viddrop

Privacy Policy

Last updated: September 9, 2025

Notice: VidDrop is a US-based company that provides services globally. This Privacy Policy explains how we comply with international privacy laws including GDPR (EU), Australian Privacy Act, and US state privacy laws.

1. Information We Collect

Information You Provide

  • Account Information: Name, email address, studio/business name when you create an account
  • Payment Information: Payment details processed securely through Stripe (we do not store credit card information)
  • Video Content: Wedding videos and related files you upload to our service
  • Delivery Information: Couple names, wedding dates, delivery settings, and expiry preferences

Information We Collect Automatically

  • Usage Data: How you interact with our service, features used, and performance metrics
  • Device Information: Browser type, operating system, IP address, and device identifiers
  • Cookies: Small data files stored on your device (see our Cookie Policy for details)

2. How We Use Your Information

We use your information to:

  • • Provide, maintain, and improve our video delivery service
  • • Process payments and manage your account
  • • Store and deliver your video content to designated recipients
  • • Send important service notifications and delivery updates
  • • Provide customer support and respond to inquiries
  • • Comply with legal obligations and prevent fraud

3. Information Sharing

We do not sell, trade, or rent your personal information. We may share information in the following circumstances:

  • Service Providers: Trusted third parties who assist in operating our service (Cloudflare, Supabase, Stripe, Vercel)
  • Video Recipients: Couples and designated viewers can access the videos you share with them
  • Legal Requirements: When required by law, court order, or to protect our rights and safety
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

4. Data Storage and Security

  • Storage: Your data is stored securely on Cloudflare R2 and Supabase infrastructure
  • Encryption: All data is encrypted in transit and at rest
  • Access Controls: Strict access controls and authentication measures protect your information
  • Retention: Video files are automatically deleted after the expiry period you set (90-180 days)
  • Account Data: Account information is retained until you delete your account

5. Your Rights and Choices

Account Management

  • • Update your profile information anytime in account settings
  • • Delete your account and associated data
  • • Export your delivery data

Your Data Protection Rights

🇪🇺 European Union (GDPR) Rights

  • Right of Access: Request a copy of your personal data we hold
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to processing of your personal data
  • Right to Restrict Processing: Request limitation of processing
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

🇦🇺 Australian Privacy Act Rights

  • Access: Request access to your personal information we hold
  • Correction: Request correction of inaccurate, out-of-date, incomplete, or misleading information
  • Complaints: Lodge a complaint with us or the OAIC about privacy breaches
  • Anonymity: Option to interact anonymously where lawful and practicable

Note: New statutory tort provisions for serious privacy invasions take effect June 10, 2025

🇺🇸 US/California (CCPA/CPRA) Rights

  • Right to Know: What personal information we collect and how we use it
  • Right to Delete: Request deletion of personal information
  • Right to Opt-Out: Opt-out of sale or sharing of personal information
  • Right to Non-Discrimination: Equal service regardless of privacy choices

To exercise your rights: Contact us at privacy@viddrop.app with your specific request. We will respond within the timeframes required by applicable law (typically 30 days for GDPR, 45 days for CCPA).

6. Cookies and Tracking

We use cookies and similar technologies to:

  • • Maintain your login session
  • • Remember your preferences
  • • Provide security features

See our Cookie Policy for detailed information about our use of cookies.

7. International Data Transfers

VidDrop is operated from the United States. Your information may be transferred to, stored, and processed in the United States and other countries outside your country of residence, including countries that may not have data protection laws as comprehensive as those in your country.

For European Union Users

When we transfer personal data from the EU to the United States, we ensure appropriate safeguards are in place:

  • • EU-US Data Privacy Framework participation where applicable
  • • Standard Contractual Clauses (SCCs) approved by the European Commission
  • • Additional technical and organizational measures to ensure data security

You have the right to obtain a copy of these safeguards by contacting us at privacy@viddrop.app.

For Australian Users

We comply with Australian Privacy Principles (APPs) for cross-border data transfers:

  • • Contractual protections requiring US recipients to handle data in accordance with APPs
  • • Technical safeguards including encryption and access controls
  • • Regular audits of our data handling practices

If you have concerns about cross-border data transfers, contact us at privacy@viddrop.app or the Office of the Australian Information Commissioner (OAIC).

8. Children's Privacy

VidDrop is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

  • • Posting the updated policy on our website
  • • Sending an email notification to registered users
  • • Displaying a prominent notice in our service

Your continued use of VidDrop after changes take effect constitutes acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Email: privacy@viddrop.app

Address: VidDrop Privacy Officer

For data protection inquiries specifically related to GDPR, you may also contact your local data protection authority.