "us," or "our"), collects from you when you use Droppa, why we collect it, and who we share it with. It forms part of our Terms of Service.

This policy is about your information as a Droppa user. It is not the privacy policy of any store you build with Droppa. If you operate a store, you are its data controller and you are responsible for your own customers' data and your own privacy policy.

1. What we collect

Account information. When you create an account we collect your email address, and whatever else your chosen sign-in method passes to us (for example, a name or profile image if you sign in through a third-party provider). Accounts are handled for us by Clerk, our authentication provider.

Billing information. If you subscribe, payment is processed by Stripe. Your card number never reaches our servers. We receive from Stripe only what we need to run your subscription — a customer identifier, your subscription status, and basic billing metadata such as the country and last four digits Stripe reports.

What you submit and what we generate. We store the product links you paste, the product data fetched from those links, and the store assets Droppa generates from them — copy, product data, theme files, and the settings you tweak. We keep these so you can return to your stores, re-download them, and regenerate them.

Server and usage logs. Like any web service, our servers and hosting provider record technical information about requests: IP address, timestamp, page or endpoint, browser user-agent, and errors. We use this to keep the service running, to debug failures, and to enforce rate limits and prevent abuse.

Analytics. We use privacy-friendly, aggregate analytics to see which pages are used and where the product breaks down. We do not use analytics to build advertising profiles, and we do not sell what we learn.

2. What we do not collect

We do not ask for, and do not want, sensitive personal information — health information, government identification numbers, or precise location. Please do not send it to us. We do not knowingly collect information from children under 13, and Droppa is not directed to them.

3. Why we use it

We use the information above only to:

• create and secure your account, and sign you in;
• run Droppa — ingest the links you submit, generate stores, and let you download and revisit them;
• take payment, manage your subscription, and handle refunds or disputes;
• keep the service available and honest — debugging, rate limiting, and preventing abuse or fraud;
• respond to you when you contact us;
• understand, in aggregate, how the product is used so we can improve it;
• comply with the law.

4. Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only with the service providers that make Droppa work, and only for that purpose:

• Clerk — accounts and authentication.
• Stripe — payment processing and subscription billing.
• Vercel — application hosting, and aggregate product analytics.
• Neon — the database that stores your account's stores and job history.
• Cloudflare R2 — storage for generated store files and images.
• OpenAI — generating store copy from the product data you submit. The product information you paste is sent to this provider to produce your store's text.
• Product data providers — we query third-party APIs to fetch the details of the product link you submit.

We may also disclose information if we are legally required to, or where it is necessary to protect our rights, our users, or the public.

If the business is ever sold or merged, your information may transfer with it. If that happens, we will say so before it takes effect.

5. How long we keep it

We keep your account information and the stores tied to your account for as long as your account exists. Server logs are kept for a short operational period and then age out. When you ask us to delete your account, we delete your account information and your stored stores, except where we must keep records for legal, tax, or accounting reasons — for example, records of payments.

6. Your choices and your rights

You can ask us to show you the personal information we hold about you, correct it, or delete it — including deleting your account entirely. Depending on where you live, you may have further rights under laws such as the California Consumer Privacy Act or the GDPR, including the right to object to certain processing and to complain to a supervisory authority. We do not charge you or degrade the service for exercising any of these rights.

To make a request, email us at hello@droppa.ai from the address on your account. We will respond within the time the applicable law requires, and we may need to verify that the request is really yours before we act on it.

7. Security

We take reasonable measures to protect your information: access to production systems is limited, traffic is encrypted in transit, and payment card data is handled entirely by Stripe rather than by us. No service can promise perfect security, and we do not claim to hold any security certification. If a breach affects your personal information, we will notify you as required by law.

8. International users

Droppa is operated from the United States and your information is processed there. If you use Droppa from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

9. Cookies and similar technologies

We use cookies that are necessary for the service to work — principally to keep you signed in — and privacy-friendly analytics as described above. We do not use advertising cookies or third-party ad trackers.

10. Changes to this policy

We may update this policy as Droppa changes. When we do, we will update the effective date above, and for material changes we will give notice through the service or by email before the change takes effect.

11. Contact us

Questions, requests, or complaints about this policy or your information: hello@droppa.ai.