Privacy Policy
Last Updated: January 20, 2023
1. Introduction
This Privacy Policy (the “Privacy Policy”) represents the policy of Dropt Inc. (“we,” “us,” or “our”) regarding the collection, use, and management of personal information collected on or through our website, app, and any other Dropt operated platform, or social media page, that links to this Privacy Policy (collectively, the “Site”). Please note, this Privacy Policy does not apply with respect to any Personal Information that we process on behalf of a third party.
This Privacy Policy may change from time to time. Your continued use of our Site after we make changes is deemed to be acceptance of those changes, so please check the privacy policy periodically for updates.
2. What is Personal Information?
“Personal Information” is information that identifies or relates to a particular individual. Examples of Personal Information include, among others, name, email address, phone number, mailing address, and online identifiers.
3. How We Use Personal Information
We use Personal Information for the following purposes:
-
Providing our Site to you;
-
Analyzing, administering, and improving the Site;
-
Enabling secure use of the Site;
-
Sending information and promotional materials;
-
Protecting our rights or our property;
-
Meeting legal obligations; and
-
For other purposes related to the reasons for which you provide Personal Information.
We will retain your Personal Information for the period necessary to fulfill the purposes for which your Personal Information has been collected as outlined in this Privacy Policy unless a longer retention period is required by law.
4. Types of Personal Information We Collect and Use
A. Information that You Provide Us
In various places on the Site, we request information from you via forms. The exact information we need to collect (including Personal Information) will depend on the purpose of the form. For example, if you use the form on our “Contact Us” page, we collect your name, email address, and message. We will indicate on the form whether a particular field of information is mandatory or optional. If you choose not to provide certain information, we may not be able to provide requested services.
B. Information We Automatically Collect from You
We collect the following types of information automatically through your use of the Site:
Cookies, Device Identifiers, and Similar technologies
When you use or access the Site, we and our service providers may use cookies, device identifiers, and similar technologies such as pixels, web beacons, and local storage to collect information about how you use the Site. We process the information collected through such technologies, which may include or be combined with Personal Information, to help operate certain features of the Site, to enhance your experience through personalization, and to help us better understand the features of the Site that you and other users are most interested in.
Most browsers provide you with the ability to block, delete, or disable cookies, and your mobile device may allow you to disable transmission of unique identifiers and location data. If you choose to reject cookies or block device identifiers, some features of the Site may not be available or some functionality may be limited or unavailable. Please review the help pages of your browser or mobile device for assistance with changing your settings.
Some of our service providers may use cookies or other methods to gather information regarding your use of the Site, and may combine the information in these cookies with any Personal Information about you that they may have. The use of such tracking information by a third party depends on the privacy policy of that third party. We do not respond to Do Not Track (“DNT”) signals sent to us by your browser at this time. To learn more about how DNT works, please visit https://allaboutdnt.com/.
Analytics
To assist us with analyzing our website traffic through cookies and similar technologies, we use analytics services, including Posthog. For more information on Posthog's processing of your information, please see https://posthog.com/docs/privacy.
Advertising
We may engage third parties, including social media platforms, who use cookies, pixel tags, and other storage technologies to collect or receive information from our website and elsewhere on the internet to provide marketing services to us, including targeted advertising. If you want to learn more, including how you may opt-out of targeted advertising, you should visit the following sites: https://www.aboutads.info/choices/, https://www.networkadvertising.org, https://www.youradchoices.com (please note: we do not operate or control these third party sites, and there may be additional ways for you to opt out of online advertising). Please note that by opting out, you will continue to see ads, but ads may not be as relevant to your interests.
Log File Information
When you use our Site, our servers automatically record information, including your Internet Protocol address (“IP Address”), browser type, referring URLs (e.g., the site you visited before coming to our Site), domain names associated with your internet service provider, information on your interaction with the Site, and other such information (collectively, “Log File Information”).
We use Log File Information collected from our implementation of the Site to help secure the Site by identifying potential threats and vulnerabilities and in analyzing the effectiveness of our Site to improve the Site's function and content.
Social Media Information
When you choose to connect your social media account to your profile, we collect Personal Information from that social media website. For example, when you connect your Facebook account, we may collect the Personal Information you have made publicly available in Facebook, such as your name, user ID, profile picture, cover photo, username, gender, networks, age range, language, country, friend list, and any other information you have made public. We may also obtain other non-public information from social media websites with your permission. You should check your Facebook or other social media account's privacy settings to understand and change the information sent to us.
