This Privacy Policy describes how Dropzone ("we," "us," or "our") collects, uses, stores, and protects your personal information when you use our platform and services (the "Service"). By using the Service, you consent to the practices described in this policy.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address
- Name (if provided via social sign-in)
- Phone number (used for SMS verification during registration)
- Authentication credentials (managed by our authentication provider — we do not store passwords directly)
1.2 Profile Information
To provide personalized outreach, you may provide:
- Resume text or uploaded resume files (PDF/DOCX), including LinkedIn profile PDFs
- Full name, job function, job role, and personal location
- LinkedIn profile URL and contact email
- Target industries, company sizes, market segments, revenue ranges, and locations
- Target roles and outreach preferences
- Custom instructions for email generation, LinkedIn messaging, and company matching
1.3 Email Data
If you choose to connect your email account, we collect:
- Your email address and an encrypted authorization credential
- Emails within your designated Dropzone folder
- Email thread metadata for reply detection
Important: We only read emails within the Dropzone-designated folder. We do not read, scan, or store the contents of your general inbox. Extracted data is limited to structured fields (company name, job title, location, salary range) — we do not store raw email content.
1.4 Outreach Data
When you create outreach through the Service, we store:
- Recipient name, company, title, email address, and LinkedIn profile URL (when available)
- Email subject and body, and LinkedIn message content (both AI-generated versions and your edits)
- Outreach status (draft, approved, sent, replied) and delivery channel (email or LinkedIn)
- Email templates you create
1.5 Learning Data
To improve AI-generated emails over time, we store:
- Original AI-generated email content
- Your edited versions
- AI-inferred feedback from your edits
This data is used exclusively to personalize future email generation for your account and is not shared with other users.
1.6 Usage, Billing, and Support Data
- Credit balance and transaction history
- Service usage metrics (searches performed, contacts unlocked, emails generated)
- Payment method metadata (card brand and last four digits only — we do not store full card numbers)
- Support tickets and feedback submissions (including category and description)
1.7 Chat Research Assistant
When you use the Chat research assistant, we process your messages in real time to search for companies, find contacts, and draft outreach on your behalf. We do not store the content of your chat messages. Instead, we use automated processing to extract only structured, non-personal metadata from each interaction, such as:
- Industry categories, job roles, and locations referenced (e.g., "fintech," "marketing director," "NYC")
- Company attributes mentioned (e.g., "startup," "50-200 employees")
- The type of actions performed (e.g., company search, contact unlock)
- Whether the assistant was able to fulfill your request
This extracted metadata contains no free-text from your messages and is used solely to improve the platform's capabilities. Your chat messages are sent to our AI provider for real-time processing but are not stored by Dropzone after the conversation ends.
1.8 Automatically Collected Information
- Browser storage for UI preferences and temporary navigation state
- Anonymized usage analytics, including page views, feature usage events, and device/browser info
1.9 Cookies and Similar Technologies
We use the following cookies and browser storage:
- Authentication cookies: Our authentication provider uses cookies to maintain your login session
- Analytics cookies: We use analytics cookies to track anonymized usage patterns
- Bot protection: reCAPTCHA may set cookies during verification to assess risk
- Local/session storage: Used for UI preferences and temporary navigation state (not shared with third parties)
2. How We Use Your Information
We use your information to:
- Provide the Service: Generate personalized outreach emails, score company matches, run the autonomous agent, and send emails on your behalf
- Improve AI quality: Use your editing history to personalize future email generation for your account
- Process payments: Manage credit purchases and billing through Stripe
- Maintain and improve the Service: Monitor usage for platform stability, diagnose technical issues, and improve features. This includes analyzing abstracted, non-personal metadata from chat interactions to identify unmet user needs and improve platform capabilities
- Communicate with you: Send account-related notifications (e.g., credit balance alerts, service updates)
We do not sell, rent, or trade your personal information to third parties.
3. Third-Party Services
The Service uses third-party providers for the following purposes:
- Cloud infrastructure: Hosting, data storage, and authentication
- Data enrichment: Company and contact information
- AI generation: Email generation, match scoring, and autonomous agent
- Email: Sending, scanning, and reply detection
- Payment processing: Credit purchases and saved payment methods
- Analytics: Anonymized usage analytics
We share only the minimum data necessary for each provider to perform its function. We do not share your full resume or outreach history with any third party beyond what is required for a specific operation (e.g., providing company context to our AI provider for email generation). Each provider is subject to their own privacy policy.
4. Data Storage and Security
- Infrastructure: All data is stored on secure cloud infrastructure in the United States with encryption at rest
- Authentication: Managed by an industry-standard authentication provider — we do not store passwords directly
- Credentials: Email authorization tokens and API keys are encrypted before storage
- Payments: Handled entirely by our payment processor — we never see or store full credit card numbers
While we implement reasonable security measures to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
5. Google API Data Usage Disclosure
Dropzone's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We only access Google user data that the user has explicitly authorized
- We limit our use of this data to providing and improving the user-facing features of Dropzone
- We do not transfer this data to third parties except as necessary to provide the Service (e.g., sending an email you approved)
- We do not use this data for advertising purposes
- Human access to this data is limited to debugging with user consent, investigating security incidents, or complying with legal obligations
6. Data Retention
- Active accounts: We retain your data for as long as your account is active
- Deleted accounts: Upon account deletion, we permanently delete your profile, outreach records, templates, learning data, email connection, saved companies, and agent results. Anonymized usage logs may be retained for up to 90 days for platform analytics
- Financial records: Credit purchase and transaction records are anonymized (not deleted) upon account deletion and retained for accounting and tax compliance purposes
- Temporary caches: Match scores and other cached data expire automatically within days
7. Your Rights
You have the right to:
- Access your data: View your profile, outreach records, and usage history through the Service
- Correct your data: Update your profile, resume, and preferences at any time
- Delete your data: Delete your account directly from the Account page in the app, or by contacting us at support@getdropzone.io
- Disconnect email: Revoke email access at any time from within the app, which deletes stored credentials
- Export your data: Request a copy of your data by contacting us at support@getdropzone.io. We will respond to data export requests within 30 days
California residents may have additional rights under the CCPA. To exercise any of these rights, contact us at support@getdropzone.io.
8. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.
9. International Data Transfers
The Service is hosted in the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.
10. European Users (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- Legal basis: We process your data based on your consent (e.g., connecting Gmail), contractual necessity (e.g., providing the Service you signed up for), and legitimate interests (e.g., platform security and improvement)
- Right to erasure: You may delete your account at any time, which permanently removes your personal data as described in Section 6
- Right to restriction: You may request that we restrict processing of your data
- Right to portability: You may request your data in a machine-readable format
- Right to object: You may object to processing based on legitimate interests
- Right to lodge a complaint: You may file a complaint with your local data protection authority
To exercise any of these rights, contact us at support@getdropzone.io.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. The "Effective Date" at the top of this page indicates when the policy was last revised.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, contact us at:
Dropzone
Email: support@getdropzone.io