Privacy Policy

1. Information We Collect

Personal Information You Provide

• Account Information: Email address, password (encrypted), display name
• Profile Information: Optional profile photo, preferences, settings
• Payment Information: Billing details, payment method info (processed securely by Stripe)
• Communication Data: Support requests, feedback, survey responses

Information We Collect Automatically

• Usage Data: Pages visited, features used, time spent, click paths
• Device Information: Browser type, operating system, device identifiers
• Location Data: General location (city/country level) for service optimization
• Tracking Data: URLs you choose to track, price alerts you set

Information from Third Parties

• Social Authentication: Basic profile info if you sign in with Google/Apple
• Website Data: Publicly available product information from tracked websites
• Payment Processors: Transaction confirmations from Stripe

2. How We Use Your Information

Primary Service Functions

• Price Tracking: Monitor products and prices you've requested
• Notifications: Send price drop alerts and availability notifications
• Account Management: Maintain your account and subscription status
• Customer Support: Provide help and resolve issues

Service Improvement

• Analytics: Understand how TagDrop is used to improve features
• Performance: Monitor and optimize service speed and reliability
• Security: Detect and prevent fraud, abuse, and security issues

Communication

• Service Updates: Important account and service notifications
• Marketing: Product updates and offers (with your consent)
• Legal: Compliance notices and policy updates

3. Information Sharing and Disclosure

When We Share Information

• Service Providers: Trusted partners who help deliver our service (hosting, payment processing, email delivery)
• Legal Requirements: When required by law, court order, or to protect rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

Our Service Providers

• Google Firebase: Cloud hosting and database services
• Stripe: Secure payment processing
• OpenAI: AI-powered content analysis
• Email Services: Transactional and notification emails

4. Data Retention

• Active Accounts: We retain your data while your account is active
• Inactive Accounts: Deleted after 2 years of inactivity (with 90-day notice)
• Legal Requirements: Some data may be retained longer for legal compliance
• Immediate Deletion: Available upon request (see Your Rights section)

5. Your Privacy Rights

Response Time: We respond to all privacy requests within 30 days (or as required by applicable law).

6. Data Security

7. International Data Transfers

TagDrop operates globally and may transfer your data to countries outside your residence. We ensure appropriate safeguards:

• EU-US: We rely on Google Cloud's Standard Contractual Clauses and adequacy decisions
• Other Transfers: Protected by appropriate safeguards (SCCs, adequacy decisions, or consent)
• Data Centers: Primarily hosted in secure, certified data centers

8. Children's Privacy

TagDrop is not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. California Privacy Rights (CCPA)

California residents have specific rights under the California Consumer Privacy Act:

Your CCPA Rights

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we don't sell data)
• Non-Discrimination: We won't discriminate against you for exercising your rights

California Information Categories

10. Contact Us