Privacy Policy

1. Overview

FinalDrop ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect information when you use our Service at finaldrop.io. By using the Service, you agree to the practices described in this policy.

2. Information We Collect

Account Information

When you register, we collect your email address and, optionally, your display name. This is used to authenticate you and manage your account.

Signing In with Google

If you sign in with Google, Google shares your basic profile with us: your email address, your name and the URL of your profile picture. We use the email address to create and identify your FinalDrop account. Your name and picture URL are kept by our authentication provider (Supabase) as part of your sign-in record; they are not shown on your portfolio or delivery pages unless you add a name or photo in your profile settings yourself. FinalDrop does not access your Google Drive, Gmail, contacts or any other Google data, and does not share Google user data with anyone other than the service providers listed in section 4 that operate the Service.

Usage Data

We collect information about how you interact with the Service, including delivery page creation events, page views, and feature usage. This helps us improve the product.

Delivery Page Analytics

When your clients view a delivery page or click a download button, we record the event with its approximate location (city and country, derived from the IP address at the time of the request) and device type (mobile or desktop) to provide you with delivery analytics. We do not record names or email addresses of your clients, and IP addresses are not stored with these analytics records. IP addresses are kept for a limited time in a security log used to limit repeated password and request attempts.

Billing Information

Payment information (credit card details, billing address) is collected and processed directly by Creem, our payment provider and Merchant of Record. FinalDrop does not store or have access to your full payment details.

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To authenticate your account and secure your delivery pages
• To send transactional emails (account confirmation, password reset)
• To process subscription billing via Creem, our payment provider
• To analyze usage patterns and improve product features
• To respond to support inquiries

We do not sell your personal data to third parties.

4. Third-Party Services

We use the following third-party services to operate the platform:

• Supabase — Authentication and database. Your account data is stored on Supabase infrastructure. See Supabase's Privacy Policy.
• Creem — Payment processing and subscription management, acting as our Merchant of Record. Your payment details are collected and stored directly by Creem, not by FinalDrop. See Creem's Privacy Policy.
• Resend — Transactional email (sign-in links and account notices). Your email address is passed to Resend so these messages can be delivered. See Resend's Privacy Policy.
• Google Web Risk — Checks on download links. We send full download URLs to Google's Web Risk API for comparison with Google's lists of known malware and phishing sites. These checks run when you create a delivery page, change a download URL, or unarchive a delivery page, and once a day for all delivery pages. No other information about you or your clients is included in these requests. See the Google Cloud Privacy Notice.
• Vercel — Hosting and edge network. See Vercel's Privacy Policy.

5. Cookies

We use essential cookies and local storage to maintain your session and authentication state. We do not use advertising or tracking cookies.

6. Data Retention

We retain your account data for as long as your account is active. When you request account deletion from your dashboard, your public pages stop being served immediately, and your data is kept for a further 30 days so that you can still cancel the request. After that window your account, your uploaded images, and the data associated with them are permanently destroyed. The only exception is records we are required to keep by law, such as billing records held by our payment provider.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data

You can exercise the deletion right yourself at any time from your dashboard settings — see "Data Retention" above for exactly what happens and when. For the other rights, contact us at support@finaldrop.io.

8. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure authentication tokens, and access controls. However, no method of transmission over the internet is 100% secure.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or by posting a notice on the Service. Continued use after changes constitutes acceptance.

10. Contact

For privacy-related questions or requests, contact us at support@finaldrop.io.