Privacy Policy

Last updated: 13 June 2026

Before you publish: replace [Company Legal Name], [Country/Jurisdiction] and the contact email with your real details, and have a lawyer review this. It is a starting template, not legal advice.

This Privacy Policy explains how [Company Legal Name] ("DropAI", "we", "us") collects, uses, and protects your information when you use the DropAI website and application (the "Service"). By using the Service you agree to this policy.

1. Information we collect

Account data: your name and email address, provided when you sign up (handled via our authentication provider, Supabase).
Usage data: the products, stores, settings, and activity you create in the app, plus basic logs and request counts used to operate and rate-limit the Service.
Payment data: processed by our payment provider, Paddle (Merchant of Record). We do not store your card details; we receive your subscription status and plan.
Connected accounts: if you choose to connect Shopify, CJ Dropshipping, Meta, or your own API keys, we store the tokens needed to provide those features. API keys you add yourself are stored in your browser.
Cookies / local storage: we use browser local storage to keep you signed in and remember your preferences.

2. How we use your information

To provide, operate, and improve the Service.
To process subscriptions and prevent abuse of shared resources (usage limits).
To communicate with you about your account, security, and updates.
To comply with legal obligations.

3. Third-party services

We share data with service providers only as needed to run the Service, including: Supabase (authentication & database), Paddle (payments), Anthropic (AI features), fal.ai (AI media), CJ Dropshipping, Shopify, and Meta where you connect them. Each processes data under its own privacy terms.

4. Data retention

We keep your data for as long as your account is active. You may request deletion at any time (see Contact). Some records may be retained where required by law or for legitimate business purposes.

5. Your rights

Depending on your location (including under the EU/UK GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.

6. Security

We use reasonable technical and organizational measures to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Children

The Service is not directed to anyone under 18, and we do not knowingly collect data from children.

8. Changes

We may update this policy from time to time. Material changes will be posted on this page with a new "Last updated" date.

9. Contact

Questions or requests: support@dropai.agency — [Company Legal Name], [Country/Jurisdiction].