Privacy Policy Last updated: March 21, 2026
1. Introduction DropResolve ("we", "us", "our") operates the DropResolve service (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information.
We are committed to GDPR compliance. All data is hosted on EU servers (Supabase, Ireland).
2. Data We Collect Shopify Data: Orders, fulfillments, products (via Shopify API scopes: read_orders, read_fulfillments, read_products).Store Knowledge: Product descriptions, FAQs you upload.Customer Tickets: Incoming support messages (processed temporarily).Usage Data: Analytics (ticket volume, reply rates, anonymized).No PII: We do not store customer names/emails/addresses beyond processing.3. How We Use Your Data AI-powered replies to customer support tickets. Using your store knowledge base to generate contextually accurate AI replies (store-specific, not shared with other merchants). Escalations (complex tickets emailed to you). Service improvement (anonymized aggregates only). 4. Data Sharing We do NOT sell or share your data. Limited sharing only with:
Shopify (API callbacks). Resend (email escalations, EU servers). Supabase (database, DPA signed, Ireland). 5. Security & Storage EU-hosted (Supabase, Ireland, GDPR compliant). TLS 1.3 encryption in transit. Row-level security + encryption at rest. Regular audits + Vercel edge security. 6. Data Retention Store data: Until account deletion. Ticket data: 30 days (for quality review). Anonymized analytics: Indefinite. 7. Your Rights (GDPR) Email support@dropresolve.com to:
Access, correct, or delete your data. Request data portability (JSON export). Withdraw consent or object to processing. Lodge a complaint with the Dutch DPA (Autoriteit Persoonsgegevens). 8. Children's Privacy Our App is not intended for children under 16. No data is knowingly collected from children.
9. Changes to This Policy We will notify you via email of material changes. Continued use constitutes acceptance.
© 2026 DropResolve. All rights reserved.