Privacy Policy

We may collect:

We use data to:

• Provide and maintain the Service
• Improve performance and reliability
• Monitor usage and analytics
• Ensure security and prevent abuse

Payments are processed by Paddle, which acts as our Merchant of Record and is the seller of record for your purchase. We do not store or process your full payment details ourselves.

Paddle may collect:

• Billing information
• Payment method details

Paddle's privacy policy applies: Paddle Privacy Policy.

We do not sell your data.

We share data only with sub-processors that help us operate the Service, including:

• Payment provider: Paddle (Merchant of Record)
• Cloud hosting and content delivery (Cloudflare)
• Transactional email delivery (Resend)
• Optional website analytics and advertising measurement (Google Analytics / Firebase Analytics and Google Ads)
• Developer console performance monitoring (Firebase Performance Monitoring)
• Legal authorities, where required by law

We maintain a current list of sub-processors and can provide it on request.

We retain data only as long as necessary to:

• Provide and operate the Service
• Comply with legal, tax, and accounting obligations

When you delete your organization or account, we delete the associated projects, bundles, and related data, except where we are required to retain certain records to meet legal obligations. We do not automatically delete your data solely because a subscription lapses or is canceled.

We implement appropriate security measures to protect your data.

However, no system is completely secure.

Depending on your location, you may:

• Request access to your data
• Request deletion
• Object to processing

Contact us to exercise these rights.

We use essential browser storage and cookies where needed for authentication, security, and preferences.

On the public Bundle Drop website and in the developer console, optional Analytics and Advertising measurement are disabled until you choose to allow them. Analytics helps us understand website and product usage and acquisition. If you also allow Advertising measurement, Google can use advertising storage, click identifiers and conversion information to connect actions such as signups to ad interactions and use those results in Google Ads. Advertising measurement requires Analytics. We do not set an Analytics user ID or enable personalized advertising or remarketing through these choices.

Your choice is stored in that browser for 12 months. You can withdraw or grant consent at any time through Cookie preferences in the website footer, or through the footer and User Settings in the developer console. Your choice is shared between bundledrop.app, www.bundledrop.app and developer.bundledrop.app through a preference cookie. Earlier grants require a fresh choice for the expanded optional purposes; an existing valid decline remains effective until its original expiry.

Our Cookie Policy explains the categories, storage and controls in more detail, including how Google uses information shared with its services. Withdrawing a choice stops future collection for that optional purpose; it does not automatically erase information already sent.

Technical performance monitoring

Firebase Performance Monitoring runs automatically in the production developer console, separately from optional website and product analytics. Allowing or declining optional cookie categories does not control this technical monitoring. We use it to measure selected API request times and browser loading performance so we can investigate reliability and speed.

Performance data includes request durations and outcomes, browser and network information, Firebase installation identifiers, country derived from IP addresses, and page URLs that may contain organization or project identifiers. These measurements are not fully anonymous. We send only selected request and browser measurements; automatic resource monitoring is disabled. We do not add account identities, request bodies, headers, credentials, access tokens, or form values to these measurements.

For details about the provider's processing, see Firebase Privacy and Security. You can contact us about this processing using the address below.

We may update this Privacy Policy.

Continued use means acceptance of changes.

support@bundledrop.app