Privacy Policy

Dropory ("Dropory", "we", "us") helps couples plan their wedding — keeping a checklist, finding and contacting suppliers, managing a controlled inbox, and building a simple wedding website. This policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices you have. We aim to collect only what we need to run the service.

We do not sell, rent or trade your personal data, and we never share your details with suppliers or anyone else for advertising or marketing.

We collect the following categories of information:

• Account information. Your name, email address and authentication details, handled through our sign-in provider (Clerk).
• Wedding details. Information you enter to plan your wedding, such as the couple's names, wedding date, location, guest count, budget and checklist items.
• Connected mailbox data. If you connect a wedding Gmail account, we access the messages needed to send supplier outreach and power your controlled inbox, with your permission and only for the scopes you grant.
• Supplier and outreach data. Suppliers you shortlist or contact, and the messages, replies and scheduling information generated through the service.
• Guest and RSVP data. Information about your guests that you add for RSVP tracking and your wedding website.
• Usage and device data. Basic technical information such as log data, device and browser type, and product analytics that help us keep the service reliable and improve it.

We use your information to:

• Provide, operate and maintain the service and your account;
• Personalise supplier messages, your dashboard and your wedding website;
• Send and receive supplier outreach on your behalf and manage your controlled inbox;
• Send you notifications and activity summaries you have asked for;
• Provide customer support and respond to your requests;
• Keep the service secure, prevent abuse and comply with our legal obligations.

We do not use your data for advertising, and Dropory shows no ads.

When you connect a Gmail account, we request access only to the permissions (scopes) needed to read, send and organise the email used for your wedding planning. We recommend creating a dedicated wedding-only Gmail rather than connecting a personal account. You can disconnect at any time from Settings, which immediately stops sending and syncing.

How we use Google user data. We use the Gmail data you grant access to solely to provide and improve the user-facing features described in this policy — sending supplier outreach on your behalf, powering your controlled inbox, and surfacing replies and scheduling information. We store this data securely and retain it only while your account is active and the Gmail connection is in place. When you disconnect Gmail or delete your account, we delete the associated Gmail data within a reasonable period, except where we are required to retain it to comply with the law.

Limited Use. Dropory's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not:

• use Google user data to serve advertisements, including targeted, personalised or retargeted advertising;
• sell, rent or trade Google user data, or transfer it to data brokers or information resellers;
• use Google user data to develop, train or improve generalised or non-personalised artificial intelligence or machine-learning models;
• transfer or disclose Google user data except as necessary to provide or improve these user-facing features, to comply with applicable law, or as part of a merger or acquisition of which we will notify you.

We do not allow humans to read your Gmail data unless: you give specific consent for particular messages; it is necessary for security purposes such as investigating abuse; it is necessary to comply with applicable law; or the data has been aggregated and anonymised for internal operations. Other than these cases, our use of Gmail data is limited to the automated processing required to run the features above.

We share information only in these limited situations:

• Service providers. Trusted vendors who process data on our behalf to run the service — for example authentication, email delivery, hosting and analytics — under contracts that require them to protect your data.
• Suppliers you contact. When you send an outreach message, the content you choose to send is delivered to that supplier. We never share your personal contact details with suppliers for marketing.
• Legal and safety. Where required by law, or to protect the rights, safety and security of Dropory, our users or the public.
• Business transfers. In connection with a merger, acquisition or sale of assets, in which case we will continue to protect your data and notify you of any change.

We keep your personal data for as long as your account is active or as needed to provide the service. You can ask us to delete your account and associated data, after which we will remove it within a reasonable period, except where we are required to retain certain information to comply with legal obligations or resolve disputes.

We use industry-standard technical and organisational measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to limit access to those who need it.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can manage much of your data directly in the app, including disconnecting Gmail and re-running onboarding. To make a request, contact us at the address below. You may also have the right to lodge a complaint with your local data protection authority.

We may process and store your information in countries other than where you live. Where we transfer personal data internationally, we take steps to ensure it remains protected in line with this policy and applicable law.

Dropory is not directed to children and is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app or by email. Your continued use of the service after changes take effect means you accept the updated policy.

If you have any questions about this Privacy Policy or how we handle your data, contact us at support@dropory.com.