Privacy Policy

This Privacy Policy explains how DropSkipper (“DropSkipper,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use our platform. It applies to visitors of our website and to customers using the DropSkipper application. It should be read together with our Terms of Service.

We collect the following categories of information:

• Account information: name, email address, and password (managed through our authentication provider, Supabase).
• Billing information: subscription plan and billing history. Card details are collected and stored directly by our payment processor, Stripe — we do not store your full card number.
• Connected account credentials: access tokens for third-party accounts you connect, such as Shopify stores and Meta, Instagram, or TikTok ad accounts. These tokens are encrypted at rest and used only to perform actions you request (e.g., publishing a product page or ad).
• Product and product page data: products you save, generated product pages, ad copy and creative, and supplier matches associated with your account.
• Usage data: log data, device and browser information, and how you interact with the application, for security and product-improvement purposes.

• To provide, operate, and maintain the DropSkipper service;
• To process subscription payments and manage your account;
• To generate product content, ad copy, and ad creative on your behalf;
• To publish content to third-party platforms you connect and authorize;
• To send transactional emails (e.g., billing receipts, trial reminders, security alerts);
• To detect, investigate, and prevent fraud, abuse, and security incidents;
• To improve and develop the service, including troubleshooting errors.

We do not sell your personal information. We share information with the following categories of service providers, only as needed to operate DropSkipper:

• Infrastructure and auth: Supabase (database, authentication, file storage), Railway (backend hosting), Vercel (frontend hosting).
• Payments: Stripe (subscription billing).
• AI and content generation: Anthropic (product/ad copy generation), Claid.ai (Ad Image generation, with a Pillow-based fallback we run ourselves), JoggAI (video ad generation, where applicable to your plan).
• Supplier data: AliExpress (via RapidAPI), used to source product and supplier information.
• Platforms you connect: Shopify, Meta, Instagram, and TikTok, to the extent you authorize DropSkipper to publish content to those accounts.

We may also disclose information if required by law, to protect the rights and safety of DropSkipper or others, or in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

Access tokens for connected third-party accounts (Shopify, Meta, Instagram, TikTok) are encrypted at rest and are only decrypted server-side to perform the specific actions you request. You can disconnect a connected account at any time from your account settings, which revokes DropSkipper’s stored access to it.

We retain account and content data for as long as your account is active, and for a reasonable period afterward to comply with legal, accounting, or fraud-prevention obligations. You may request deletion of your account and associated personal data at any time by contacting us; some information may be retained where required by law or for legitimate business records (e.g., billing history).

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing (for example, under the EU/UK GDPR or U.S. state privacy laws such as the CCPA). To exercise any of these rights, contact us at support@dropskipper.com. We will respond within the time required by applicable law.

We use essential cookies and similar technologies required to keep you signed in and to operate core site functionality (for example, our authentication provider, Supabase, and our payment processor, Stripe). These are always active and do not require consent.

With your consent, we also use PostHog, a product analytics tool, to understand how the site is used (e.g., which pages are visited) so we can improve it. You can accept or decline analytics cookies from the cookie banner shown on your first visit, and can change your choice at any time by clearing your browser’s site data for DropSkipper and reloading the page. We do not use third-party advertising or cross-site tracking cookies on the DropSkipper site.

DropSkipper is not directed to individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

DropSkipper is operated from the United States, and our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for international transfers of personal data.

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice, such as by email or an in-app notice, before the changes take effect.

Questions about this Privacy Policy or your data can be sent to support@dropskipper.com.