Privacy Policy

1. Overview

FinalDrop ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect information when you use our Service at finaldrop.io. By using the Service, you agree to the practices described in this policy.

2. Information We Collect

Account Information

When you register, we collect your email address and, optionally, your display name. This is used to authenticate you and manage your account.

Usage Data

We collect information about how you interact with the Service, including portal creation events, page views, and feature usage. This helps us improve the product.

Portal Analytics

When your clients view a delivery portal, we record anonymized view counts and approximate geographic location (country level) to provide you with delivery analytics. No personally identifiable information about your clients is stored.

Billing Information

Payment information (credit card details, billing address) is collected and processed directly by Paddle, our Merchant of Record. FinalDrop does not store or have access to your full payment details.

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To authenticate your account and secure your portals
• To send transactional emails (account confirmation, password reset)
• To process subscription billing via Paddle
• To analyze usage patterns and improve product features
• To respond to support inquiries

We do not sell your personal data to third parties.

4. Third-Party Services

We use the following third-party services to operate the platform:

• Supabase — Authentication and database. Your account data is stored on Supabase infrastructure. See Supabase's Privacy Policy.
• Paddle — Payment processing and subscription management (Merchant of Record). See Paddle's Privacy Policy.
• Vercel — Hosting and edge network. See Vercel's Privacy Policy.

5. Cookies

We use essential cookies and local storage to maintain your session and authentication state. We do not use advertising or tracking cookies.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where required by law (e.g., billing records retained by Paddle).

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data

To exercise any of these rights, contact us at [email protected].

8. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure authentication tokens, and access controls. However, no method of transmission over the internet is 100% secure.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or by posting a notice on the Service. Continued use after changes constitutes acceptance.

10. Contact

For privacy-related questions or requests, contact us at [email protected].