Privacy Notice

Dropsite is operated by Jorge Lucas Quaresma Veloso, an individual, who is the data controller for personal data of account holders described here. For data about people who view pages published by our customers, the customer who published the page is the controller and we process that data on their behalf.

Data we collect and why

• Account data (name, email, sign-in details): to create and secure your account and provide the Service. Legal basis: contract.
• Content you upload (pages, files, settings): to host and deliver your pages. Legal basis: contract.
• Page viewer data (email or client code entered at a gate, approximate location from network headers, browser, device, referrer, timestamps, reading time and scroll depth): to give page owners analytics and access control. We do not store visitors' IP addresses. Legal basis: the page owner's legitimate interests.
• Security and usage logs: to prevent fraud and abuse and improve the Service. Legal basis: legitimate interests.
• Support messages: to respond to you. Legal basis: contract and legitimate interests.
• Product emails: service notices and, where you agree, product updates. Legal basis: contract or consent.

Who we share data with

• Service providers that host and run the Service (cloud hosting, database, email delivery, and Slack when you connect it).
• Paddle.com, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

We do not sell personal data.

International transfers

Our providers may process data outside your country, including outside the EEA/UK. Where they do, we rely on safeguards such as standard contractual clauses or adequacy decisions.

Retention

We keep account data while your account is active and delete or anonymise it within 90 days after closure, unless the law requires longer. Analytics data is kept according to your plan's history period, then deleted or anonymised.

Your rights

Depending on where you live (including under the GDPR and Brazil's LGPD), you can request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time. You can also complain to your data protection authority. We respond within one month. Contact hello@freedomtobuild.tech.

Security

We use encryption in transit, access controls, hashed passwords, signed access cookies, rate limiting and audit logs to protect data.

Cookies

We use essential cookies only: to keep you signed in, and on hosted pages to remember that a visitor has unlocked a page and to count unique visits. We do not use advertising cookies. You can clear cookies in your browser, but protected pages will ask you to unlock them again.