Privacy Policy

Last updated: September 24, 2026

1. Introduction

Dropright Corp ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and delete information when you visit our website, when you contact us, when you use the Dropright platform, and when you connect a sales channel to Dropright so that we can fulfill and ship your orders.

This policy covers two different kinds of information. The first is information about you as a visitor to this website or as a Dropright customer. The second is information about your orders and your buyers that we receive from a marketplace or store you have connected to Dropright. We hold the second kind on your behalf, to carry out the fulfillment and shipping services you have asked us to perform.

2. Information We Collect

From website visitors. When you visit this website we collect certain information, and analytics data only where you accept analytics cookies:

From contact and support forms. When you fill out a contact or support form we collect the information you enter, including your name, email address, phone number, company, country, your estimated monthly order volume, the services you tell us you are interested in, and the content of your message.

From customers of the Dropright platform. When you open and use a Dropright account, we collect the information you give us directly: your name and contact details, your account credentials, your business and billing addresses, and, where you pay us by bank transfer, your bank account and routing numbers for billing.

From connected marketplaces and stores. When you authorize Dropright to connect a sales channel, we receive order and fulfillment data from that channel through its official application programming interface. Today that covers Shopify and the marketplaces you connect through ShipStation. Our Amazon connection is in development; once it is available and you authorize it, Dropright will receive that data from Amazon through the Amazon Selling Partner API (SP-API). We will add other marketplaces and store platforms as we support them. What we receive is limited to what is needed to fulfill and ship your orders:

We do not request or receive payment card numbers or bank account numbers from a connected marketplace. Where we hold bank account details, you gave them to us directly for billing, as described above.

3. How We Use Your Information

We use information collected through this website to:

4. How We Use Marketplace and Order Data

We use the order and fulfillment data we receive from a connected marketplace or store only to perform the fulfillment and shipping services you have asked us to perform, specifically to:

We do not sell marketplace or order data, we do not use it for advertising or marketing to your buyers, and we do not use it to build profiles for any purpose unrelated to fulfilling your orders. We do not combine one seller's marketplace data with another seller's, and we do not provide it to other parties except as needed to ship that seller's orders.

5. Marketplace and Order Data Retention

Amazon-sourced personally identifiable information. Personally identifiable information that Dropright receives from Amazon is retained for no longer than 30 days after order delivery, except where retention is required to fulfill orders, to calculate and remit taxes, to produce tax invoices and other legally required documents, or to meet legal or regulatory requirements. Where a longer retention period is required by law, we retain the information only for the purpose of complying with that law. Deletion requests from Amazon or from you are recorded when we receive them and completed within 30 days, unless a legal or tax obligation requires us to retain the information, in which case we tell you that and why.

Other marketplace and customer data. Order, customer, and shipping data that we receive from other connected marketplaces and from our customers is retained while the customer account is active, and after that only for as long as our tax, accounting, and legal obligations require.

Website and contact data. Analytics data is retained according to the retention settings of the analytics provider. Contact and support form submissions are retained for as long as needed to answer your inquiry and to keep a record of our correspondence with you. Our servers also keep technical logs, including reports our website receives when a browser flags a content-security issue on one of our pages; those reports contain the page address but not your IP address. These logs are kept only as long as needed to operate and secure the site.

6. Who We Share Data With

We share data only with the parties listed below, only for the purposes stated, and only to the extent needed for that purpose. We do not sell personal information, and we do not share it with third parties for their own marketing purposes.

7. Data Security

We implement reasonable administrative, technical, and physical measures to protect personal information. These include encryption of data in transit using TLS; encryption of credentials and access tokens at rest, field by field, using AES-256-GCM within the application database; role-based and organization-scoped access controls that limit what each account can reach; and error and audit logging of administrative actions. No method of transmission over the Internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.

8. Security Incidents

We investigate security incidents that affect personal information. Where an incident affects information we hold, we notify the customers concerned and, where the law requires it, the relevant authorities, without undue delay.

9. Your Rights

Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected, to have it deleted, to receive a copy of it in a portable format, and to object to or restrict how we process it. To exercise any of these rights, contact us using the details in the Contact Us section below. We record your request when we receive it and complete it within 30 days, unless a legal or tax obligation requires us to retain the information, in which case we tell you that and why.

If you are a buyer who placed an order on a marketplace and that order was fulfilled through Dropright, we hold your information on behalf of the seller you bought from. Contact that seller first, or contact us and we will work with the seller to answer your request.

10. Your Privacy Choices

Dropright does not sell or share personal information for cross-context behavioral advertising. If you would like to submit a do-not-sell or do-not-share request, or ask us to confirm that we do not, email [email protected] with the subject line "Privacy request" and tell us what you would like us to do.

When you first visit this website, a cookie notice asks whether you accept analytics cookies. Analytics cookies are set only if you accept; if you decline, or close the notice without accepting, no analytics cookies are set. You can change your mind at any time by clearing this site's cookies in your browser, which makes the notice appear again. Our Cookie Policy describes every cookie this site uses.

11. Children's Privacy

Our website is not intended for children under 13. We do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the date shown at the top of it.

13. Contact Us

If you have any questions about this Privacy Policy, or would like to exercise any of the rights described above, email [email protected] or contact us through our contact form.

cookie

Cookie Notice

We use analytics cookies to understand how this site is used, and we set them only if you accept. The cookies our forms need to stop spam are always on.

Cookie Policy