5. Disclosure of Personal Information
We will not disclose Personal Information except as set forth in this Privacy Policy or with your consent. Specifically, we do not sell Personal Information. This section describes to whom we disclose Personal Information and for what purposes:
Our Service Providers. We engage service providers to perform tasks on our behalf and to assist us in operating the Site or providing our products and services. For example, we engage third parties to provide analytics services and Site-infrastructure hosting. We take commercially reasonable steps to help ensure our service providers provide at least the same level of protection for Personal Information as we do. More details about these vendors and service providers can be found in our GDPR statement.
Companies Involved in Mergers and Acquisitions Transactions. If we sell or otherwise transfer part or the whole of our business or assets to another organization (e.g., in the course of a transaction like a merger, acquisition, bankruptcy, dissolution, or liquidation), any information collected through the Site, including Personal Information, may be among the items sold or transferred.
Law Enforcement, Government Agencies, and Courts. We may disclose Personal Information at the request of law enforcement or government agencies; in response to subpoenas, court orders, or other legal process; to establish, protect, or exercise our rights; to defend against a legal claim; to protect the rights, property, or safety of any other person; or as otherwise required by law.
6. How We Protect the Confidentiality of Personal Information
We protect the confidentiality and security of information we obtain in the course of business. We use commercially reasonable safeguards, such as industry-standard encryption technology, to help keep the information collected through the Site secure.
Despite these efforts to store Personal Information in a secure operating environment, we cannot guarantee the security of Personal Information during its transmission or its storage on our systems. Further, while we attempt to ensure the integrity and security of Personal Information, we cannot guarantee that our security measures will prevent third parties such as hackers from illegally obtaining access to Personal Information. We do not represent or warrant that Personal Information about you will be protected against, loss, misuse, or alteration by third parties.
7. Accessing, Updating, or Deleting Personal Information
If you would like to otherwise access, update, or delete Personal Information about you, you may submit a request to privacy@dropt.io. We will promptly review all such requests in accordance with applicable law.
If you are a resident of California or are located in the European Union, please see the information below in Section 9 (California Residents) and Section 10 (Individuals in the EU) for more information regarding your rights.
8. Opting Out of Receiving Electronic Communications
With your permission, we may send notifications, promotions, or other information via email or text message (“Communications”). You may choose to stop receiving Communications by indicating your preference in your account profile or settings. Please note that certain Site-related Communications are necessary for the proper functioning and use of the Site (e.g., to verify the phone number associated with your account) and you may not have the ability to opt out of those Communications.
9. International Use of the Site
If you are using our websites from outside the United States, please be aware that personal information may be collected, stored, and processed in the United States. If we transfer personal information internationally, we take steps to provide adequate safeguards, such as entering into standard contractual clauses (as approved by the European Commission) with our service providers. Please be aware that the data protection laws of the United States might not be as comprehensive as those in your country. You may request additional information on our transfer mechanisms using the contact information provided below.
10. California Residents
This section applies to our collection and use of “Personal Information”, as defined under California law, if you are a resident of California.
A. Categories of Personal Information Collected, Used, and Disclosed
In accordance with California law, we collected the following categories of Personal Information within the preceding 12 months:
-
Identifiers such as your name, alias, email address, mailing address, IP address, and online identifiers;
-
Geolocation data such as the precise GPS coordinates of a mobile device;
-
Certain categories of Personal Information described in subdivision (e) of California Civil Code Section 1798.80;
-
Internet or other electronic network activity information, including information on your usage of our Website (“Usage Information”);
-
Information used to create a profile about a consumer reflecting the consumer's preferences or behavior;
-
Electronic, audio, visual, thermal, olfactory, or similar information;
-
Commercial information, including records of products or services purchased or other purchasing histories; and
-
Professional or employment-related information.
We share each of these categories of Personal Information with our service providers to the extent necessary for them to facilitate our business purposes (including any purpose specified in Section 3, above).
Additionally, within the past 12 months, some of our online advertisers may have used and disclosed Usage Information collected automatically from the Service. This may be a “sale” as broadly defined under the CCPA. Therefore, we provide you the right to opt out of this “sale” of Personal Information as described below.
