Privacy Policy

drrop.io ("we," "us," or "our") is operated by SD Los Angeles LLC. Our service is accessible at drrop.io. For questions about this policy, contact us at support@drrop.io.

• Account information: Name and email address via Google Sign-In.
• Google OAuth tokens: Access and refresh tokens for YouTube, Google Ads, and Google Drive. Stored securely and never shared.
• Google Ads data: Your Google Ads customer ID and account name, used solely to upload video assets to your selected account.
• Google Drive data: We create and write to a single Google Sheet in your Drive to log uploaded video IDs and URLs. We access no other Drive files.
• Meta data: When you connect Meta, we receive an access token, your Facebook name and app-scoped user ID, and the list of ad accounts you can manage (ID, name, status). We store the token, your name, and the ad account you select.
• Upload history: Records of videos uploaded, destinations used, and timestamps.
• Payment information: Stripe processes all payments. We do not store card details.
• Video files: Uploaded videos are transmitted directly to YouTube, Google Ads Asset Studio, or your Meta ad account. We do not permanently store your video files.

• Authenticate you and manage your account
• Upload videos to YouTube, Google Ads Asset Studio, and your selected Meta ad account on your behalf
• Create and update a Google Sheet log of your uploads in your Google Drive
• Track subscription status and monthly upload usage
• Process payments and send receipts
• Send transactional emails
• Diagnose technical issues and improve the service

drrop.io uses the following Google APIs:

• YouTube Data API v3: to upload videos and manage metadata on your YouTube channel
• Google Ads API: to upload video assets to your Google Ads Asset Studio
• Google Drive API: to create and write to a Google Sheet logging your upload results

By connecting your Google account, you grant drrop.io permission to perform the above actions on your behalf. drrop.io's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke drrop.io's access at any time via your Google Account permissions page.

When you connect Meta (Facebook Login for Business), drrop.io requests the ads_management and business_management permissions. We use them only to:

• List the ad accounts you can manage so you can pick one
• Upload your videos to that ad account's video library, named with your drrop.io title settings
• Check whether Meta has finished processing each video

drrop.io does not create, edit, or publish campaigns, ad sets, or ads, does not read ad performance or audience data, and does not post to Pages or Instagram. We do not sell Meta data or use it for advertising, profiling, or training AI models.

You can disconnect Meta at any time from the drrop.io dashboard, which deletes your stored Meta token and ad account selection. You can also remove drrop.io in your Facebook settings under Business Integrations; when you do, Meta notifies us and we delete your Meta data automatically. You can confirm a deletion at drrop.io/meta-deletion.

We do not sell your personal information. We share data only with:

• Google: To fulfill upload requests via YouTube, Google Ads, and Drive APIs
• Meta: To upload videos to the Meta ad account you select
• Stripe: For subscription payment processing
• Supabase: Our database and authentication provider
• Vercel: Our hosting infrastructure
• Resend: For transactional email delivery

All providers are bound by their own privacy policies and data processing agreements.

drrop.io's use of data received from Google APIs is limited to the practices disclosed in this privacy policy. We do not use Google user data for:

• Targeted or personalized advertising
• Selling to data brokers or information resellers
• Determining credit-worthiness or lending purposes
• Developing, improving, or training generalized or non-personalized AI or machine learning models

Our use of Google API data adheres strictly to the Google API Services User Data Policy Limited Use requirements.

Account data is retained while your account is active. Upload logs are retained for 90 days. Google OAuth tokens are deleted upon account deletion. Meta tokens are deleted when you disconnect Meta, remove drrop.io in your Facebook settings, or delete your account. To delete your account and all associated data, email support@drrop.io and we will process your request within 7 business days.

We use HTTPS for all connections, encrypted token storage, and row-level security on our database. No internet transmission is 100% secure.

drrop.io is not intended for users under 13. We do not knowingly collect data from children.

We will notify users of significant changes by updating the date above. Continued use constitutes acceptance.

support@drrop.io