Privacy Policy

Last updated: August 18, 2025

1. Who We Are

Drop is operated by Thomas Warnert, a sole trader based in Ireland.

Registered Address: 19 Stocking Well Row, Firhouse, Co. Dublin, D16 N880, Ireland.

Drop (get-drop.io) is a shipment tracking and buyer notification platform for resellers. This policy covers two categories of people: Sellers (who create an account) and Buyers (whose order and delivery details a Seller enters into Drop to enable tracking and notifications).

2. Data We Collect

Seller Account Data: email address and business name, collected at sign-up (Firebase Authentication).

Order & Buyer Data: buyer name, phone number, email address, delivery address, tracking number, order notes, and order status — entered by the Seller for each order.

Payment Data: handled by Stripe; we never store card details.

Usage Data: device/browser information and app usage patterns, collected via Google Analytics.

Communications Data: records of notifications sent to buyers (email, SMS, WhatsApp) and their delivery status.

3. How We Use Data

• To provide the Service — order tracking, buyer notifications, and branded tracking pages.
• To process Seller payments and manage subscriptions.
• To send buyers order and delivery updates on behalf of the Seller.
• To send Sellers account, billing, and usage notifications.
• To monitor performance and improve the Service.

4. Sharing Your Data

We share data only with service providers that help us operate Drop:

• Google Firebase — authentication and data storage (Firestore), hosted in the europe-west4 region.
• Stripe — payment processing.
• Twilio — SMS and WhatsApp message delivery.
• SendGrid — email delivery.
• Google Analytics — usage analytics.

We do not sell your data.

5. Seller and Buyer Roles

Sellers control what buyer data they enter into Drop and are responsible for having a lawful basis to share it with us (e.g. fulfilling the order). In relation to buyer data, we act on the Seller's instructions to deliver tracking pages and notifications. In relation to Seller account data, we act as the data controller.

6. Cookies & Tracking

We use cookies for authentication and for analytics via Google Analytics.

7. Your Rights

As an EU-based company, you have rights under GDPR, including to:

• Access, correct, or delete your data.
• Request a copy of your data in a portable format.
• Object to or restrict certain processing.
• File a complaint with the Irish Data Protection Commission.

Buyers wishing to exercise these rights regarding data entered by a Seller should contact the Seller directly, or contact us and we will assist.

8. International Data Transfers

Some of our service providers (including Twilio and SendGrid) may process data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Data Retention

We retain account and order data while an account is active, and as required by law (e.g. financial records).

10. Security

We use industry-standard security measures, including encrypted storage and transmission, and rely on secure providers such as Firebase and Stripe.

11. Contact Us

For privacy questions or data requests, contact us at: support@get-drop.io