Privacy Policy

1. Information We Collect

Personal Information You Provide

• Account Information: Email address, password (encrypted), display name
• Merchant Tracking Requests: Your email address, the merchant listing you ask us to track, and your consent choices. If you separately request contact from the named merchant, we also collect your full name and optional phone number.
• Profile Information: Optional profile photo, preferences, settings
• Payment Information: Billing details and payment method info (processed securely by Stripe on the web app; by Apple In-App Purchase on iOS; by Google Play Billing on Android)
• Communication Data: Support requests, feedback, survey responses

Information We Collect Automatically

• Usage Data: Pages visited, features used, time spent, click paths
• Device Information: Browser type, operating system, device identifiers
• Location Data: General location (city/country level) for service optimization
• Tracking Data: URLs you choose to track, price alerts you set

Information from Third Parties

• Social Authentication: Basic profile info if you sign in with Google/Apple
• Website Data: Publicly available product information from tracked websites
• Payment Processors: Transaction confirmations from Stripe (web), Apple App Store (iOS), and Google Play (Android). Subscription status is managed via RevenueCat.
• Trust & Safety Data: Website security assessments from Google Safe Browsing and technology profiles from BuiltWith to generate Trust Ratings

2. How We Use Your Information

Primary Service Functions

• Price Tracking: Monitor products and prices you've requested
• Notifications: Send price drop alerts and availability notifications
• Merchant Contact You Request: Send a listing-specific lead to a participating merchant only when you separately ask that named merchant to contact you
• Account Management: Maintain your account and subscription status
• Customer Support: Provide help and resolve issues

Service Improvement

• Analytics: Understand how TagDrop is used to improve features
• Performance: Monitor and optimize service speed and reliability
• Security: Detect and prevent fraud, abuse, and security issues

Communication

• Service Updates: Important account and service notifications
• Marketing: Product updates and offers (with your consent)
• Legal: Compliance notices and policy updates

3. Information Sharing and Disclosure

When We Share Information

• Service Providers: Trusted partners who help deliver our service (hosting, payment processing, email delivery)
• Legal Requirements: When required by law, court order, or to protect rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

Participating Merchants

You can use TagDrop's merchant price-tracking alerts without asking the merchant to contact you. If you separately select the dealer-contact option, TagDrop sends the named merchant only your full name, email address, optional phone number, and the listing you asked about. The merchant does not receive your other tracked items, watchlist, or comparison history.

You can revoke dealer-contact permission for future use through the preferences link in TagDrop email or by contacting us. Revocation cannot recall information already delivered at your request.

Our Service Providers

• Google Firebase: Cloud hosting and database services
• Stripe: Secure payment processing for web subscriptions and donations
• Apple App Store: Payment processing for iOS in-app subscriptions
• Google Play: Payment processing for Android in-app subscriptions
• RevenueCat: Mobile subscription status management (receives store webhook events; does not store payment card details)
• OpenAI: AI-powered content analysis
• Zyte: Web data extraction for price monitoring
• Email Services: Transactional and notification emails

4. Data Retention

• Active Accounts: We retain your data while your account is active
• Inactive Accounts: Deleted after 2 years of inactivity (with 90-day notice)
• Legal Requirements: Some data may be retained longer for legal compliance
• Account Deletion: Available upon request; permanently completed within 14 days (see Your Rights section)

5. Your Privacy Rights

Response Time: We respond to all privacy requests within 30 days (or as required by applicable law).

6. Data Security

7. International Data Transfers

TagDrop operates globally and may transfer your data to countries outside your residence. We ensure appropriate safeguards:

• EU-US: We rely on Google Cloud's Standard Contractual Clauses and adequacy decisions
• Other Transfers: Protected by appropriate safeguards (SCCs, adequacy decisions, or consent)
• Data Centers: Primarily hosted in secure, certified data centers

8. Children's Privacy

TagDrop is not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. California Privacy Rights (CCPA)

California residents have specific rights under the California Consumer Privacy Act:

Your CCPA Rights

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we don't sell data)
• Non-Discrimination: We won't discriminate against you for exercising your rights

California Information Categories

10. Contact Us