DropPolish
Last Updated: January 20, 2026
Welcome to DropPolish ("Company," "we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [droppolish.com] and use our services.
Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site or use our services.
We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.
We collect personal information that you voluntarily provide to us when you:
This information may include:
| Data Type | Examples |
|---|---|
| Identity Data | First name, last name, username |
| Contact Data | Email address, billing address |
| Financial Data | Payment card details (processed by our payment provider) |
| Account Data | Username, password, account preferences |
| Communication Data | Your messages to our support team |
When you access our Service, we automatically collect certain information, including:
| Data Type | Description |
|---|---|
| Device Information | Device type, operating system, browser type |
| Log Data | IP address, access times, pages viewed, referring URL |
| Usage Data | Features used, actions taken, time spent on pages |
| Location Data | General geographic location based on IP address |
When you use our image enhancement services:
We use the information we collect for the following purposes:
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:
| Legal Basis | When It Applies |
|---|---|
| Contract Performance | Processing necessary to provide our services to you |
| Legitimate Interests | Analytics, service improvement, fraud prevention |
| Consent | Marketing communications, optional data processing |
| Legal Obligation | Compliance with applicable laws and regulations |
We do not sell your personal information. We may share your information in the following circumstances:
We share data with third-party vendors who perform services on our behalf:
| Provider Type | Purpose | Data Shared |
|---|---|---|
| Payment Processors | Process transactions | Payment details, billing info |
| Cloud Infrastructure | Host our services | All service data (encrypted) |
| AI API Providers | Process image enhancements | Uploaded images (temporarily) |
| Analytics Services | Understand usage patterns | Anonymized usage data |
| Email Services | Send notifications | Email address, name |
We may disclose your information where required by law, such as:
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
We retain your personal information for as long as necessary to:
| Data Type | Retention Period |
|---|---|
| Account Data | Duration of account + 30 days after deletion |
| Uploaded Images | 24 hours (or until you delete them) |
| Processed Images | 30 days in your account, then deleted |
| Payment Records | 7 years (legal/tax requirements) |
| Support Communications | 2 years after resolution |
| Usage Analytics | 26 months (anonymized) |
You may request deletion of your data at any time by contacting us or using the account deletion feature.
We implement appropriate technical and organizational measures to protect your personal information, including:
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
Regardless of your location, you have the right to:
If you are in the EEA, UK, or Switzerland, you also have the right to:
California residents have additional rights under the CCPA/CPRA:
To exercise any of these rights, please contact us at no-reply@droppolish.com.
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.
When we transfer data internationally, we ensure appropriate safeguards are in place:
Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at no-reply@droppolish.com.
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.
Some browsers include a "Do Not Track" (DNT) feature. We currently do not respond to DNT signals because there is no industry standard for compliance. We will update this policy if a standard is established.
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
DropPolish
For GDPR-related inquiries, you may also contact our Data Protection Officer at no-reply@droppolish.com.
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically.
If we make material changes, we will notify you by:
This Privacy Policy is effective as of January 20, 2026.