Privacy Policy

We collect information in a few ways:

• Account information: the email address and password you register with (passwords are stored as a bcrypt hash, never in plain text), and your role within your account (Owner, Admin, Manager, or Viewer).
• Business data you provide: the product, supplier, pricing, and store information you add or import, and any ad copy or store page descriptions generated from it.
• Shopper lead information: if you publish a public store page, visitors to that page may submit their name and email address to express interest. That information is visible to the account that owns the store page.
• Technical information: standard server logs (timestamps, IP address, request paths) used for security and debugging, and a single session cookie used to keep you logged in.

• To operate DropRadar: authenticate you, save your products, and run Falcon's opportunity scoring.
• To generate features you request: AI-written ad copy, store page descriptions, and trend-based Falcon Alerts.
• To secure your account: password reset, email verification, and login-attempt protection.
• To communicate with you: password reset links, email verification links, and team invite emails.

We do not sell your information, and we do not use it for advertising.

Certain features send limited, specific data to outside services in order to work. We only send what each feature actually needs - never your password, and never other accounts' data.

• Anthropic (Claude): product name, category, price, and trend context, to generate ad copy.
• TikHub: a product name or search term, to look up real TikTok Shop trend data.
• CJ Dropshipping: a search keyword, to look up real supplier product listings.
• Resend: your email address and message content, to deliver password reset, verification, and invite emails.
• Railway and Vercel: our hosting providers, who store and run the application and database on our behalf.

DropRadar uses one essential cookie to keep you logged in. It is HttpOnly, meaning no script running in your browser can read it, and it is not used for tracking or advertising. We do not use third-party analytics or advertising cookies.

We retain your account and business data for as long as your account is active. If you'd like your account and its data deleted, contact us using the information below and we'll process the request.

You can access, correct, or delete most of your own data directly within DropRadar (Account, Products, and Team settings). For anything you can't change yourself - including a full account deletion request - contact us and we'll take care of it.

Passwords are hashed with bcrypt. Password reset and email verification links are single-use, time-limited, and stored only as a hash - never as the raw link itself. All traffic between your browser and DropRadar is encrypted (HTTPS). Repeated failed login attempts automatically lock an account for a cooldown period. No system is perfectly secure, but we treat this seriously and keep improving it.

DropRadar is a business tool and is not directed at, or intended for use by, children under 16.

If we make material changes to this policy, we'll update the effective date above and, where appropriate, let account holders know directly.

Questions about this policy or your data? Reach out to privacy@soniya-ai.com.