DropQ Privacy Policy
Effective August 30, 2026
This Privacy Policy explains how DropQ LLC(“DropQ,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the DropQ platform, websites, and related services (the “Services”). It applies to vendors who create stores, customers who place orders, and sales representatives in our referral program. By using the Services, you agree to this Policy.
1. Information We Collect
We collect the following categories of information:
- Account information. When a vendor or sales rep creates an account, we collect name, email address, password (stored hashed), and phone number.
- Store content. Vendor store name, description, photos, location, social links, products, drops, and pricing.
- Order & customer information. When a customer places an order, we collect their name, email address, phone number, order details, and any note they provide.
- Payment information. Payments are processed by Stripe. DropQ does not store full card numbers; card details are provided directly to Stripe and handled under Stripe’s privacy policy.
- Communications. Email and SMS/text messages we send you about orders, drops, account activity, and (for reps) referral activity, plus your related preferences.
- Usage & device data. Basic technical data such as IP address, browser type, pages viewed, and interactions, collected to operate and secure the Services.
- Cookies.We use only our own first-party cookies — to keep you logged in, to remember which vendor’s link or QR code you arrived through so activity is credited correctly, and (where enabled) for our own analytics. See Section 6.
2. How We Use Information
We use information to:
- provide, operate, and improve the Services;
- create and manage vendor, customer, and sales-rep accounts;
- process orders and route payments through Stripe;
- send transactional messages by email and text — order confirmations, order status updates (in progress, ready, completed, canceled), refund notices, drop go-live and waitlist alerts, and account or referral notifications;
- attribute referred vendors to sales representatives and calculate commissions;
- provide customer support and respond to your requests;
- detect, prevent, and address fraud, abuse, and security issues; and
- comply with legal obligations and enforce our agreements.
3. SMS / Text Messaging
DropQ uses text messaging as a primary way to keep customers and users informed. SMS is strictly opt-in: providing a mobile number, placing an order, joining a waitlist, accepting these terms, or creating an account does not enrol you. You receive texts only if you tick an SMS consent box, which is never pre-checked and never required. Depending on which box you ticked, messages may be transactional and service-related, or notifications about vendors and drops you follow (for example: order confirmations, “your order is ready” alerts, refund notices, drop go-live alerts, and account or referral messages).
- Message frequency varies based on your activity (for example, per order or per drop).
- Message and data rates may apply, depending on your mobile carrier and plan.
- You can opt out at any time by replying STOP to any message; reply HELP for help. After you reply STOP, we will stop sending you non-essential texts.
- Carriers are not liable for delayed or undelivered messages.
Mobile information and text messaging opt-in data and consent will not be shared with third parties or affiliates for marketing or promotional purposes. Your number is used only to deliver the Services (including through our messaging provider, Twilio) and to enable the vendor you interact with to communicate about your order.
4. How We Share Information
We share information only as needed to run the Services:
- With vendors. When you order from a store, the vendor receives your order details and contact information so they can fulfill your order and provide support.
- Service providers. We use trusted providers to operate the Services, including Stripe (payments), Twilio (SMS), Resend (email), and our hosting and infrastructure providers. They may process information only to provide services to us and are bound to protect it.
- Sales representatives.If you sign up through a rep’s referral link, your store is attributed to that rep, who can see limited business activity (such as your store name, subscription status, and aggregate sales/commission) for commission reporting — not your customers’ personal details.
- Legal & safety. We may disclose information if required by law, or to protect the rights, property, or safety of DropQ, our users, or the public.
- Business transfers. If DropQ is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
We do not sell your personal information.
5. Vendor Responsibilities
Vendors receive their customers’ information to fulfill orders and are independent businesses responsible for handling that information in compliance with applicable privacy laws. DropQ is not responsible for a vendor’s independent use of customer information outside the Services.
6. Cookies & Similar Technologies
We use only first-party cookies — cookies set by DropQ itself. We do not use third-party advertising cookies, and we do not allow third parties to track you across other websites through DropQ. None of our cookies can be read by scripts running in your browser, and none of them contains your name, email address or any other detail about you.
| Cookie | What it does | Expires |
|---|---|---|
| Session cookie | Keeps you signed in. Essential. | On sign-out |
| dq_touch | Remembers when you arrive through a vendor’s storefront, shared link or QR code, so that eligible purchases and sign-ups are credited to the right vendor. It does not affect payment itself. | 30 days |
| dq_vid | A random number that lets us recognise the same browser across visits, for our own analytics. It is generated at random and describes nothing about your device. | 12 months |
| dq_sid | A random number that groups the pages you view in a single visit. | 30 minutes |
| dq_attr | The link, website or marketing campaign you arrived through, so we can tell which of our own efforts bring people to DropQ. | 90 days |
Most browsers let you control cookies. Disabling essential cookies may prevent you from logging in, or prevent a vendor from being credited for activity you started through their link.
6a. Analytics
On our public pages we record a small number of product events: which page was viewed, whether someone opened vendor signup, and whether they went on to create a store, connect payments, publish a drop or make a sale. Each event is stored with the random identifiers described in Section 6, the page address with anything after the “?” removed, the domain name of the website you came from, any campaign tags in the link you followed, and a broad device type (mobile, tablet or desktop).
We do not record the full web address you came from, anything you type, your search terms, or any information you enter into a form. We do not use session recording, screen recording or heatmaps. We do not build a fingerprint of your device, and our analytics records have no field for your IP address.
We do not collect analytics inside the vendor dashboard or the admin area — only on our public pages.
If you create a vendor account, we associate the anonymous activity already recorded for your browser with that account, so that we can understand which channels bring vendors to DropQ. Activity from our own internal, staff and test accounts is excluded from our business reporting.
This information is stored in our own database. We do not sell it, and we do not share it with advertising networks.
7. Data Retention
We retain information for as long as your account is active or as needed to provide the Services, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. We may retain certain records (such as order and commission history) as required for those purposes.
Anonymous analytics events are retained for 90 days and then deleted. Aggregate figures calculated from them — counts and conversion rates that contain no identifiers — may be kept for longer. Where anonymous activity has been associated with a vendor account, a summary of how that account was acquired is retained for the life of the account, like other account records.
8. Security
We use reasonable technical and organizational measures to protect information, including encrypted connections and hashed passwords. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Your Choices & Rights
- Access & correction. You can view and update your account and store information from your dashboard, or by contacting us.
- Deletion. You may request deletion of your account and associated personal information, subject to records we must retain by law.
- Email. Transactional emails are part of the Services; where we offer optional messages, you can adjust preferences or unsubscribe.
- SMS. Reply STOP to opt out of texts at any time (see Section 3).
Depending on where you live, you may have additional rights under applicable privacy laws. To exercise any right, contact us using the details below.
10. Third-Party Services
The Services rely on and may link to third parties (such as Stripe, Twilio, and Resend). Their handling of information is governed by their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third parties.
11. Children’s Privacy
The Services are not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us information, please contact us and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective” date above and, where appropriate, provide additional notice. Your continued use of the Services after an update constitutes acceptance of the revised Policy.
13. Contact Us
Questions or requests regarding this Privacy Policy or your information: dropqteam@gmail.com.