DataDrop

Privacy Policy

Effective date: March 11, 2026

1. Introduction

DataDrop (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use the DataDrop platform (“Service”).

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, and password. If you sign up with Google, we receive your name, email, and Google account identifier.

Warehouse Credentials

To provide the Service, you may supply database connection credentials (hostnames, usernames, passwords, tokens, IAM role ARNs, service account keys). These are encrypted at rest and used solely to connect to your warehouses on your behalf.

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, report run history, and delivery timestamps. This data helps us improve reliability and performance.

Customer Data

DataDrop processes query results from your data warehouses to deliver them to your S3 buckets. We do not retain Customer Data after delivery is complete. Query results are streamed or temporarily staged and then deleted.

3. How We Use Your Information

  • Provide, operate, and maintain the Service
  • Authenticate your identity and manage access
  • Execute scheduled queries and deliver results to your S3 buckets
  • Send transactional emails (delivery receipts, notifications, password resets)
  • Monitor and improve Service performance and reliability
  • Respond to support requests
  • Comply with legal obligations

4. Data Sharing

We do not sell your personal information. We may share information with third parties only in the following circumstances:

  • Service providers — Infrastructure and tools we use to operate the Service (cloud hosting, email delivery, error tracking), subject to confidentiality obligations.
  • Legal requirements — When required by law, regulation, or legal process.
  • Business transfers — In connection with a merger, acquisition, or sale of assets, with notice to affected users.

5. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption of credentials at rest and in transit (TLS)
  • HTTP-only, secure cookies for session management
  • bcrypt password hashing
  • Role-based access controls
  • Security headers (HSTS, X-Frame-Options, Content-Security-Policy)

No system is perfectly secure. If we become aware of a security breach affecting your data, we will notify you promptly.

6. Data Retention

We retain your account information for as long as your account is active. Run history and delivery metadata are retained for operational purposes. Upon account deletion, we remove your personal data within 30 days, except where legally required to retain it.

Customer Data (query results) is not stored permanently. It is temporarily staged during export and deleted after delivery to your S3 bucket.

7. Cookies

DataDrop uses essential cookies for authentication and session management. We do not use advertising or tracking cookies. Essential cookies are strictly necessary for the Service to function and cannot be disabled.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Export your data in a portable format
  • Object to or restrict certain processing

To exercise these rights, contact us at privacy@getdatadrop.com.

9. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The “Effective date” at the top indicates when the policy was last revised.

11. Contact

Questions or concerns about this Privacy Policy? Contact us at privacy@getdatadrop.com.