Privacy Policy

1. Who this policy covers

This policy describes how DropScope handles information when you visit dropscope.org, create an account, run product research, or contact support. DropScope is operated by Siraj Muhammad. Privacy questions and requests can be sent to support@dropscope.org.

2. Information we handle

• Account information: email address and authentication identifiers used to create and secure your account.
• Research inputs: product titles, descriptions, product URLs, selected platforms, and search preferences you submit.
• Research records: generated queries, discovered post metadata and source links, scan status, saved posts, and usage or credit records.
• Billing records: plan, subscription status, transaction references, and billing events. Paddle handles payment details in checkout; DropScope does not receive or store your full card number.
• Technical information: request and operational data needed to protect, troubleshoot, and run the service. We do not currently use an in-product advertising or analytics tracker.

3. How we use it

• Provide sign-in, account support, requested product analysis, content discovery, saved research, and scan accounting.
• Send product details and search queries to the providers that perform AI analysis and social-content discovery for a scan.
• Process subscriptions and payments, prevent fraud and abuse, protect service reliability, and meet legal obligations.
• Respond to support, privacy, billing, and security requests.

4. Service providers and destinations

We use Supabase for authentication, Cloudflare for application hosting and database storage, Groq for AI analysis, Apify for social-content discovery, and Paddle for checkout and subscription billing. These providers process information as needed to deliver their services under their own terms and privacy notices. When you follow a TikTok or Instagram source link, that platform receives your request under its own privacy terms. Authentication emails are sent through the email-delivery service configured for the Supabase project.

We do not sell personal information for money. We do not use submitted product information to build a public profile of you.

5. Storage and retention

Account, scan, result, saved-post, and billing records are stored while needed to operate your account and service. Research history remains available after a paid plan ends. We do not currently publish a fixed automatic deletion schedule for those records. You can request account closure or deletion by contacting support@dropscope.org; we will handle the request subject to applicable law and records that must be kept for security, accounting, or legal purposes.

6. International processing and security

Our service providers may process information in countries outside your own. Where required, we rely on appropriate safeguards for those transfers. We use access controls and service-provider security features intended to protect information, but no internet service can promise absolute security. Contact us promptly if you believe your account has been compromised.

7. Your privacy choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to complain to a privacy regulator. Contact support@dropscope.org to make a request. We may need to verify your identity and may explain when an exception applies. You can stop using the service and request account closure at any time.

8. Children and policy updates

DropScope is intended for adults and is not directed to children under 18. We do not knowingly invite children to create accounts. We may update this policy as the service changes; the date at the top identifies the current version. Material changes will be communicated through the site or by email where appropriate.