B. Your California Privacy Rights
If you are a resident of California, you may have the following rights:
-
Right to Know. You may have the right to request information on the categories of personal information that we collected in the previous twelve (12) months, the categories of sources from which the Personal Information was collected, the specific pieces of Personal Information we have collected about you, and the business purposes for which such personal information is collected and shared. You also have the right to request information on the categories of Personal Information which were disclosed for business purposes, and the categories of third parties in the twelve (12) months preceding your request for your personal information.
-
Right to Delete. You may have a right to request us to delete Personal Information that we collected from you.
-
Right to Opt-Out. You have a right to opt-out of certain disclosures of Personal Information to third parties, if such disclosures constitute a “sale” under California law. As noted above, in the past twelve (12) months we enabled advertisers to collect certain information from the Site, which the advertisers may use to improve their interest-based advertising networks. Regardless of whether this is a “sale,” you may opt-out of interest-based advertising as described in Section 4(B), above.
If you would like to exercise your rights listed above, please contact (or have your authorized agent contact) us at privacy@dropt.io. When doing so, please tell us which right you are exercising and provide us with contact information to direct our response.
We must verify your identity before fulfilling your requests. If we cannot initially verify your identity, we may request additional information to complete the verification process. Any Personal Information you disclose to us for purposes of verifying your identity will solely be used for the purpose of verification.
You have a right not to receive discriminatory treatment by any business when you exercise your California privacy rights.
11. Data Transfers and EU-US & Swiss-US Data Privacy Framework
For visitor-facing components of Dropt, all personal data are stored exclusively in Dublin, Ireland. Nevertheless, certain personal information may be stored or accessible outside of the European Economic Area, Switzerland, or the United Kingdom. For such transfers of personal information and/or where required by law, Dropt relies on the Standard Contractual Clauses as a valid transfer mechanism.
Dropt complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Dropt has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. Dropt has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. Dropt adheres to the DPF principles for onward transfers of personal data to third parties and remains liable for damages caused by third parties under the DPF. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
EU and Swiss individuals with inquiries or complaints regarding our Data Privacy Framework policy should first contact Dropt at privacy@dropt.io.
Dropt has further committed to refer unresolved Data Privacy Framework complaints to JAMS, an alternative dispute resolution provider in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.
If JAMS doesn’t address your concern, you may be entitled to binding arbitration under the Data Privacy Framework Principles. For purposes of enforcing compliance with the Data Privacy Framework, Dropt is subject to the investigatory and enforcement authority of the U.S. Federal Trade Commission.
A. Basis for Processing
Our legal basis for collecting and using the Personal Information described in this Privacy Policy will depend on the Personal Information concerned and the context in which we collect it. We collect Personal Information from you:
-
where we need Personal Information to perform a contract with you;
-
where the processing is in our legitimate interests (including the purposes described, above, in Section 3);
-
where the processing is necessary for us to meet our applicable legal obligations; or
-
if we otherwise have your consent.
B. Your Privacy Rights
Depending on applicable law, you may have the right to:
-
Request access to Personal Information about you.
-
Request correction of the Personal Information that we hold about you.
-
Request erasure of Personal Information about you. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
-
Object to processing of Personal Information about you where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms.
-
Request restriction of processing of Personal Information about you. You can ask us to suspend the processing of Personal Information in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
-
Request the transfer of Personal Information to you or to a third party.
-
Withdraw consent at any time where we are relying on consent to process Personal Information about you.
If you wish to exercise any of these applicable rights, please contact us at privacy@dropt.io.
Depending on where you live, you may have a right to lodge a complaint with a supervisory authority or other regulatory agency if you believe that we have violated any of the rights concerning Personal Information. We encourage you to first reach out to us at privacy@dropt.io, so we have an opportunity to address your concerns directly before you do so.
12. Children's Privacy
We do not knowingly collect or solicit any Personal Information from children. In the event that we learn that we have collected Personal Information from a child, we will promptly take steps to delete that information.
13. Other Websites and Sites, Including Social Media
We are not responsible for the practices employed by any websites or services (including social media sites) linked to or from our Site, including the information or content contained within them. We encourage you to investigate and ask questions before disclosing Personal Information to third parties.
14. How to Contact Us
If you have any questions about this Privacy Policy or the Site, please email us at privacy@dropt.io.