Privacy Policy

This Privacy Policy explains how DropVerse handles personal information when you visit our website, create an account, use a workspace, order a service, or contact us. It is intended to describe our practices for applicable privacy laws, including GDPR-style data-protection principles and applicable CCPA/CPRA rights. It is not a substitute for advice about your specific legal obligations.

Information we collect

Depending on how you use DropVerse, we may collect your name, email address, phone number, optional Telegram username, username, authentication details, workspace and team records, project information, client records, workspace activity, reusable assets, invoice information, referral codes, clicks, commissions, support messages, and payment status. The payment provider shown at checkout receives the payment and billing information needed to process a transaction; DropVerse does not store full card numbers.

How we use information

We use information to provide authentication, workspaces, services, invoices, referrals, customer support, fraud prevention, payment confirmation, security, troubleshooting, and service improvements. We may send transactional messages such as account verification, payment, security, and order updates. Marketing messages can be unsubscribed from where applicable.

Legal bases and business purposes

Where GDPR applies, we generally rely on performance of a contract, legitimate interests in securing and improving the service, compliance with legal obligations, and consent where consent is required. Where CCPA/CPRA applies, we use data for business purposes such as providing the service, security, analytics, debugging, and customer support. We do not sell personal information or share it for cross-context behavioral advertising. Lead-pack sellers must have a lawful basis and appropriate rights to provide any contact data they upload; buyers are responsible for using purchased data in compliance with applicable privacy, anti-spam, and direct-marketing laws. Lead-pack sellers must have a lawful basis and appropriate rights to provide any contact data they upload; buyers are responsible for using purchased data in compliance with applicable privacy, anti-spam, and direct-marketing laws.

Service providers

Supabase supports authentication and database storage. Vercel hosts and delivers the application. The payment provider selected and shown at checkout processes the relevant payment, receipt, subscription, tax, and refund information. Email delivery may be provided through our authentication or transactional email configuration. These providers process information under their own terms and privacy notices and only for the services they provide to us.

Cookies and similar technologies

DropVerse uses essential cookies or local storage needed for authentication, security, session continuity, and user preferences. The payment provider shown at checkout may use cookies or similar technologies for fraud prevention, payment security, and checkout functionality. We do not intentionally use non-essential tracking cookies on the public marketing pages unless this notice is updated. Your browser can block cookies, but some account or checkout functions may stop working.

Retention and security

We retain account, order, invoice, and financial records for as long as needed to provide the service, resolve disputes, prevent abuse, and meet legal or accounting requirements. We use access controls, authenticated sessions, row-level security where configured, encrypted transport, and provider security controls. No internet service can guarantee absolute security.

Your privacy rights

Subject to applicable law, you may request access, correction, deletion, portability, restriction, objection, or withdrawal of consent. California residents may also request to know, correct, delete, or opt out of sale/sharing as applicable. Email dropverseagency@gmail.com from the address connected to your account and describe your request. We may verify identity before fulfilling it and will not discriminate against you for exercising a lawful right. You may also contact your local data-protection authority.

International transfers and children

Our providers may process information in countries different from where you live and use appropriate contractual or other lawful safeguards where required. DropVerse is not directed to children under the minimum age required by applicable law. If you believe a child provided information, contact us so we can review and delete it where appropriate.

Updates and contact

We may update this policy when our services, providers, or legal obligations change. The effective date above will change when we publish an update. Questions and privacy requests should be sent to dropverseagency@gmail.com.