DropPost is operated by Nameless Investments, Inc ("DropPost," "we," "us," or "our"). This policy explains what information we collect when you use DropPost, how we use it, who we share it with, and the choices you have. By creating a DropPost account, you agree to this policy.
1. What we collect
We collect only what's needed to run the service you sign up for:
- Account information: business name, email address, and a securely hashed password. We never store your password itself.
- Connected platform tokens: when you connect Dropbox, Facebook, Instagram, X, or TikTok, we store the access credentials those platforms issue to us on your behalf, encrypted at rest. We never see or store your passwords for those platforms — authorization happens directly through each platform's own login screen.
- Content you choose to automate: the photos and videos you place in your connected Dropbox folder, solely for the purpose of captioning and publishing them to the platforms you've connected. We generate a lightweight thumbnail for AI captioning; we do not retain a separate copy of your original media on our servers.
- Caption and posting activity: the captions generated for your posts, which platforms and accounts they were published to, and whether each attempt succeeded.
- Billing information: our payment processor (Stripe) handles your payment details directly. We store only your subscription status and plan — never your card number.
- Basic usage data: login timestamps and the AI processing cost associated with your account, so you can see what you're using.
2. How we use it
- To generate captions for your content and publish it to the platforms you've connected.
- To operate, maintain, and secure your account.
- To bill you for your subscription.
- To communicate with you about your account or the service (e.g. a failed post, a billing issue).
We do not sell your data, and we do not use your content to train any AI model.
3. Who we share it with
We share the minimum necessary information with the following service providers, solely to operate DropPost on your behalf:
- Dropbox, Meta (Facebook/Instagram), X, and TikTok — to receive your files and publish your posts, using the connection you authorized.
- OpenAI — to analyze your content's thumbnail and generate a caption, if you've selected OpenAI as your captioning provider.
- Stripe — to process your subscription payment.
We do not share your information with anyone else, except where required by law.
4. Security
Every connected platform token is encrypted at rest (AES-256-GCM). Passwords are hashed, never stored in plain text. Access to your account is protected by a session cookie that is never exposed to JavaScript on the page (HttpOnly). No system is perfectly secure, but we design DropPost so that a database compromise alone does not expose usable credentials.
5. Data retention
We retain your account and posting history for as long as your account is active. If you disconnect a platform, its stored credentials are deleted immediately. If you delete your account (see below), we delete your account data, connected credentials, and posting history within 30 days, except where we're required to retain billing records for legal or tax purposes.
6. Your choices
- Disconnect any platform at any time from your Connect Accounts page — this immediately deletes the stored credential for that platform.
- Delete your account by contacting us at support@droppost.ai. See our Data Deletion page for details.
- Request a copy of the personal data we hold about you by contacting us at the address below.
7. Children's privacy
DropPost is a business tool and is not directed at, or intended for use by, children. We do not knowingly collect information from anyone under 16.
8. Changes to this policy
If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, notify you by email.
9. Contact us
Questions about this policy or your data? Email us at support@droppost.ai.