Privacy Policy

Drrop ("we," "us," or "our") is operated by Shimal Dhanjee. Our service is accessible at drrop.io. If you have questions about this policy, contact us at support@drrop.io.

We collect the following information when you use Drrop:

• Account information: Your name and email address provided through Google Sign-In.
• Google OAuth tokens: Access tokens that allow Drrop to upload videos to your YouTube channel on your behalf. These are stored securely and never shared.
• Usage data: Upload history, credit balance, and session information stored in our database.
• Payment information: Stripe processes all payments. We do not store your credit card details.
• Video files: Videos you upload are sent directly to YouTube via the YouTube Data API. We do not permanently store your video files.

We use the information we collect to:

• Authenticate you and manage your account
• Upload videos to YouTube on your behalf
• Track your credit usage and upload history
• Process payments and issue receipts
• Send transactional emails (upload confirmations, low credit alerts)
• Improve the service and diagnose technical issues

Drrop uses the YouTube Data API v3. By signing in with Google, you grant Drrop permission to:

• View your YouTube channel information
• Upload videos to your YouTube account
• Manage video metadata (titles, descriptions, privacy settings)

Drrop's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Drrop's access to your Google account at any time through your Google Account permissions page.

We do not sell your personal information. We share data only with:

• Google / YouTube: To fulfill upload requests on your behalf.
• Stripe: For payment processing.
• Supabase: Our database and authentication provider.
• Vercel: Our hosting infrastructure.

All third-party providers are bound by their own privacy policies and data processing agreements.

We retain your account data for as long as your account is active. Upload logs are retained for 90 days. You may request deletion of your account and associated data at any time by emailing support@drrop.io.

We use industry-standard practices to protect your data, including encrypted connections (HTTPS), secure token storage, and row-level security on our database. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Drrop is not intended for users under the age of 13. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Continued use of the service after changes constitutes acceptance.

For privacy-related questions or data deletion requests, contact us at support@drrop.io.