Privacy Policy

1. Data We Collect

1.1 Account Information

When you create a DropEdge account, we collect your name, email address, and password (stored in hashed form). This information is used to manage your account, provide access to platform features, and communicate with you about your subscription, product updates, and service notices.

1.2 Platform Usage Data

DropEdge automatically collects usage data when you use the platform, including:

• Pages visited and features used (via PostHog analytics)
• Browser type, operating system, and referring URL
• Session duration and interaction patterns
• NEXUS product clicks, store setup actions, and trend scanning activity

This data helps us improve the platform, identify bugs, and understand how users engage with features. Usage data is anonymized and aggregated for analysis and is not linked to personally identifiable information unless you are logged in.

1.3 Store and Transaction Data

If you operate a DropEdge Store, we collect product listings, pricing, order data, and customer order information (name, email, shipping address) for the purpose of processing transactions and managing your store. Customer data is stored in your store context and is separate from your account data.

1.4 Payment Information

DropEdge does not store payment card details. Payment processing is handled by Stripe for subscription billing and store checkout transactions. Card details are collected and stored by Stripe in accordance with PCI-DSS standards. For subscription billing, DropEdge may also use PayPal as a payment processor; PayPal's use of your billing information is governed by the PayPal Privacy Policy.

2. How We Use Your Data

We use your data to:

• Provide and maintain your DropEdge account and subscription
• Process transactions and settlements for your store
• Send service-related notifications (billing, account changes, security alerts)
• Improve platform features, performance, and reliability
• Detect and prevent fraud, abuse, and policy violations
• Comply with applicable legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

3. Third-Party Services

4. Data Retention

DropEdge retains your account data for as long as your account is active. After account closure, your personal data is retained for 30 days to allow for account recovery and billing settlement, then deleted from our systems unless a legal obligation requires otherwise.

Transaction records are retained for 5 years to comply with financial reporting and tax obligations. Anonymized, aggregated platform analytics may be retained indefinitely for trend analysis and platform improvement.

Data stored with third-party processors (Stripe, PayPal, PostHog) is retained in accordance with their own policies.

5. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to retention obligations)
• Export: Request an export of your account data in a portable format
• Opt-out: Request to opt out of PostHog analytics and session recording
• Object: Object to certain processing activities, where applicable

To exercise any of these rights, contact us at privacy@dropedge.ai. We will respond within 30 days.

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under GDPR or UK GDPR, including the right to lodge a complaint with your local data protection authority.

6. Data Security

DropEdge uses industry-standard security measures to protect your data, including TLS encryption for data in transit, AES encryption for data at rest, and access controls that limit data access to authorized personnel only. No security measure is 100% impenetrable, and we cannot guarantee absolute security — we are committed to maintaining appropriate safeguards and responding to incidents promptly.

In the event of a data breach that affects your personal data, we will notify you within 72 hours of becoming aware of the breach.

7. Cookies

DropEdge uses session cookies for authentication — these are essential for maintaining your logged-in session and are deleted when you close your browser. We do not use advertising cookies or tracking cookies for purposes other than analytics (via PostHog, as described above).

PostHog analytics may set optional cookies for session recording and feature flag tracking. These are pseudonymized and you can opt out by contacting privacy@dropedge.ai.

8. Children's Privacy

DropEdge is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor without verified parental consent, we will delete that data promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy on this page with a revised "Last updated" date. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

10. Contact