Privacy Policy

Dropory ("Dropory", "we", "us") helps couples create and host wedding websites and manage guest RSVPs.This policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices you have. We aim to collect only what we need to run the service.

We do not sell, rent or trade your personal data, and we never share your details with suppliers or anyone else for advertising or marketing.

We collect the following categories of information:

• Account information. Your name, email address and authentication details, handled through our sign-in provider (Clerk).
• Website drafts and uploads. Prompts and website designs are stored in MongoDB, and uploaded photos and documents in Backblaze, including before signup. A secret draft key is stored in your browser so you can return to an anonymous draft.
• Guest responses. Names, email addresses, attendance for each event and answers to the couple’s custom questions, which can include food or accessibility preferences, are stored for the couple to manage their celebration.
• Payment and domain details. Stripe processes payment information. Dropory stores checkout references and hosting entitlement, without storing your card number. Domain search queries are sent to Namecheap when live lookup is configured; connection details are shared with the hosting provider.
• Invitation access. Website passwords are stored as hashes. After a correct password is entered, an essential cookie grants access for seven days.
• Usage and device data. Basic technical information such as log data, device and browser type, and product analytics that help us keep the service reliable and improve it.

We use your information to:

• Provide, operate and maintain the service and your account;
• Generate and update your website using OpenAI from the prompt, current design and reference files you submit;
• Host your published website and deliver guest responses to the couple;
• Send you notifications and activity summaries you have asked for;
• Provide customer support and respond to your requests;
• Keep the service secure, prevent abuse and comply with our legal obligations.

We do not use your data for advertising, and Dropory shows no ads.

We share information only in these limited situations:

• Service providers. Trusted vendors who process data on our behalf to run the service — for example authentication, email delivery, hosting and analytics — under contracts that require them to protect your data.
• Your website and its guests. Publishing makes the chosen website content accessible at its address, subject to an invitation password if enabled. RSVP responses are shared with the website’s account holder. Draft prompts and source documents are not published as attachments.
• Legal and safety. Where required by law, or to protect the rights, safety and security of Dropory, our users or the public.
• Business transfers. In connection with a merger, acquisition or sale of assets, in which case we will continue to protect your data and notify you of any change.

We keep your personal data for as long as your account is active or as needed to provide the service. You can ask us to delete your account and associated data, after which we will remove it within a reasonable period, except where we are required to retain certain information to comply with legal obligations or resolve disputes.

Anonymous website drafts expire after seven days and are removed, along with their uploaded files, by our scheduled cleanup. Creating an account removes that expiry. Draft access is lost if its browser key is cleared before signup. OpenAI and other service providers may retain operational data under their own service terms.

We use industry-standard technical and organisational measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to limit access to those who need it.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can manage your website content and account directly in the app. To request deletion or other data changes, contact us at the address below. You may also have the right to lodge a complaint with your local data protection authority.

We may process and store your information in countries other than where you live. Where we transfer personal data internationally, we take steps to ensure it remains protected in line with this policy and applicable law.

Dropory is not directed to children and is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app or by email. Your continued use of the service after changes take effect means you accept the updated policy.

If you have any questions about this Privacy Policy or how we handle your data, contact us at support@dropory.com.