Privacy Policy

1. Overview

FinalDrop ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect information when you use our Service at finaldrop.io. By using the Service, you agree to the practices described in this policy.

2. Information We Collect

Account Information

When you register, we collect your email address and, optionally, your display name. This is used to authenticate you and manage your account.

Usage Data

We collect information about how you interact with the Service, including portal creation events, page views, and feature usage. This helps us improve the product.

Portal Analytics

When your clients view a delivery portal, we record anonymized view counts and approximate geographic location (country level) to provide you with delivery analytics. No personally identifiable information about your clients is stored.

Billing Information

Payment information (credit card details, billing address) is collected and processed directly by our third-party payment provider, which acts as our Merchant of Record. FinalDrop does not store or have access to your full payment details.

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To authenticate your account and secure your portals
• To send transactional emails (account confirmation, password reset)
• To process subscription billing via our payment provider
• To analyze usage patterns and improve product features
• To respond to support inquiries

We do not sell your personal data to third parties.

4. Third-Party Services

We use the following third-party services to operate the platform:

• Supabase — Authentication and database. Your account data is stored on Supabase infrastructure. See Supabase's Privacy Policy.
• Payment Provider (Merchant of Record) — A third-party provider handles payment processing and subscription management. Your payment details are collected and stored directly by this provider, not by FinalDrop.
• Vercel — Hosting and edge network. See Vercel's Privacy Policy.

5. Cookies

We use essential cookies and local storage to maintain your session and authentication state. We do not use advertising or tracking cookies.

6. Data Retention

We retain your account data for as long as your account is active. When you request account deletion from your dashboard, your public pages stop being served immediately, and your data is kept for a further 30 days so that you can still cancel the request. After that window your account, your uploaded images, and the data associated with them are permanently destroyed. The only exception is records we are required to keep by law, such as billing records held by our payment provider.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data

You can exercise the deletion right yourself at any time from your dashboard settings — see "Data Retention" above for exactly what happens and when. For the other rights, contact us at support@finaldrop.io.

8. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure authentication tokens, and access controls. However, no method of transmission over the internet is 100% secure.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or by posting a notice on the Service. Continued use after changes constitutes acceptance.

10. Contact

For privacy-related questions or requests, contact us at support@finaldrop.io.