Privacy Policy

Effective date: February 27, 2026

1. Information We Collect

Account information: name, email address, business name, and phone number provided during registration.

Documents: files submitted by your clients via email, SMS, or manual upload. These are stored securely and only accessible to you.

Payment information: processed by Stripe. We do not store credit card numbers.

Usage data: basic analytics such as login activity and feature usage.

2. How We Use Your Information

We use your information to provide the Service, process payments, send transactional emails (document receipts, daily digests), and improve the product.

3. Third-Party Services

We use the following third-party services to operate DocDrop:

• Supabase — database and file storage
• Stripe — payment processing
• Twilio — phone number provisioning and SMS
• Mailgun — email routing and delivery
• Google Drive — optional document sync (only if you connect it)

4. Data Storage and Security

Documents are stored in encrypted cloud storage. All data transmission uses HTTPS. We follow industry best practices to protect your data.

5. Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data (profile, clients, documents, files) is permanently deleted.

6. Your Rights

You can:

• Access and download your documents at any time
• Update your profile information
• Delete your account and all associated data
• Export all documents for a client as a ZIP file

7. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email.

9. Contact

Questions about privacy? Contact us at support@docdrop.xyz.