Privacy Policy

1. What Data We Collect

a) Information you provide to us

Creators / Agencies / Sellers:

• Name
• Email address
• Account login credentials
• Banking details (IBAN)
• Payment details and invoices
• Profile and account settings

Fans / Buyers:

• Email address
• Purchase history
• Payment amount and date (no full card details)

b) Automatically collected data

When you use DROPP, we may collect:

• IP address
• Device information (browser, OS)
• Activity logs (pages visited, clicks, errors)

We also use cookies and similar technologies (see our Cookies Policy if applicable).

2. How We Use Personal Data

We use personal data only for legitimate purposes, including:

• Creating and managing user accounts
• Providing and improving the DROPP platform
• Processing payments and payouts
• Preventing fraud and abuse
• Providing customer support
• Complying with legal and tax obligations
• Sending service-related communications

We do not sell personal data. Marketing emails are only sent where legally permitted and you can unsubscribe at any time.

3. Legal Basis for Processing (GDPR)

We process personal data based on:

• Contract performance – to provide the DROPP service
• Legal obligations – accounting, tax, fraud prevention
• Legitimate interest – improving services, preventing abuse
• Consent – where required, for optional features or marketing

You are not required to provide data, but without some information we may not be able to provide DROPP services.

4. How We Share Personal Data

a) Service Providers

We use trusted third parties to operate DROPP, including:

• payment processors (e.g. Up2Pay)
• hosting and cloud services
• analytics tools
• email and support platforms

They only process data on our instructions and cannot use it for other purposes.

b) Payment Processing

Payments are processed securely through Up2Pay. Up2Pay may collect and process personal data as an independent controller. Please refer to their privacy policy for details.

c) Legal Requirements

We may disclose data:

• to comply with laws or court orders
• to protect DROPP, users, or others from fraud or abuse

We do not sell personal data.

5. International Data Transfers

Data is primarily hosted in the European Economic Area (EEA). If transfers outside the EEA occur, we use safeguards such as:

• Standard Contractual Clauses
• other legally recognized protections

6. Data Retention

We retain data only as long as necessary:

• Account data: kept while account is active
• Transaction and tax data: up to 10 years, as required by law
• Backups/logs: retained for security and legal reasons

When data is no longer required, it is deleted or anonymized.

7. Your Rights (GDPR)

Depending on your location, you may have the right to:

• access your data
• correct inaccurate data
• request deletion
• restrict or object to processing
• withdraw consent
• request portability
• define post-death instructions (France)
• file a complaint with your data protection authority

To exercise your rights, contact: contact@dropp.fans. We may ask for proof of identity where necessary.

8. Minors

DROPP is not intended for individuals under 18 years old. We do not knowingly collect data from minors.

If you believe we have collected information from a minor, contact us and we will delete it.

9. Security

We apply appropriate technical and organizational measures to protect data against:

• loss
• unauthorized access
• alteration
• disclosure

However, no online system is completely secure. In the event of a data breach that may impact your rights, we will notify you and authorities where required.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version is always available on this page, with the effective date at the top.

11. How to Contact Us

If you have questions about this policy or our data practices:

contact@dropp.fans

DROPP SAS, 9 rue des Colonnes, 75002 Paris, France