Legal

Privacy Policy

Last updated: June 11, 2026

This policy explains what data Droptop ("we") collects when you use droptop.ai and the Droptop service, how we use it, and the choices you have.

1. Data we collect

• Account data. Your email address and basic profile details you provide when signing up or joining the waitlist.
• Connected platform data. When you connect a platform (such as TikTok) through its official OAuth flow, we receive an access token and the basic profile information that platform shares (for example your username, display name and avatar). We never see or store your platform passwords.
• Content you compose. Drafts, media, captions and schedules you create in Droptop so we can publish them where you tell us to.
• Performance metrics. Engagement data for content you publish (such as views, likes, comments, saves and shares), retrieved from each platform's API to power your analytics scoreboard.
• Usage data. Standard logs (IP address, browser type, pages viewed) used for security and to improve the Service.

2. How we use data

• To operate the Service: publishing your content to the platforms you choose, on your instruction, and showing you its performance.
• To secure accounts, prevent abuse, and debug problems.
• To email you about the Service (such as your early-access invite). No marketing spam.

We do not sell your personal data, and we do not use your content or your audience's data for advertising.

3. TikTok and other platform integrations

Droptop integrates with TikTok via the official TikTok for Developers APIs (including the Content Posting API and Display API). Content is uploaded or published to your TikTok account only when you initiate it. Metrics are retrieved only for content associated with your account, using the scopes you approved. You can revoke Droptop's access at any time from TikTok's app settings (Settings → Security → Apps), which immediately invalidates our access token. The same model applies to other connected platforms.

4. Storage and retention

Data is stored with reputable cloud infrastructure providers in the United States, encrypted in transit. Access tokens are stored encrypted at rest. We retain your data while your account is active. If you delete your account, disconnect a platform, or ask us to delete your data, we delete the associated tokens, drafts and metrics within 30 days, except where a short retention is legally required.

5. Sharing

We share data only with: (a) the platforms you connect, as needed to publish your content and read its metrics; (b) infrastructure vendors that host the Service under confidentiality obligations; and (c) authorities if legally compelled. That's the whole list.

6. Your choices

• Disconnect any platform at any time, in Droptop or from the platform's own settings.
• Request a copy or deletion of your data by emailing support@droptop.ai.
• Unsubscribe from any email with one click.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect their data.

8. Changes

We may update this policy and will post changes here with a new "Last updated" date. Material changes will be highlighted on this page or by email.

9. Contact

Privacy questions: support@droptop.ai.