This Privacy Policy explains how DropCraft ("DropCraft", "we", "us", or "our"), operating the website dropcraftai.com and related services (the "Service"), collects, uses, and protects your information when you use the Service.

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Who we are

DropCraft provides an AI-powered tool that turns an AliExpress product link into a ready-to-use Shopify landing page. For any privacy questions, contact us at support@dropcraftai.com.

2. Information we collect

Information you provide

• Account data: name, email address, and password (stored in hashed form) when you register.
• Billing data: subscription plan and payment records. Card payments are processed by our payment provider (Stripe); we do not store full card numbers on our servers.
• Content you submit: product URLs (e.g. AliExpress links) and any text, images, or settings you provide to generate landing pages.
• Support communications: messages you send us by email or through the Service.

Information collected automatically

• Usage data: pages generated, features used, and basic activity logs.
• Device & log data: IP address, browser type, and timestamps.
• Cookies & similar technologies: used to keep you signed in and to understand how the Service is used.

Information from connected services

• Shopify: when you connect your store via OAuth, we request four permissions — read_products, write_products, read_content and write_content — and we use them for exactly two things: creating the product we generate for you, and publishing the generated landing page to your store.
  We do not request, and therefore cannot access, your orders, your customers, your payouts, or any other store data. The access token linking us to your store is encrypted at rest. You can revoke our access at any time from your Shopify admin, which immediately ends our ability to reach your store.
• Product sources: when you submit a product link, we retrieve publicly available product details (title, images, price, description) to build your page.

3. How we use your information

• To provide, operate, and maintain the Service, including generating and publishing landing pages.
• To process subscriptions, payments, and renewals.
• To authenticate you and secure your account.
• To provide customer support and respond to your requests.
• To improve the Service, develop new features, and monitor performance and abuse.
• To send service-related notices and, where permitted, product updates (you can opt out of marketing messages).
• To comply with legal obligations and enforce our terms.

4. Legal bases for processing (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data on the following bases: performance of a contract (to provide the Service), legitimate interests (to secure and improve the Service), consent (for optional marketing and non-essential cookies), and compliance with legal obligations.

5. How we share information

We do not sell your personal data. We share it only with:

• Service providers who process data on our behalf, such as payment processing (Stripe), cloud hosting, email delivery, and AI/model providers used to generate copy and layouts.
• Shopify, to publish the products and pages you ask us to create.
• Authorities, where required by law, legal process, or to protect rights, safety, and security.
• A successor entity in connection with a merger, acquisition, or sale of assets.

6. Data retention

We keep personal data for as long as your account is active and as needed to provide the Service. After account closure, we retain limited data as required for legal, accounting, and fraud-prevention purposes, then delete or anonymize it.

7. Security

We use technical and organizational measures such as encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International transfers

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.

9. Your rights

Depending on your location, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing or withdraw consent. Residents of California (CCPA/CPRA) may request disclosure or deletion of personal information and may opt out of "sales" (we do not sell personal data). To exercise any right, email support@dropcraftai.com. You also have the right to lodge a complaint with your local data protection authority.

10. Cookies

We use essential cookies to run the Service (for example, to keep you logged in) and, where applicable, analytics cookies to understand usage. You can control cookies through your browser settings; disabling essential cookies may affect functionality.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the effective date above. Material changes will be communicated where appropriate.

13. Contact us

Questions about this policy or your data? Email support@dropcraftai.com.