Legal

Privacy Policy

Last updated October 2026

Summary: We collect what we need to run your storefront and your orders. We do not sell your data. Buyers' details go to the creator they bought from, so that creator can fulfill the order.

1. Who is responsible

Droplett LLC, a Delaware limited liability company, is responsible for the personal information described here.

2. What we collect

Creators

  • Account details: name, email address, password (stored hashed, never in readable form)
  • Storefront details: business name, city and state, bio, links, photos, listings
  • Ship-from address, used as the return address on labels and to price postage
  • Order and payout records
  • Referral details: the droplett link of the creator who invited you, if you signed up through an invite link, and the reward status of creators you invite

Buyers

  • Name, email address and shipping address, collected at checkout
  • Order contents and status
  • If you join a creator's notify list: your name, and your email address or phone number

Card details are entered directly with Stripe and never reach droplett's servers.

3. How we use it

  • To operate storefronts, process orders, and send order notifications
  • To quote shipping rates and produce shipping labels
  • To show creators their own sales figures and customer lists
  • To show visitors nearby storefronts first on Explore, using an approximate city-level location worked out from their internet connection. We don't store it
  • To respond to support requests and to prevent fraud and abuse

4. Who we share it with

  • The creator you bought from — your name, contact and delivery details, so they can fulfill your order
  • Stripe — payment processing and creator payouts
  • EasyPost and carriers — addresses and parcel details, to price and produce labels
  • Resend — to deliver transactional email
  • Apple — to deliver iPhone app notifications you've allowed
  • Photon (OpenStreetMap search by komoot) — the city a creator enters for their store, to place it on the map for Explore. Nothing else is sent
  • Supabase and Netlify — hosting and database infrastructure
  • Meta (Facebook and Instagram) — on droplett's home page and sign-up page only, a Meta Pixel measures which of our ads lead to creator sign-ups. It does not run on storefronts, checkout or the seller dashboard
  • Apps you connect, such as ChatGPT (OpenAI) — only after you approve the connection, and only the store information needed to carry out what you ask the app to do

We do not sell personal information. Apart from the Meta ad measurement described above, we do not share it for advertising.

5. Notify lists

Joining a creator's notify list means that creator can email you when they open a drop. Every notification includes an unsubscribe link, and you can leave a list at any time. Creators can see who is on their list; they may not use it for unrelated marketing.

6. Connected apps (including ChatGPT)

Creators can connect droplett to an app such as ChatGPT so it can set up and manage their storefront on their instructions. When you connect an app:

  • You approve it first. You sign in on droplett.com and choose Allow. The app never sees your password.
  • What we receive: the store details, listing details and photos you give the app, which we store the same way as anything you enter on droplett.com, plus your droplett account email to sign you in.
  • What the app receives: your store's details, listings and setup status, so it can answer and act on your requests.
  • What it can't reach: bank details, card information, identity documents, your password, or your buyers' payment information. Payouts are set up only on droplett.com or in the droplett iPhone app, directly with Stripe.
  • Your conversations stay with the app. We don't receive your chats; the app's own privacy policy governs what it keeps.
  • You can disconnect at any time from Account & Security. Disconnecting signs the app out straight away.

We use information received through a connected app only to run your storefront, and keep it for as long as your store exists, under the rest of this policy.

7. Referral Rewards

Creators with payouts connected can invite other creators with a link (droplett.com/join/their-link). When you sign up through an invite link:

  • We record who invited you, from the link you used. Referrals are only recorded at sign-up.
  • The creator who invited you can see your store name, photo and droplett link, the date you joined, which of the four setup steps you've completed, and whether their reward has been paid. They can't see your sales, buyers, bank details or account email.
  • Rewards are paid through Stripe to the inviting creator's payout account.
  • To prevent self-referrals, we compare a fingerprint Stripe provides for each store's payout bank account. We never see the account numbers.

8. The droplett iPhone app

  • Face ID. If you turn on Face ID, your iPhone checks your face itself. droplett never receives any biometric data. If you choose to log in with Face ID, your sign-in details are stored only in your iPhone's secure Keychain.
  • Camera and photos. The app uses your camera or photo library only when you choose to add a photo to your storefront or a listing.
  • Notifications. If you allow notifications, we store your iPhone's notification token so we can tell you about new orders, payouts, referral rewards and notify-list sign-ups. You can choose which ones in the app, or turn them off in your iPhone's Settings.
  • No ads or tracking. The app doesn't show ads and doesn't track you across other companies' apps or websites.

9. How long we keep it

Order records are kept while your account is open and afterwards where we need them for tax, accounting or dispute purposes. Notify-list entries are kept until you unsubscribe or the creator removes them.

10. Your choices

You can ask us to access, correct or delete your personal information by contacting us. Creators can edit most of their information directly in their dashboard. Some records must be retained where the law requires it.

Deleting your account. Creators can delete their account at any time from Account & Security, on droplett.com or in the iPhone app. Deleting takes your storefront down, frees your link, removes your listings, photos and notify list, closes your payout connection and ends your sign-in. Open orders and payouts still on their way need to be finished first. Order records are kept as described in section 9.

Remember me. If you turn off Remember me when you log in, we set a small cookie that ends when you close your browser, so we know to sign you out. droplett doesn't use cookies for advertising.

11. Security

Data is encrypted in transit. Database access is restricted by row-level security so creators can only read their own records. No system is perfectly secure, and we will notify affected users if a breach materially affects them.

12. Children

droplett is not intended for anyone under 18 and we do not knowingly collect information from children.

13. Changes

We will post any changes on this page and update the date above.

14. Contact

Privacy questions: contact us.