Legal

Privacy & Cookie Statement

Last updated: April 8, 2026

This Privacy & Cookie Statement ("Statement") describes how ReDrop ("we," "us," or "our") collects, uses, and shares information when you use our websites and services (the "Services").

1. Information we collect

We may collect:

  • Account and profile data — such as email address and name, including when you sign in with a third-party identity provider (for example Google) through our authentication partner.
  • Content and usage data — files, metadata, feedback, comments, and activity related to droplets and collections you create or access.
  • Technical data — such as device type, browser, approximate location, IP address, and diagnostic logs used to secure and operate the Services.
  • Payment data — processed by our payment processors; we do not store full payment card numbers on our servers.

2. How we use information

We use information to:

  • provide, maintain, and improve the Services;
  • authenticate users and prevent fraud and abuse;
  • communicate about your account, security, and product updates;
  • analyze usage in aggregate to understand product performance; and
  • comply with law and enforce our Terms of Service.

3. Sharing

We may share information with:

  • Service providers who assist with hosting, authentication, email, analytics, payments, and security, bound by appropriate safeguards;
  • Other users when you share links or collaborate, according to the visibility and access settings you choose; and
  • Authorities when required by law or to protect rights and safety.

We do not sell your personal information as that term is defined in applicable U.S. state laws.

4. Cookies and similar technologies

We and our partners may use cookies and similar technologies (for example pixels or local storage) for essential functions (such as keeping you signed in), preferences, analytics, and, where applicable, measuring campaigns.

You can control cookies through your browser settings. Blocking some cookies may limit certain features. Our site may not respond to "Do Not Track" signals in a uniform way.

Where we use analytics (for example Google Analytics), the provider may process data according to its policies. You can use browser tools or provider opt-out mechanisms where available.

5. Retention

We retain information for as long as your account is active and as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Deletion of content may take time due to backups and caching.

6. Security

We implement technical and organizational measures designed to protect information. No method of transmission or storage is completely secure.

7. Where information is stored and processed

ReDrop and our service providers may store and process information in the United States and other countries where we or they maintain facilities, cloud infrastructure, personnel, or operations. This can include hosting, file storage, authentication, payments, email delivery, analytics, customer support, and security tooling. Storage and processing locations may change as our infrastructure and providers evolve.

8. International transfers

If you access the Services from outside the country where our systems or providers operate, your information may be transferred to, stored in, and processed in jurisdictions that may have different data protection laws than those where you live.

When required by applicable law, including where personal data subject to the GDPR, UK GDPR, or similar laws is transferred internationally, we rely on appropriate safeguards or lawful transfer mechanisms, such as standard contractual clauses, adequacy decisions, or other recognized transfer tools, together with supplementary technical and organizational measures where appropriate.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to or restrict certain processing. Depending on local law, those rights may also include data portability, withdrawal of consent where processing is based on consent, and the right to lodge a complaint with a supervisory authority. Contact us to exercise these rights. You may unsubscribe from marketing emails via the link in those messages.

10. Children

The Services are not directed to children under 13 (or the age required in your jurisdiction). We do not knowingly collect personal information from children.

11. Changes

We may update this Statement from time to time. We will post the revised version and update the "Last updated" date.

12. Contact

For privacy questions, contact us at support@redrop.app.

← Back to ReDrop