1. Scope
This Privacy Policy applies to personal data processed when you visit the aidrop.link website, create or use an account, publish or access a share, subscribe to a plan, use the owner API or AI Skill, or contact us about the service.
Creators who publish a site may independently collect data through their content or connected third-party services. Their privacy practices are separate from this policy.
2. Data we process
Account and authentication data
This may include your email address, account identifiers, authentication timestamps, and security information needed to deliver and verify one-time sign-in codes and manage sessions.
Published content and settings
We process files you upload, share titles, access configuration, allowed emails or domains, expiration settings, version information, file sizes, and related operational metadata. Passwords are protected and are not displayed back to you.
Usage and technical data
We may process IP addresses, request timestamps, URLs requested, browser and device information, error records, security events, share access timestamps, and diagnostic logs needed to deliver, protect, and troubleshoot the service.
Subscription and transaction data
For paid plans, we process billing names and addresses, the selected package, amount, currency, purchase and renewal dates, subscription status, and payment provider references. Full payment card or bank credentials are handled by the payment provider rather than stored by aidrop.link.
Support communications
If you contact us, we process the message, contact details, and information you choose to include.
3. Why we process data
We use personal data to:
- create accounts, authenticate users, and maintain secure sessions;
- store, deliver, protect, expire, update, and remove published shares;
- apply password, email, domain, and public access settings;
- process subscriptions, renewals, cancellations, and invoices;
- prevent abuse, investigate security incidents, and enforce service terms;
- measure reliability, diagnose faults, and improve the service;
- respond to support and privacy requests; and
- comply with applicable legal obligations.
4. Legal bases
Under the GDPR, processing may rely on one or more of the following bases:
- Contract: processing needed to provide the account, hosting, access controls, subscriptions, and requested support.
- Legitimate interests: securing the service, preventing misuse, maintaining reliability, and improving features, balanced against your rights.
- Legal obligation: recordkeeping, tax, lawful requests, and other duties imposed by law.
- Consent: where we specifically ask for it. You may withdraw consent for future processing at any time.
6. Retention
We keep personal data only as long as reasonably necessary for the purposes described above, including providing active services, honoring expiration choices, maintaining security records, resolving disputes, and satisfying legal or accounting duties.
Published content may be removed after you delete a share or account, after a share expires, or when service rules require removal. Limited backups and security logs may remain for a defined operational period before deletion or anonymization.
7. Security
We use technical and organizational safeguards appropriate to the nature of the service, including encrypted HTTPS delivery, restricted system access, protected authentication, and monitoring intended to identify misuse or failures.
No online service can guarantee absolute security. Keep your email account and sign-in codes secure, use strong unique share passwords, and avoid publishing secrets, API keys, or personal data that a static site does not need.
8. Your privacy rights
Depending on your location and the circumstances, you may have the right to:
- access personal data held about you;
- correct inaccurate or incomplete data;
- request deletion of your data;
- restrict or object to certain processing;
- receive portable data when applicable;
- withdraw consent where processing relies on consent; and
- complain to your local data protection authority.
You can manage or delete certain data through your account. Other requests can be submitted through the contact or support options in the aidrop.link app. We may need to verify your identity before completing a request.
9. EU hosting and international transfers
aidrop.link is hosted in the European Union. Some specialized providers may process limited data from other countries. Where personal data is transferred outside the European Economic Area, we use an applicable legal transfer mechanism and appropriate safeguards.
10. Children
aidrop.link is not directed to children who are unable to consent to online services under the law that applies to them. If you believe a child has provided personal data without appropriate authorization, contact us through the service so the matter can be reviewed.
11. Changes and contact
We may update this policy as the service, providers, or legal requirements change. The effective date at the top shows when this version took effect. Material changes will be communicated through the service or another reasonable channel.
Have any questions? Reach out to our support team by sending contact@aidrop.link an email and we'll get back to you as soon as we can.