Privacy Policy
This policy explains what information we handle, why we handle it, and the choices you have when working with Dropout Studio.
Information We Collect
We collect information you provide directly and limited technical data needed to run the site:
- Name, email address, phone number, company details, and other information you provide through onboarding, the referral form, email, or other direct communication.
- If you submit a referral, we store the referrer and prospective client's contact details, relationship and context you provide, and the referrer's selected payout method and required payout details so we can administer the program.
- Project goals, scope, timelines, budgets, and references you provide during discussions or onboarding.
- If you use our onboarding flow, draft responses and a generated upload-session identifier are stored in your browser local storage for up to seven days, unless submitted, replaced, removed, or cleared sooner.
- Optional images and PDFs are uploaded privately before submission. Provisional files use the `onboarding-pending/` object prefix, and removing one requests immediate deletion. Unsubmitted pending objects have an eight-day lifecycle target, but production enforcement has not yet been independently verified. Submitted files remain private and are linked to the inquiry.
- We may process IP address, browser / device context, and Cloudflare request country code to operate the site, including regional pricing display behavior. We also store `lastLoadingScreenShown` in local storage for loading screen frequency control.
How We Use Your Information
We use collected information to operate our services responsibly and communicate clearly:
- To respond to emails, answer questions, and continue requested conversations.
- To evaluate project fit, prepare estimates, and draft statements of work.
- To plan, execute, and support design and development work under our client agreements.
- To maintain site reliability, troubleshoot issues, and protect against misuse.
- To retain records needed for contractual, accounting, dispute, or legal obligations.
Information Sharing
We do not sell personal information. We share information only when needed to run the business or comply with law. The public marketing site does not offer customer accounts or take payments directly:
- With vendors that support hosting, communications, and core operations, under appropriate contractual safeguards.
- With advisors or contractors who need access to help deliver services and are bound by confidentiality obligations.
- When disclosure is required by law, regulation, legal process, or to protect rights and safety.
- As part of a merger, acquisition, restructuring, or asset transfer, subject to applicable legal protections.
- Our pages may include links to external websites and embedded storefront demos (including iframes). Those third parties may process data under their own terms and privacy policies.
Data Security
We use reasonable technical and organizational safeguards designed for the nature of our business. No internet transmission, storage system, or software environment can be guaranteed fully secure.
Your Rights
Depending on your location and applicable law, you may have privacy rights such as:
- Request information about the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of personal data, subject to legal and contractual limits.
- Ask us to limit certain processing, or object where permitted by applicable law.
- Withdraw consent where processing is consent-based and contact your local authority if you believe your rights were violated.
AI Chatbot Conversations
When you use the AI chatbot, we store conversation data and process limited technical data needed to answer, provide chat history, and prevent abuse:
- We store message text, generated session and conversation identifiers, the source application, timestamps, and metadata for uploaded images such as file name, type, and original size. A browser copy of the active chat is saved in local storage with a 24-hour expiry so you can continue the conversation.
- The chat endpoint processes your IP address for rate limiting and the Cloudflare request country code for regional response context. Public chat does not require an account, name, or email address, but personal information you type into a message may be stored as part of that message.
- The chatbot and authorized team members may use conversation data to answer requests, maintain chat history, prevent misuse, and improve our website and services. Cloudflare infrastructure and AI services process chat and attachment data to operate the feature. We do not sell chat data or use it for advertising.
- Chat messages are not automatically redacted before storage. Do not enter passwords, financial details, confidential business data, or other sensitive personal information.
- Server-side conversation records remain until you delete them from chat history or we remove them during maintenance; we do not promise a fixed automatic deletion period. You can also contact support@dropoutstudio.co about a privacy request. Using the chatbot is optional.
Data Retention
We retain information for as long as reasonably needed to handle inquiries, perform contracted work, maintain required accounting and legal records, and resolve disputes. Browser-stored onboarding drafts and their upload-session identifiers expire after up to seven days or are removed sooner when submitted, replaced, removed, or cleared. Loading-screen data remains on your device until replaced or cleared.
Changes to This Policy
We may update this policy periodically to reflect operational, legal, or product changes. Updates are posted on this page, and the "last updated" date shows when the latest revision became effective.
Contact Us
For privacy questions, data requests, or concerns about this policy, contact us at support@dropoutstudio.co.