Privacy Policy

1. Who We Are

DropClaw (“we”, “us”, “our”) operates the marketplace at dropclaw.ai. We sell digital automation skills for e-commerce platforms.

2. Data We Collect

• Account data: Email address, display name, and avatar (when signing in via Google).
• Purchase data: Transaction records, download history, and payment metadata processed via Stripe.
• Analytics data: Page views and interaction events via PostHog (only with your consent).
• Technical data: IP address and user agent logged for download security auditing.

3. How We Use Your Data

• To process purchases and deliver digital products.
• To prevent fraud and unauthorized access to downloads.
• To send purchase confirmation emails via Resend.
• To improve our marketplace (analytics, with consent only).

4. Third-Party Processors

• Supabase: Authentication and database hosting (EU region).
• Stripe: Payment processing (PCI DSS compliant).
• Resend: Transactional email delivery.
• PostHog: Analytics (EU datacenter, consent required).
• Vercel: Website hosting (EU region).

5. Cookies

We use essential cookies for authentication (Supabase session tokens). Analytics cookies (PostHog) are only set after you grant consent via the cookie banner. You can change your preference at any time by clearing your browser storage.

6. Your Rights (GDPR)

If you are an EU/EEA resident, you have the right to:

• Access your personal data (via your dashboard or our data export feature).
• Rectify inaccurate data in your profile settings.
• Delete your account and associated data.
• Port your data in a machine-readable format.
• Object to analytics processing (decline cookies or contact us).

To exercise these rights, visit your dashboard settings or email us at privacy@dropclaw.ai.

7. Data Retention

Purchase records are retained for 7 years (tax/legal requirements). Account data is deleted within 30 days of account deletion request. Analytics data is retained for 12 months.

8. Contact

For privacy inquiries, email us at privacy@dropclaw.ai.